Skip to content

Software technical audit: find out what isn't working, get a clear path forward.

Code review, architecture analysis, infrastructure diagnosis. Written report with intervention priorities. In 2-3 days.

€1,500 + VAT · 2-3 days · Remote · Written report with intervention priorities

Who needs it

Who needs a software technical audit.

Non-technical founders

They've contracted out development and have no way to evaluate what was done well.

Inheriting CTOs

They inherit a codebase and need to understand where to start without getting the story from the outgoing devs.

SMBs with internal software

They suspect they're paying too much for a system that delivers too little.

Investors in due diligence

Pre-investment tech DD on a target startup.

Companies in sale

They need to present the technical state of the product to the buyer.

Founders pre-round

About to close an investment round and want to present a solid technical state to investors, before the DD on the other side finds problems.

Definition

What a software technical audit is.

A software technical audit is a systematic analysis of an existing software system's quality. It checks code, architecture, infrastructure, processes and technical debt to identify risks, waste, and intervention priorities.

The result is a written report with concrete evaluations and measurable actions — not a generic opinion, not an endless to-do list.

What I analyze

Six dimensions, one clear direction.

Code

Quality, technical debt, test coverage, readability, module organization.

Architecture

Scalability, coupling, stack choices, alignment with business.

Infrastructure

Security, cloud costs, performance, observability, backup, disaster recovery.

Processes

CI/CD, branch management, code review, deploys, incident response.

Documentation

Onboarding new devs, operational runbooks, Architecture Decision Records.

Team & vendors

Who does what, critical person-dependencies, vendor contracts (if relevant).

Output

What you receive at the end of the audit.

  • Written report (15-30 pages): executive summary, critical findings, medium findings, intervention roadmap.
  • Discussion call (90 minutes) to prioritize and answer questions.
  • Markdown files — you can share internally, edit, update over time.

The report, chapter by chapter

So you know what you're buying before you book, not after.

  1. 1
    Summary for decision-makers

    Two pages, no jargon: the state of the project, the three main risks, and the recommendation. Readable by someone who doesn't write code.

  2. 2
    Access and ownership

    Who currently holds the keys to what: repository, server, domain, database, third-party accounts. Often the most urgent chapter.

  3. 3
    State of the code

    What holds, what's fragile, what's cheaper to rewrite than to fix. With examples taken from your code, not gut-feel verdicts.

  4. 4
    Architecture and infrastructure

    How the system is built, where the single points of failure are, and the hidden costs that grow on their own.

  5. 5
    Intervention priorities

    What to do now, what can wait, what to ignore entirely. Ordered by risk and cost, not by technical elegance.

  6. 6
    Alignment call

    The report gets discussed out loud: questions, decisions, next steps. The document stays yours either way.

What it isn't

Three things an audit doesn't do.

  • I don't write fix code during the audit (that's what project rescue is for).
  • I don't manage vendors or devs in your place.
  • It's not a judgment on the people who worked before — it's an analysis of the system as it is today.
Frequently asked questions

The questions I get most often about audits.

What do you need from me as a client to get started?

Read-only access to the repository, a 30-minute call with you and the current dev (if possible), read-only access to the cloud provider if we want to analyze infrastructure too.

How do we handle code confidentiality?

I sign an NDA before accessing the code. All produced material remains yours and is delivered to a shared folder or dedicated private repository.

What if you find a critical issue during the audit?

I flag it immediately, outside the report. If an immediate intervention is needed, we can decide whether to proceed with project rescue or pass it to your team with the necessary indications.

Can I decide what to focus on?

Yes. Before the audit we align on scope: I can do a full-stack analysis or focus on a specific area (e.g. security only, cloud costs only, backend architecture only).

How much does a technical audit cost?

€1,500 + VAT for the standard audit: 2-3 days of work and a written report that stays yours either way. It's a fixed price precisely because the diagnosis has to be able to end with “there's nothing to buy here” — including from me. If the codebase is very large or there are several systems to look at, I tell you on the free call before we start, not after.

Ready for a technical audit?

First a free 30-minute call to align on scope and timing. Then audit delivered in 2-3 days.

Reply within 24 hours · Italy & remote