Software Consulting & Technical Audit
Know what you are buying, funding, or inheriting before you commit. We audit code, architecture, security, and process, and hand you a prioritized report a non-technical founder or investment committee can act on: for founders without a technical co-founder, investors before signing, and CTOs who want a second opinion.
Written reply within one business day. NDA signed before we see any code.
Delivered with every audit
- Executive report (5–10 pages) for the CEO, board, or investment committee.
- Detailed technical report for the development team, with evidence for each finding.
- Prioritized fix backlog graded CRITICAL, HIGH, MEDIUM, LOW.
- Security review: OWASP Top 10, vulnerable dependencies, secrets in the repository, cloud permissions.
- Architecture and cost notes: bottlenecks, single points of failure, vendor lock-in, cloud spend.
- Team and process view: bus factor, onboarding time, documentation, CI/CD.
- A 60-minute walkthrough of the findings with your team.
- A neutral recommendation, with no follow-up development pitched unless you ask.
Types of consulting
Audit Express: €1,500 / 2 days
Code and architecture review, a 5–10 page executive report, the top 10 prioritized issues, and a 60-minute call.
Audit Standard: €5,000–€8,000 / 1–2 weeks
Complete code review and threat modeling, a detailed report, the full fix backlog, two calls, and 30 days of email follow-up.
Technical due diligence: €8,000–€25,000 / 2–4 weeks
For funds and acquirers: code, security, IP and licensing, team, product, infrastructure; risk score and go/no-go recommendation.
Fractional CTO: €2,000–€6,000 / month
8–20 hours a month: hiring interviews, architecture decisions, code review, and technical board reporting.
Legacy modernization
A step-by-step plan out of PHP 5, jQuery, or old Symfony, without a big-bang rewrite.
Stack selection
For new projects: which stack fits your team, scale, and budget, with the reasoning in writing.
What the audit covers
- Code quality: consistency, complexity, duplication, test coverage, review process, git history.
- Security: OWASP Top 10, dependency scanning, secrets scan, IAM and exposed endpoints, GDPR and PCI DSS where relevant.
- Architecture & scalability: slow queries and N+1s, caching, single points of failure, lock-in, cloud costs.
- Team & process: how many people know the critical systems, onboarding time, documentation, deploy and rollback.
- Product & UX: Core Web Vitals, accessibility (WCAG 2.1), real mobile experience.
Four steps from question to decision
Scope & estimate
Tell us the situation and the decision you face. We reply within one business day; within 48 hours you get the right package and a fixed price in writing.
NDA & access
NDA signed (ours or yours) before any access. Read-only access to the repository, infrastructure, and documentation.
Review
2 days for an Express audit, 1–2 weeks for Standard, 2–4 weeks for due diligence, with interim questions to your team.
Report & walkthrough
Executive and technical reports, the prioritized backlog, and a call to go through it. Your team can execute it without us.
Production systems we built
The audit criteria are the ones we apply to the systems we build.
Questions about audits and consulting
How much does a technical audit cost?
Audit Express: €1,500 (2 days). Audit Standard: €5,000–€8,000 (1–2 weeks). Complete technical due diligence: €8,000–€25,000 (2–4 weeks).
Do you do technical due diligence before an investment?
Yes. We evaluate the code (quality, security, scalability), the team (capacity, key-person dependencies), the architecture (tech debt, vendor lock-in), and licensing (open source, IP).
What deliverables do we get from an audit?
An executive report for the CEO or board, a detailed technical report for the dev team, a prioritized fix backlog (CRITICAL/HIGH/MEDIUM/LOW), and a 60-minute walkthrough. Due diligence adds a risk score and a go/no-go recommendation with conditions.
Can we get a fractional CTO?
Yes: 8–20 hours a month, €2,000–€6,000 a month. Technical hiring, architecture decisions, code review, and senior mentorship.
Are you objective, or trying to sell us development?
The audit is a separate, neutral product. We don't propose follow-up development unless you ask. Many clients take the plan and execute it with their own team.
Do you sign an NDA?
Yes, before any access to code or confidential information. Our standard NDA or yours.
Further reading
Need a second technical opinion?
Describe the situation and the decision in front of you. We reply within one business day and, within 48 hours, recommend the right package (audit, due diligence, or fractional CTO) with a written estimate.