> Also, from my experience for these sorts of Tech deals, the level of due diligence conducted before an exit by potential buyers can be extensive, so I doubt t

> Also, from my experience for these sorts of Tech deals, the level of due diligence conducted before an exit by potential buyers can be extensive, so I doubt they'd let the security parts of a security business go bad. Due diligence conducted by whom? If you've worked at any corporation, you will know that most organizations treat "Security" as a "Cover your ass" org. Security teams exist firstly to prevent the company from going under due to incidents; actual protection of production systems is an afterthought. Consequently, you will have corporations touting all kinds of certifications while their production systems continue to e.g. use md5 hashes for user passwords. I would ask that you reconsider your views. You would think the buyer in these transactions would conduct due diligence, but consider that the people who are technically competent to do a thorough due diligence are few in number. It is in everyone's interest to let the transaction go through; the security due diligence happens after the decision has been made and rarely can break a deal.