Skip to content

Founders · Teams

Code & Architecture Review

A written report of what will break first - ranked, explained, and fixable.

Is this you?

  • You shipped it with AI tooling and it works - but you can't tell anyone whether it's safe.
  • You have paying users and no idea what happens at 10× traffic.
  • A developer quoted you €40k and you can't tell if that's fair.
  • You know there are things wrong, you just don't know which ones will bite you first.
  • You're about to raise a round and someone will ask about technical due diligence.

What we do

  • Read the codebase and infrastructure end to end.
  • Check authentication and authorization, secrets handling, and data storage.
  • Assess personal-data exposure, third-party API key usage, and LLM cost and rate-limit exposure.
  • Evaluate prompt-injection surface, error handling, backups, and dependency risk.
  • Identify the two or three things that break first under 10× load.
  • Offer a mutual NDA before any repo access, by default.

What you get

  • A 10–20 page written review, findings ranked by what breaks first.
  • Each finding with severity, plain-English explanation of the consequence, and a concrete fix.
  • A 60-minute walkthrough call to discuss findings.
  • A one-page executive summary you can hand to an investor or contractor.

What this is not

  • We do not rewrite your app in this engagement. If you want the fixes implemented, that is a separate Build Sprint.
  • We do not provide a penetration test (active exploitation). This is a code and architecture review.
  • We do not sign off on compliance (SOC 2, ISO 27001). We flag what matters to get there.

Process

How it runs

  1. Day 1

    Book the free 30-minute call. We ask about your app, your users, and your biggest concerns.

  2. Day 2

    We send a written scope and price confirmation. You reply to accept, and we agree on NDA and repo access.

  3. Days 3–7

    We read the code. No interruptions - we come back with findings, not questions.

  4. Day 8

    You receive the written report and the executive summary.

  5. Day 9–10

    We hold the 60-minute walkthrough call on your schedule.

Price

€1,200

Hours
8–10 hours
Turnaround
Report within 5 working days
Format
Remote · async + 60-min walkthrough call

Prices exclude VAT.

Questions about this engagement

Read access to the repository, a short description of what the app does and who uses it, and access to hosting or config files if you can share them. We work with GitHub, GitLab, or a zip. An NDA is signed before any repo access.

Yes, before we see any code. We offer a mutual NDA by default. Your code is not retained after the engagement and will never be used as a public example without your written permission.

Not in this engagement. The review tells you what is wrong and how to fix it. If you want the fixes implemented, that is a Build Sprint - a separate engagement we can scope on the same call.

No, that is most of what we review. The review is about what breaks, not about how it was written. AI-assisted codebases have predictable patterns - we know what to look for.

Fully confidential. Mutual NDA before access, no code retained after delivery, no client work used as a public example without written permission. That is our default, not an add-on.

Related engagements

  • Build Sprint

    Working code in your repository, a README of what changed, and a handover call.

    16 or 24 hours€2,200 · 2 days · €3,000 for 3 days

    Scheduled within 2 weeks of agreement

  • Working Session

    Your actual problem, worked on together. Written notes and next steps within 24 hours.

    60 minutes€140/hour · €375 for 3 hours

    Written notes within 24 hours

  • Advisory Retainer

    A senior AI person reachable every month, with a monthly call and async support.

    4 hours/month€500/month · cancel any time

    Monthly, ongoing

Is this the right fit? Let's find out.

Book a free 30-minute call. If we're not the right help, we'll say so on the call.

Book a free 30-min call
Book a free call