The Engineering Health Audit
A fixed-price review of the software you own, whether an agency built it, your developer moved on, or you built it yourself with AI. What's solid, what could hurt you, what to fix first, and whether it's safe to ship. Delivered in days, written so an owner can act on it.
The method
The AI reads everything: every project, every part it's built on, every pattern in how it's been looked after. Done by hand, that read takes a consultancy weeks and costs five figures. I do the thinking: what actually matters, in what order, and what it means for your business. You get the coverage of a machine with the judgment of someone who ships. And it's a review I trusted enough to run on my own company first.
What you receive
Two pages in plain English, covering what you own, what it's worth operationally, and the three decisions worth making about it next.
Every piece of software scored: is it maintained? Written down? Tested? How old are the parts it's built on? And who actually understands it?
What could actually hurt you, in order, known security holes left unfixed, things only one person can repair, passwords saved where they shouldn't be. Ranked by consequence, not by count.
The list of things fixable in a day each, separated from the structural work, so momentum starts immediately.
Where AI could start doing real work on your software first, and what groundwork it needs to be safe, the part no traditional audit includes.
A live session where we go through the findings together and your team can push back. The report is yours to keep either way.
See a sample report → Illustrative, a fictional company and fictional findings.
Your code stays yours
The audit needs nothing more than permission to read, never to change, and you can switch that access off the moment we're done. I'll sign your NDA or bring mine. My working copies are deleted after delivery; what remains is your report, in your hands.
And a line you should hear from anyone who reads your code: this is an engineering health audit with security screening, not a formal penetration test. Where your risk profile warrants one, the report says so and I'll point you to specialists who do that work well.
How it works
Thirty minutes, free. What you have, what worries you, and what you want to be true in six months. If an audit isn't the right move, I'll say so.
You grant read-only permission, I'll walk you through it, it takes minutes. NDA signed before anything is read.
The sweep runs, then I read what matters and rank everything by consequence, a matter of days rather than weeks.
Solo / small: from US$1,500 · Organizations: from US$5,000We go through it together. You leave with the report, the ranked list, and the quick wins in plain English. If you want the urgent items closed, I do it as a fixed-price sprint, and can stay on to keep watch, so the next audit finds less.
Start
Tell me roughly what you have, what the software does, who built it (agency, developer, or AI), what's keeping you up at night. I'll tell you what the audit would cover and quote it flat.
Need software built, not audited? Bespoke builds are the other thing I do.
