Defence Tech Investing: What Diligence Must Catch

Venture capital poured $12.3 billion into defence technology startups in the first half of 2026 alone — nearly matching the $9.95 billion invested across all of 2025. Drones, autonomous vessels and battlefield AI are absorbing capital at a pace few sectors have seen. And as PitchBook and S&P Global both note, that surge is running in one direction while exits run in another: venture funding into the sector is climbing while M&A activity — the point where a buyer's diligence team would normally stress-test a target — is slowing down.

That gap matters. Capital is reaching defence-adjacent companies faster than the ownership, compliance and reputational checks that would normally accompany it. For institutional investors, VCs, family offices and corporate development teams underwriting these deals, the question is no longer whether the sector is worth funding. It's whether the target company is who — and what — it appears to be before the wire goes out.

Key takeaways

• Defence tech VC funding nearly doubled in H1 2026 alone ($12.3B, versus $9.95B for all of 2025) while M&A activity — where diligence usually gets stress-tested — is slowing. Capital is outpacing verification.
• Defence and dual-use deals carry risk categories standard commercial diligence often misses: PEP and corruption exposure, sanctions and export-control links, proliferation financing, and AML exposure.
• Beneficial ownership has to be traced past the cap table to the individuals who actually control and benefit from a company — a clean database search is not sufficient evidence.
• Regulatory pressure, including the EU's anti-corruption directive approved in March 2026, means investment committees increasingly need a documented diligence trail, not a one-time clean check.
• A real engagement shows the cost of skipping this: a co-founder's undisclosed ties to a Russian-linked, sanctioned gambling operation surfaced only through OSINT-based diligence — after standard screening had already come back clean.
• The fix is source-based, human-verified due diligence run before capital moves, not remediation after.

Why defence tech carries a different risk profile

Defence and dual-use technology investing sits at the intersection of two things most diligence processes weren't built to handle at speed: government counterparties and cross-border ownership.

As legal advisers covering the sector have pointed out, defence deals carry elevated exposure across several distinct risk categories that a standard commercial due diligence process can miss entirely:

• Corruption and bribery risk, heightened by direct interaction with government end-customers and politically exposed persons (PEPs) across the contracting and subcontracting chain.
• Sanctions and export-control exposure, which requires tracing ultimate beneficial ownership — not just the name on the cap table — to confirm no prohibited party sits behind the structure.
• Proliferation-financing risk, where front companies and intermediaries can obscure the true destination of capital, equipment or components.
• Anti-money-laundering exposure, particularly where ownership and financial flows cross jurisdictions with limited transparency.

None of these show up in a standard database check or a clean search result. They show up in beneficial ownership mapping, adverse-information screening and source-verified, on-the-ground research — the kind that takes longer than a term sheet deadline allows, which is exactly why it gets compressed or skipped when capital is moving this fast.

The regulatory backdrop is tightening at the same time capital is accelerating. The EU's anti-corruption directive, approved in March 2026, requires member states to strengthen bribery legislation — adding pressure on investors to show, not just assert, that counterparty risk was assessed before a deal closed. As a recent €900 million EU real estate case showed, institutional reputation alone is not a substitute for a structured record. For an investment committee, that means a due diligence file needs to hold up as a documented decision trail, not a box-ticking exercise completed after the fact.

What compressed diligence actually costs

This isn't a hypothetical. In one recent engagement, a global investment firm managing more than 100 ventures across military-tech and deep-tech was preparing to close on a drone manufacturer. Standard screening had come back clean. Before committing capital, the firm commissioned an OSINT-based investor due diligence review to map the company's ownership structure and examine the backgrounds of its stakeholders.

The review found that a co-founder held beneficial interests in a gambling business whose accounts — totalling roughly 2.6 billion UAH — had been seized by authorities. That individual was later detained by Ukraine's State Bureau of Investigation on suspicion of money laundering, with financial ties traced back to Russian sources — the kind of connection that would have exposed the investor to sanctions risk and disqualified the target from defence contracts entirely.

The investor withdrew before deploying any capital. The technology itself was never the problem. The people behind it were.

That's the pattern worth internalising: in defence-sector deals, the human factor and beneficial-ownership transparency carry as much weight as the technology roadmap. A cap table can look clean and still sit on top of an undisclosed liability — see our casebook on how intelligence reveals what's beneath the surface for more patterns like this one.

What actually needs verifying before capital moves

A due diligence process built for defence and dual-use investing needs to answer four questions a standard KYC check rarely reaches:

1. Who really controls this company? Beneficial ownership needs to be mapped past nominee structures and holding entities to the individuals who ultimately benefit.
2. Is anyone in the ownership or leadership chain exposed to sanctions or export-control restrictions — directly, or through a business interest, family connection or past venture?
3. What does the adverse-information record show — litigation, regulatory action, unresolved disputes, or media signals that a database search alone won't surface?
4. What does the regional and conflict context actually say? In markets shaped by war, local-language, source-based research often reveals what English-language filings and press releases don't.

A single database check is rarely enough to answer any of these with confidence — which is precisely why they require documented findings, not assumptions, before a decision is made.

FAQ: defence tech investment due diligence

What should investors check before investing in a defence tech company?Beyond financials and technology, investors should verify beneficial ownership (who actually controls and benefits from the company), sanctions and export-control exposure across the ownership and leadership chain, adverse-information history — litigation, regulatory action, unresolved disputes — and the regional or conflict context the company operates in. Standard KYC and database checks rarely cover all four.

How do you verify beneficial ownership of a defence contractor?Beneficial ownership verification traces control past nominee shareholders and holding entities to the individuals who ultimately benefit, using corporate registries, cross-border filings and source-based OSINT research — not just the names listed on a cap table.

What are common red flags in defence tech investments?Opaque or layered ownership structures; founders or stakeholders with undisclosed interests in unrelated high-risk sectors such as gambling, crypto or shell companies; ties to sanctioned individuals or jurisdictions; unexplained leadership or ownership changes shortly before a raise; and gaps between what public filings show and what source-based research finds. For a closer look at the specific patterns we flag most often, see Red Flags in Due Diligence Checks: What We See Behind the Curtain.

How long does defence tech due diligence typically take?Timelines depend on the complexity of the ownership structure and the jurisdictions involved, but a focused OSINT-based review of ownership, sanctions exposure and adverse information can typically be completed within days to a few weeks — well within a term sheet window if it's scoped early rather than added at the last minute.

Is defence tech investing subject to sanctions and export-control rules?Yes. Cross-border defence and dual-use deals can trigger sanctions and export-control exposure even when the target company itself isn't sanctioned, if ownership, financing or supply-chain links connect back to a restricted party or jurisdiction. This is a core reason beneficial-ownership tracing matters more here than in typical commercial investing.

Can a standard KYC or database check replace OSINT due diligence for defence deals?No. Standard KYC and database checks confirm a company and its listed owners exist and aren't on an obvious watchlist, but they rarely uncover hidden beneficial ownership, informal business ties, or adverse information reported only in local-language or non-indexed sources — which is where the highest-impact risks in defence deals tend to surface.

Who should conduct due diligence on a defence tech investment — the fund internally or a third party?Internal teams typically handle financial and technical diligence well, but ownership, sanctions and reputational screening in conflict-adjacent or cross-border markets usually benefits from a specialist third party with source-based OSINT capability and local-language research access — investigative methods most in-house teams aren't set up to run.

Diligence that keeps pace with the capital

Molfar is a private intelligence firm that runs this kind of verification for investors, defence companies and legal teams operating in high-stakes, often conflict-adjacent markets. The firm's defence-sector due diligence work covers contractor and counterparty screening, ownership and control analysis, sanctions and export-control review, reputation and adverse-information screening, and source-based OSINT investigation — built on a wartime operating background that prioritises verified findings over speculative assessment.

If your team is underwriting a defence-tech or dual-use deal and wants ownership, sanctions exposure and reputational risk confirmed before capital moves — not after — talk to Molfar about a due diligence engagement.

‍