The Business of Cyber Security
How Sell-Side and Buy-Side Processes Run
Every M&A advisory mandate is one of two types. A sell-side process is a time-boxed, competitive auction whose goal is to maximize price and certainty for one seller against many buyers. A buy-side process is a continuous search-and-acquire program whose goal is to find and win the right target for one buyer against the market. They share a vocabulary (LOI, diligence, SPA) but run on opposite logic: the sell-side advisor manufactures competition; the buy-side advisor avoids it.
The sell-side process
The seller's advisor produces a stack of artifacts and runs a clock. Preparation (4–8 weeks): a teaser (one-page anonymized profile), a CIM (confidential information memorandum — the full equity story), a financial model (historical + projections, normalized for ARR/NRR/Rule-of-40 — see 02a), a populated data room, and a buyer list segmented into strategics, sponsors, and CVCs (built from the 11b buyer-universe matrix and 08 CVC portfolios). Marketing (3–5 weeks): outreach under NDA, CIM distribution, and collection of IOIs (indications of interest — non-binding price ranges). Management meetings → LOIs: shortlisted buyers meet management; the advisor solicits letters of intent (a price plus structure, usually with a request for exclusivity). Confirmatory diligence: the winning bidder runs commercial, financial, legal, and technical diligence (CDD) under exclusivity. Signing & close: the SPA (share/asset purchase agreement) is negotiated — reps and warranties, indemnities, escrow, earn-outs (Deal Structures) — then signed and, after any regulatory clearance, closed. The advisor's entire job is to preserve a credible alternative (a "stalking horse" or live second bidder) right up to signing, because the moment a seller has only one buyer, price discovery ends.
The buy-side process
The buy-side machine runs in the opposite direction and never really stops. Where the seller wants an auction, the buyer wants a proprietary, bilateral conversation — to acquire before a banked process forces a bidding war. The stages: thesis (what capability/market does the buyer need, and why — see Buy-Side Prospect Framework); sourcing & screening (build and continuously refresh a target universe against the thesis; score on strategic fit, financials, and acquirability); approach (a warm, often founder-to-founder or operator-led outreach — the antithesis of a CIM blast); valuation & structure (anchor on precedent comps (11a) and trading comps (12a)); LOI; diligence (the buyer commissions CDD, financial, legal, tech); financing (equity + leverage — see Private Credit); and negotiation → close. The buy-side advisor's edge is origination and access — surfacing the right target before anyone else and getting a credible first meeting — not running a process.
| Dimension |
Sell-side |
Buy-side |
| Goal |
Maximize price + certainty for one seller |
Win the right target for one buyer, ideally pre-emptively |
| Logic |
Manufacture competition (auction) |
Avoid competition (proprietary, bilateral) |
| Tempo |
Time-boxed sprint (~4–9 months) |
Continuous program (always-on) |
| Key artifact |
CIM / teaser / buyer list |
Target universe + scored pipeline + thesis |
| Advisor's edge |
Process control + buyer reach |
Origination + access + diligence support |
| Fee model |
Success fee on close (Lehman-style) |
Retainer ± success fee (program) |
Where the work compresses
Both processes are, mechanically, information-assembly and relationship-routing problems — exactly the work an AI-native stack compresses. On buy-side, the sourcing and screening loop — maintaining a live target universe, scoring fit, and monitoring trigger events — is the program's heartbeat, and it is precisely what the Cyber Ecosystem Graph + monitoring/alerts automate. The human edge (judgment, relationships, negotiation) is preserved; the manual assembly is not.
→ angle
→ Cross-references: Banks & Advisors, Advisory Landscape, Comps Methodology, Buy-Side Prospect Framework, Deal Structures, Commercial Due Diligence.
Updated 2026-08-16 18:13 UTC · © El Dorado Capital · el-doradocapital.com · Market intelligence for informational purposes only; not investment advice.