A free software audit before any quote.

• //The code: structure, coupling, the parts that change often and the parts nobody touches
• //The data model, and the records that already contradict it
• //Deployment, environments, backups, and what happens during a failure
• //Access and security: who can reach what, and how secrets are handled
• //Performance under the load you actually have, not a synthetic benchmark
• //The gap between how the system is documented and how it behaves

A written assessment, in plain language, with the technical detail attached rather than hidden. Findings are prioritised by what they cost you: incidents now, risk soon, cleanup later. It is returned within 24 to 48 working hours once the scope and necessary access are agreed and received.

Where we claim something is broken, the report contains the query, the log or the reproduction that shows it.

The review stays within the agreed scope; it is not an exhaustive security certification. If you do not need a rebuild, the report says so.

• //No repository access or credentials needed to send the initial request. For code-level findings, we later agree read-only repository access and a way to inspect or run the system
• //A short conversation with whoever knows the history
• //Logs and database structure where relevant and available; a public-only review cannot verify code, database or security findings
• //One person who can answer questions during the review

If there is nothing built, the audit becomes a scoping review: what the system has to do, the data it must hold, the rules that cannot be broken, and a phased plan with a first release that is genuinely useful.