Technical debt across a portfolio: how to size it and where to spend
Technical debt across a portfolio is sized by applying one method to every company, producing for each a score, a cost to reduce the debt in engineer-weeks, and the share of engineering time the debt is consuming today. The fund then spends where the return per engineer-week is largest, which is rarely the company with the worst score. The single-company method is described in the technical due diligence guide; this page is about making the results comparable across ten companies with one budget. Stripe's September 2018 survey of developers across six countries measured 17.3 hours of a 41.1 hour week going to maintenance, with 13.5 hours attributed to technical debt, which is the scale of what an unsized portfolio is already paying.
Published September 17, 2026. Editorial.
Key takeaways
- Size technical debt across a portfolio with one method applied the same way to every company, so the scores can be compared; a score from ten different reviewers using ten different methods cannot.
- Each company gets three numbers: a debt score, the cost to reduce it in engineer-weeks, and the share of engineering time the debt consumes now. Spend where the third number is highest per engineer-week of the second.
- Stripe's 2018 survey measured a mean 17.3 hours of a 41.1 hour developer week on maintenance, 13.5 of them attributed to technical debt, so a company that never sizes its debt pays for it in capacity every week.
- BCG's January 2026 survey found only 40 percent of PE firms use a formal digital-maturity score, and a portfolio-wide debt score captured at entry and at exit is the one that shows up in the sale.
Technical debt across a portfolio is sized by running one method on every company and comparing the results. The method produces three numbers per company: a debt score, the cost to reduce the debt in engineer-weeks, and the share of engineering time the debt is consuming today. The fund spends where the return on an engineer-week is largest, and the point of the comparison is that this is often a different company from the one with the worst score.
The single-company version of the method is described in the diligence guide's page on assessing technical debt, and this page does not repeat it. What changes at portfolio level is the need for the results to be comparable, and the need to decide where to spend.
Why can technical debt scores from different reviewers not be compared?
They cannot be compared because each reviewer scores against their own idea of what good looks like, and a portfolio has as many reviewers as it has diligence reports. One reviewer counts test coverage; another counts open security findings; a third describes the architecture in prose. Each report is useful on its own company and useless as a ranking.
The fix is one method, written down, applied by whoever does the work, with the same inputs for every company. The inputs should be things that can be counted rather than judged, so that two people running the method on the same company get the same score. A workable set:
| Input | How it is counted | Why it matters |
|---|---|---|
| Test coverage of the modules that carry revenue | Percentage of lines in billing, ordering, authentication and the core product path that an automated test executes | Untested revenue code is where incidents cost money |
| Open security findings by severity | Count from a scan run the same way on every company | Comparable across companies because the scanner is the same |
| Dependency age | Share of third-party dependencies more than two major versions behind | Old dependencies are where the next forced upgrade comes from |
| Deployment effort | Engineer-hours from a merged change to production, measured on the last ten deployments | The cost of every future change |
| Single-person knowledge | Count of production systems only one engineer can deploy or repair | The risk the fund cannot see until that person leaves |
| Known rework backlog | Engineer-weeks the team itself estimates to fix what it knows is wrong | The team's own view, which is usually the most accurate |
Each input is a number. The score is a weighted total, and the weights are the fund's choice, written once and kept fixed so the score means the same thing at entry and at exit.
Reveneau runs this method as a fixed-scope review across a portfolio, produces the three numbers per company from the same inputs, and writes an evaluation suite for the modules it then works on, so the fund can see the score move and can re-run the check itself. The pillar guide to technology after the deal sets the sizing among the four phases of post-deal work.
What are the three numbers per company?
The three numbers are the score, the cost to reduce it, and the share of engineering time the debt consumes now. They answer three different questions, and a fund needs all three.
The score answers "how bad is it". It is the weighted total of the inputs above. On its own it is a ranking and nothing more.
The cost to reduce it answers "what would it take". It is the engineer-weeks the team estimates to move each input to the fund's target, summed. The scaling engineering teams guide covers why that estimate should come from the team that will do the work rather than from a reviewer.
The share of engineering time consumed now answers "what is it costing today". It is the share of the last quarter's engineering hours that went to maintenance, incidents and rework rather than to new capability. Stripe's Developer Coefficient survey, published September 2018 from a survey of developers and executives across six countries, measured a mean of 17.3 hours per week on maintenance work such as debugging and refactoring out of a 41.1 hour week, with 13.5 hours attributed to technical debt and 3.8 to bad code. That is a survey mean across all companies, and a portfolio company's own number is what the method measures; Stripe's figure is the scale to expect if nobody has looked.
Where should the fund spend?
The fund should spend where the share of engineering time recovered per engineer-week of remediation is largest, and then check that answer against the investment case for each company.
The arithmetic is a ratio: the third number divided by the second. A company that spends 40 percent of its engineering time on maintenance and could halve that with 20 engineer-weeks of work returns more per week than a company at 60 percent that needs 200 weeks. The worst score is usually the second company, and the best spend is usually the first.
The check against the investment case is the other half. A company whose deal thesis is a product rebuild will replace its worst modules anyway, and remediating them first is money spent twice. A company whose thesis is buy-and-build needs its shared layer clean before the next add-on connects, whatever its overall score. Turning the diligence report into the first-year plan describes how the debt work is sequenced against the builds inside one company; at portfolio level, the same sequencing decides which companies get the budget this year.
Bain & Company's press release of 23 February 2026 says typical deals now need 10 to 12 percent average annual EBITDA growth to return 2.5x, against 5 percent in the previous era. Engineering time recovered from maintenance is engineering time available for the growth, which is why the third number is the one to optimise.
How should the score be reported?
The score should be reported as a table with one row per company, captured at entry and re-captured each year with the same method, so the fund can see the trend per company and the total across the portfolio.
| Company | Score at entry | Score now | Cost to target (engineer-weeks) | Engineering time on maintenance now | Spend this year |
|---|---|---|---|---|---|
| A | 72 | 58 | 30 | 28 percent | Yes |
| B | 85 | 84 | 210 | 55 percent | No, rebuild planned |
| C | 41 | 39 | 12 | 18 percent | No |
The figures in that table are an illustration of the layout and carry no data. What matters is that every column is produced the same way for every row, and that the "score at entry" column never changes, because it is the number the exit story is measured against.
BCG's survey of 100 senior private equity investors, published 7 January 2026, found that 82 percent of firms track return on investment from digital initiatives while only 40 percent use formal digital-maturity scores and 11 percent explicitly link digital progress to exit narratives. The same survey found 40 percent of investors had experienced a valuation haircut of 5 percent or more from technology issues. A debt score captured at entry and shown falling at exit is a direct answer to a buyer's diligence, and it is one that 60 percent of funds in that survey could not give.
Reporting engineering progress to the fund carries the score into the quarterly format beside the four delivery measures.
Does AI-written code change the sizing?
AI-written code changes the sizing in one input: deployment effort and stability, which DORA measures directly. Google Cloud's announcement of the 2024 DORA report, on 22 October 2024, said that as AI adoption increased it was accompanied by an estimated 1.5 percent decrease in delivery throughput and a 7.2 percent reduction in delivery stability, and that 39 percent of respondents reported little to no trust in AI-generated code. The 2025 report, announced on 23 September 2025 from nearly 5,000 technology professionals, found a positive relationship between AI adoption and throughput, a continued negative relationship with stability, and 30 percent reporting little or no trust.
For the portfolio method, that means a company writing much of its code with AI should be scored on stability with extra care, because the survey pattern says stability is where the cost appears. It also means the remediation itself can be done faster with AI, provided each change is checked against an evaluation suite written from the specification, which is how the stability gap is closed. The AI-generated code to production guide holds the full argument and the security figures, and AI adoption in portfolio companies covers what the fund-level surveys say.
What should the operating partner have at the end of the exercise?
At the end of the exercise the operating partner should have four things:
- The method, written down, with its inputs, its weights and the target for each input.
- One row per company with the three numbers, produced from the same inputs.
- A spend decision per company for the year, with the ratio and the investment-case reason recorded.
- The entry scores frozen, so the exit comparison is against a number nobody can revise.
That is enough to defend the engineering budget at the fund level and to answer a buyer at exit. If the fund would rather have the sizing run and the remediation delivered by one team that takes the outcome, building with investors and their portfolio companies describes how we take that on.
Best for
- An operating partner with several portfolio companies and one engineering budget to allocate
- A platform lead building a shared method the whole portfolio will be scored by
- A board member who wants a number that will still mean something at exit
Avoid if
- You have one company and need the single-company method, which the diligence guide covers
- The company is mid-rebuild, where the score of the retiring codebase does not matter
Verify before you commit
- Ask for the written method with its inputs and weights, dated before the first company was scored
- Ask for the three numbers per company and the ratio that decided the spend
- Ask for the entry score and confirm it has not been revised
Common questions
How do you size technical debt across a portfolio?
You size technical debt across a portfolio by applying one written method, with countable inputs and fixed weights, to every company, producing three numbers each: a debt score, the cost to reduce it in engineer-weeks, and the share of engineering time the debt consumes now. Stripe's September 2018 survey measured 17.3 hours of a 41.1 hour developer week going to maintenance, which is the scale to expect at a company that has never measured its own.
Why can technical debt not be compared across companies from their diligence reports?
Because each diligence report scores against its own reviewer's idea of good: one counts test coverage, another counts security findings, a third describes architecture in prose. Each is useful on its own company and useless as a ranking. BCG's January 2026 survey found only 40 percent of PE firms use a formal digital-maturity score, and a score from one fixed method is what makes the portfolio comparable.
Where should a fund spend its technical debt budget?
Where the share of engineering time recovered per engineer-week of remediation is largest, checked against each company's investment case. A company at 40 percent maintenance that could halve it with 20 engineer-weeks returns more per week than one at 60 percent needing 200 weeks. Bain & Company's February 2026 release says deals now need 10 to 12 percent annual EBITDA growth, and recovered engineering time is what builds it.
What inputs make a technical debt score comparable?
Inputs that are counted rather than judged: test coverage of the revenue-carrying modules, open security findings by severity from the same scanner, the share of dependencies more than two major versions behind, engineer-hours from merge to production over the last ten deployments, the count of systems only one engineer can deploy, and the team's own rework estimate in engineer-weeks. Two people running the method on the same company should get the same score.
How much engineering time does technical debt consume?
Stripe's Developer Coefficient, published September 2018 from a survey of developers and executives across six countries, measured a mean developer week of 41.1 hours with 17.3 hours on maintenance work such as debugging and refactoring, 13.5 of them attributed to technical debt and 3.8 to bad code. Those are survey means; a portfolio company's own share is what the method measures, and it is the number the spend decision optimises.
Should the company with the worst technical debt score get the budget first?
Not by default. The worst score often belongs to the company where remediation is most expensive per engineer-week, and sometimes to a company whose investment case is a rebuild that will replace those modules anyway, which makes early remediation money spent twice. The spend follows the ratio of engineering time recovered to engineer-weeks required, and then the investment case. The score alone is a ranking, and the budget follows the ratio.
How does a portfolio technical debt score help at exit?
A score captured at entry with a fixed method and shown falling at exit is a direct answer to a buyer's technical diligence. BCG's January 2026 survey of 100 senior PE investors found that 40 percent had experienced a valuation haircut of 5 percent or more from technology issues, and only 11 percent explicitly link digital progress to the exit narrative. The frozen entry score is the number that link is measured against.
Does AI-written code change how technical debt is sized?
It changes the weight on stability. Google Cloud's October 2024 DORA announcement reported an estimated 7.2 percent reduction in delivery stability as AI adoption increased, and the September 2025 announcement of the next report, from nearly 5,000 professionals, found the negative relationship with stability continued while throughput turned positive. A company writing much of its code with AI should be scored on change fail rate and recovery time with extra care.
How often should the portfolio technical debt score be re-captured?
Once a year with the same method, and the entry score is never revised. Re-capturing more often costs engineering time and moves the number less than the noise in the inputs. The quarterly report to the fund carries DORA's four delivery measures instead, which move quarter to quarter, and the annual score sits beside them. Google Cloud's October 2024 announcement describes the four measures as the industry standard for software delivery performance.
Who should run the technical debt sizing across a portfolio?
Whoever runs it, the method has to be the same for every company and written down before the first one is scored, with the cost estimate coming from the team that will do the remediation rather than from the reviewer. BCG's January 2026 survey found only 45 percent of successful PE firms ensure knowledge transfer from external partners, so if an outside team runs it, the method and the inputs stay with the fund.
References
- Stripe, The Developer Coefficient, September 2018
- BCG, Private Equity's Future: Digital First and AI Powered, 7 January 2026
- Bain & Company, Global Private Equity Report 2026 press release, 23 February 2026
- Google Cloud, Announcing the 2024 DORA report, 22 October 2024
- Google Cloud, Announcing the 2025 DORA report, 23 September 2025
Related reading
How to take over a codebase you did not write
Someone hands you a working system and leaves. The instinct is to read it. The better first move is to find out what it guarantees, because the code will tell you what it does and never what it was supposed to do.
How many tests does AI-generated code need?
The honest answer is not a number, and coverage percentages are the wrong unit. Here is the unit we use instead, and why a suite of fifteen checks can be worth more than two thousand.
More in Capability
Interim, fractional, or as-a-service CTO: a neutral comparison
An interim CTO is a full-time executive for a fixed period, a fractional CTO is a part-time executive shared with other companies, a permanent hire is the long-term answer that takes months to find, and an as-a-service model is a partner that supplies engineering leadership and delivery together and is accountable for the outcome. A portfolio company chooses between them on four questions: how long the gap will last, how much building is needed, who should carry the delivery risk, and what the company can afford against a permanent hire. The U.S. Bureau of Labor Statistics reports a median annual wage of $175,140 for computer and information systems managers in May 2025, which is the floor for that last comparison. This page compares the four without a preferred answer.
AI adoption in portfolio companies: what the surveys say
AI adoption in portfolio companies is behind what their funds expect of it, and three surveys published between January 2025 and May 2026 measure the gap. FTI Consulting's 2026 Private Equity AI Radar, from 200 fund and operating leaders, found 36 percent using AI across use cases and 7 percent at enterprise scale. BCG's January 2026 survey of 100 senior PE investors found more than 90 percent planning to expand portfolio-level digital budgets over three years. Mubadala and MGX, with Bain & Company, reported in January 2025 that 93 percent of investment funds anticipate AI-driven value within three years while 18 percent of portfolio companies were already seeing concrete value from operational AI use cases. This page sets the three side by side and says what a fund can do with them.