Skip to main content

Project audit

An honest written take on what your project actually is.

If you inherited a build, are about to commit to a rebuild, or have a vendor relationship that has gone sideways, you need an outside read on what is real before you spend more. The audit gives you that read in writing, in roughly one week, with no pressure to continue with us afterward.

What we look at

The audit covers the project from code to credentials.

Most agency horror stories hide in the gap between what was committed and what is actually running. We read both and report what we find.

Repository

Architecture, code quality, test coverage, dependency hygiene, dead code, security smells, and pace of recent change.

Hosting and infrastructure

Where it runs, who controls it, cost shape, scaling headroom, secrets management, backup posture, and disaster recovery readiness.

Deployment pipeline

How code gets to production, what could fail, what gates exist, who can ship, and what manual steps still exist.

Backlog and documentation

What was promised, what was built, what is documented, and where the gaps are. We read tickets, READMEs, and runbooks.

Operational health

Logs, errors, uptime signals, alert routing, support load, and what the team currently spends time fixing.

Vendor and credential trail

What third-party services are in use, who has the keys, what is paid for, and what is at risk if a vendor disappears.

What you receive

Concrete deliverables, not a sales document dressed as a finding.

Plain-English assessment

A written document, not a slide deck. What is healthy, what is at risk, and what is broken. Severity rated, with reasoning, so you can argue with our conclusions.

Three-path recommendation

Repair the parts that work. Stabilize what is critical. Rebuild what is beyond rescue. With effort estimates, trade-offs, and a recommended order.

Quick wins list

Specific, low-cost fixes that unblock the team or reduce risk in the first two weeks, regardless of which longer path you choose.

Whether we are the right team

An honest take on whether AppStartDev is the right partner for the path you choose. If we are not a fit, we say so and explain who would be.

Timeline

Roughly one week from kickoff to written assessment.

  1. Day 0

    Short call to align scope, agree on access, and sign a mutual NDA if useful.

  2. Days 1 to 5

    Read the code, run the deployment, walk the backlog, talk to the team. We work from the materials you provide and ask focused questions when needed.

  3. Day 6 to 7

    Draft assessment circulated for fact-checking with the team. We correct anything we got wrong before it lands.

  4. Day 8

    Final written assessment delivered, with a 60-minute walk-through and Q&A.

Intake

What we need from you to do this well.

The more accurate the inputs, the more useful the assessment. We work with whatever you have. Missing items are not blockers, but the audit will be honest about what we could not verify.

  • Read access to the source repository (GitHub, GitLab, Bitbucket, or private)
  • Hosting / cloud account read access, or a written description of what is running where
  • Access to the deployment pipeline or CI configuration
  • Recent backlog or ticket history, even if messy or incomplete
  • Current README, runbook, or onboarding docs, if any exist
  • A short written summary of what is hurting now and what was promised
  • An internal owner who can answer follow-up questions during the audit
  • Vendor or credential inventory if known, otherwise we discover and report

Have a project that needs an honest read?

Tell us briefly what you have, who built it, what is hurting, and what decision you are trying to make. We will get back to you within one business day with next steps.