Website and application audit
We independently review a website or application that someone else delivered to you. We read the code and the operations, not just the page. You get findings by severity with an estimate of the work, with no tie to further work.
Sound familiar?
Sentences people come to us with. We have been able to help all of them.
What audits have revealed- Our supplier handed over the website and we don't know whether it was built properly.
- The app is slow and the supplier says everything is fine.
- Maintenance bills keep rising and we don't know if they match the work.
- We don't know whether it's backed up or whether the data could be restored after an outage.
- We need to know whether the website meets its obligations on personal data and accessibility.
- We are considering changing supplier and want an independent view before we decide.
What audits of projects we took over revealed
An audit is our first step in every development takeover. For these four projects it produced a repair plan, not a rewrite.
Alukola.com
We took over this alloy wheel and tyre online shop in 2018, when it was already ten years old. After the audit we have kept developing it: new carriers, payment methods and B2B systems have been added.
Why entrust an audit to experienced developers
A free tool can run an automatic website check in minutes today. What stayed expensive is telling which findings are a real risk, which are just an ugly solution that has worked for years, and in what order to tackle them.
-
We read the code and the operations, not just the page.
We go through the repository, database, server and accounts, and compliance with good practice for the technologies used. We find out whether supported versions are running, who has access and whether deployment is safe.
-
We know what happens in an outage.
We check backups, monitoring and the recovery procedure. Backups that nobody has tried to restore are among the most common findings. You will learn whether the website would lose data after a server outage.
-
Performance, visibility and legislation.
We measure speed as visitors and Google see it and find where the website is losing out. We review how search engines and AI assistants see the website, and whether it meets its obligations on cookies, personal data and accessibility.
-
Findings you can act on.
We describe each finding in plain language, with its severity, impact and an effort estimate. The order tells you what to tackle first, what can wait and what not to do at all. The result is yours and anyone can make the fixes, with no tie to further work.
Details
Open what interests you. The answers are inside.
How an audit works
Four steps from what troubles you to the order of fixes.
-
What's troubling you We'll briefly discuss what you expect from the audit and what to focus on.
-
Access To the code, server and admin area. We don't touch the live website.
-
Review Code and operations, backups and recovery, performance, visibility and legislation.
-
Findings and priorities Findings by severity, each with its impact and an effort estimate, and the order in which to tackle them.
- How long does an audit take?
- An audit takes days to weeks, depending on the size of the project.
What we need from you
Access to the code, server and admin area. Without it, we review what is visible from outside.
Code from the repository or as a copy, access to the server or hosting and to the admin area. Without access to the code we can only check what is visible from the outside: speed, visibility, cookies and accessibility. We will sign a non-disclosure agreement on request.
- What if we do not have access?
- A common situation. We'll help you get them back, and until then we'll check what can be seen from the outside.
- Which technologies can you review?
- Code in PHP, Node.js and JavaScript or TypeScript. We check speed, visibility, cookies and accessibility on any website.
What an audit costs
It depends on the project. We agree the scope of the check in advance.
The cost of an audit depends on the project and on what you want checked. We agree the scope of the review in advance. The audit commits you to nothing further, and we price the next steps based on the findings.
We don't offer you a rewrite. We give you a list of findings, an estimate of the work for each and the order in which to tackle them, including an option for a limited budget: what is a risk now and what can wait.
What if the result is wrong
A bad result does not mean a rewrite. We tell you what is a risk and what is merely an ugly solution.
The most common findings are unsupported software, performance at its limit and backups nobody has tried restoring. They can usually be fixed step by step. The fixes can be done by your supplier following the report, by anyone else, or by us.
- Does the website have to be rewritten?
- Usually not. We rewrite only what is a risk or holds back further development. The rest keeps doing its job.
We will independently review your website or application
The address of the website or application and a few sentences about what troubles you are enough. On request we sign a non-disclosure agreement.