Due Diligence
The Hidden Cost of Investing in Poorly Written Software
How a weak codebase can turn a promising investment into a remediation programme that consumes capital, time, and management attention.
Investing in a software business can look attractive on paper. The product has customers, revenue, market position, and a roadmap that supports the investment thesis.
Then the investor inherits exposure to the codebase.
If the application is poorly written, the hidden cost may not appear immediately in the financial model. It appears later as slower delivery, missed roadmap milestones, higher support cost, security remediation, staff dependency, integration delays, and management attention diverted away from growth.
Poor software does not just create engineering inconvenience. It can derail the investment.
The Investment Amount Is Not the Total Cost
The capital committed to a software business is only one part of the economics.
The investor also takes on exposure to the cost of operating, maintaining, securing, integrating, and improving the application. A weak codebase increases all of those costs.
The problem is that those costs often arrive after the transaction:
- New features take longer than expected.
- Customer commitments require architecture work that was not planned.
- Security gaps need urgent remediation.
- Cloud and infrastructure costs are higher than assumed.
- Integration with an investor, acquirer, or strategic partner's platform is more difficult than expected.
- Key engineers become essential to basic operations.
By the time those costs are visible, the investment decision has already been made.
Poor Code Slows the Growth Plan
Most software investments depend on change.
The plan may be to enter new markets, add enterprise features, improve margins, integrate acquisitions, consolidate platforms, or accelerate product delivery. A poorly written application makes each of those moves slower and riskier.
The immediate issue is not whether the code looks elegant. The issue is whether the team can change it safely.
Warning signs include:
- Important workflows with little or no automated test coverage.
- Business rules spread across unrelated modules.
- Large files or services with unclear responsibilities.
- Data models that do not support the planned product direction.
- Manual release or migration steps.
- Heavy reliance on one or two engineers who understand the system.
These are not cosmetic issues. They affect the investment timeline.
Technical Debt Consumes Management Attention
Poorly written software creates a constant stream of decisions.
Should the team patch the old system or replace it? Should customer commitments be delayed? Should the roadmap pause for stabilisation? Should leadership hire more engineers, bring in consultants, or accept slower delivery?
Each decision consumes attention that was supposed to go toward growth.
This is one of the most underestimated costs of bad software: it changes the operating rhythm of the acquired business. Leadership spends more time managing risk, explaining delays, and renegotiating expectations.
Integration Can Become the Real Project
Many investments assume that the application can be integrated into a broader platform, operating model, reporting structure, or customer offering.
Poor architecture can turn that assumption into a major project.
Integration becomes difficult when the application has unclear APIs, shared databases, hard-coded customer logic, weak authentication boundaries, undocumented batch jobs, or inconsistent data ownership. What looked like a growth investment becomes a platform remediation effort.
This matters because integration delays reduce the strategic value of the deal.
Security and Compliance Can Change the Deal Economics
Security issues in acquired software can create urgent post-close work.
Outdated dependencies, weak access controls, missing audit trails, poor secrets management, unclear data flows, and limited incident response history can all affect customer trust and enterprise readiness.
For regulated industries or enterprise SaaS products, security gaps may directly block sales, renewals, or integration with larger customers.
The cost is not only remediation. It is delayed revenue and reduced confidence.
The Team May Not Be Able to Scale the System
A poorly written application often depends on tribal knowledge.
The product works because a small number of people know which scripts to run, which logs to check, which customer exceptions matter, and which parts of the code should not be touched.
That may be manageable before investment. It becomes risky when the investor expects scale.
If the team cannot onboard new engineers, explain core workflows, or change the system without specific individuals, the business has a key-person dependency hidden inside the platform.
Rewrites Can Make the Problem Worse
The obvious reaction is to rewrite the application.
That can be necessary in some cases, but it is rarely a quick fix. A rewrite adds cost, delays product work, creates parallel operating burden, and risks losing business rules embedded in the old system.
The better first step is usually investigation:
- Which parts of the application are commercially important?
- Which parts are stable enough to leave alone?
- Which risks need immediate remediation?
- Which workflows need tests before change?
- Which architecture boundaries should be improved first?
Without that understanding, a rewrite can become another investment risk.
What Investors Should Look For Before Committing
Technical due diligence should identify whether the application can support the investment plan.
Important questions include:
- Can the team release safely and predictably?
- Are the most important workflows covered by meaningful tests?
- Are dependencies maintained and security risks understood?
- Does the architecture support the product roadmap?
- Can new engineers understand and change the system?
- Are data flows, integrations, and ownership boundaries clear?
- What would need to be fixed in the first 30, 60, and 90 days?
The goal is not to find a perfect codebase. The goal is to understand the true cost of ownership.
How Poor Software Derails an Investment
Poorly written software derails investments by changing the allocation of capital and attention.
Money expected to fund growth goes into remediation. Engineers expected to build product are pulled into stabilisation. Leadership expected to execute the thesis spends time managing delivery risk. Customers expected to receive new capability wait for the platform to catch up.
The investment may still succeed, but the path becomes longer, more expensive, and less certain.
That is why software quality belongs in the investment conversation. A codebase is not just a technical asset. It is an operating constraint, a risk profile, and a claim on future capital.
Investing in software means investing in the cost of changing it.
Back to blog posts