App Audit
An experienced engineer reviews your codebase and running app, then delivers a written report with every issue ranked by severity and a clear verdict: ship, patch, refactor or rebuild.
Final fixed price confirmed in your written spec. 50% deposit, 50% on approval.
What's included
- Code and architecture review
- Security review: auth, permissions, secrets, payments
- Automated dependency and secret scans
- Performance and SEO check
- Ranked fix list with effort estimates
- 30-minute debrief call
- Fixed-price quote for the fixes (optional)
Ideal for
- Apps that work in demos but break with real users
- Projects left unfinished by a previous developer
- Founders about to launch who want a second opinion
Not included
- — Fixing the issues (that is a Rescue Sprint)
- — Penetration testing certification
What you receive.
How it runs
- 01 Day 0
Free scoping call
20 minutes. We understand your goals and give you a fixed price range on the call.
- 02 Day 1–2
Written spec & fixed quote
A clear spec with acceptance criteria. Sign it, pay the 50% deposit, and we start.
- 03 Build
Build with daily progress
Built on proven foundations. You get a private staging link and progress updates.
- 04 Verify
Tests, scans & review
Automated tests, security scans and a line-by-line review of auth, data and payments.
- 05 Approve
You test on staging
You check everything against the acceptance list. Balance is due only when you approve.
- 06 Launch
Deploy & handoff
Deployed to your accounts with docs and a walkthrough video. Your warranty starts.
App Audit FAQ
What access do you need?
Read-only access to the repository, and a staging login if you have one. You can revoke access after the debrief.
Is the audit fee credited?
Yes. If you book a Rescue Sprint or MVP Build within 30 days, the audit fee is deducted.
Do you offer ongoing maintenance?
No — and that is deliberate. We build, verify and hand over cleanly, with documentation any developer can pick up. You get a bug-fix warranty and an optional paid handoff session.
What counts as a warranty bug?
Anything that does not work as described in the signed spec. New features or changes are quoted separately at a fixed price.
Who owns the code and accounts?
You do, from the first commit. Everything is deployed to your own repository, hosting and payment accounts.