Technical software audit
An independent review of an existing application: what condition it is in, what risks it carries and what options there are to move forward. No obligation to continue with us, and the same honesty if the answer is "it's fine, leave it alone".
What we review
Code and architecture
Quality, structure, technical debt and how easy it is to maintain and grow.
Dependencies and versions
Languages, frameworks and libraries that are unsupported or have known vulnerabilities.
Integrations
How it connects to the ERP, CRM or other systems, and what happens when one of them fails.
Security
Authentication, permissions, data exposure and server configuration.
Performance and scalability
Where time is lost and what limits the platform has if usage grows.
Operations
Backups, environments, deployments, documentation and who holds the keys to each thing.
What you get
- A report on the state of each area, written for decision-makers and not just engineers.
- Risks prioritised by severity and urgency.
- Several scenarios to move forward: improve what exists, replace parts or rebuild, with approximate effort.
- A presentation of the results to answer questions.
When it makes sense
- You are inheriting an application from another provider or from someone who has left.
- Bugs keep coming back and every change breaks something else.
- You need to decide whether to modernise or rebuild, and want to do it with data.
- You are buying a company or a product and want to know what software comes with it.
How we do it
-
01
Access
Code, environments and available documentation, under a confidentiality agreement.
-
02
Review
Analysis of the code and platform, with tools and manual review.
-
03
Interviews
We talk to those who use and those who maintain the system.
-
04
Report and presentation
We deliver the report and walk you through it.
What people usually ask us
Do we need to give you access to the code?
For a full audit, yes. We sign a confidentiality agreement before receiving any access. If that is not possible, we can do a more limited external review.
Does the audit include a penetration test?
It includes a security review of the code and configuration. If you need a penetration test, we do it as part of our software quality and security service.
Am I obliged to hire you for the improvements afterwards?
No. The report is yours and is written so any team can use it.
Shall we look at it together?
Tell us where you are and we will suggest how to start. We reply within 24 working hours.