Forensic Audits
& DiagnosticsSomething isn't working, and you don't know why. I'll find it — and give you a clear picture of what to fix and in what order.
Clarity on What's Actually Going Wrong
There's a particular kind of frustration that comes from knowing something is broken — or slow, or expensive, or fragile — but not knowing exactly why. It's especially common when you've inherited a codebase, onboarded a supplier who's since moved on, or watched your site quietly degrade over time.
A forensic audit is a structured investigation into your existing system. We look at the code, the infrastructure, the dependencies, the performance data, and the security posture — and we come back with a clear, prioritised report on what I found.
It's not about passing judgement on past decisions. It's about giving you the information you need to make good ones going forward.
What We Audit
- Website and application performance analysis
- Code quality and architecture review
- Security vulnerability assessment
- Dependency audit (outdated, abandoned, or high-risk packages)
- Infrastructure and hosting review
- Database performance and query analysis
- Accessibility audit (WCAG compliance)
Is This Right for You?
This service is a good fit if:
- Your website is slow or unreliable and you don't know why
- You've inherited a codebase from a previous developer or agency
- You're worried about security vulnerabilities but haven't had a formal review
- You're planning a rebuild and want to understand what's worth keeping
- You want an independent technical opinion before making a major decision
Frequently Asked Questions
It depends on what you need. A typical engagement covers performance, code quality, security, dependencies, and infrastructure. We'll tailor the scope to your specific concerns during an initial discovery call.
Most audits are completed within one to two weeks. Larger or more complex systems may take longer. You'll get a clear timeline and scope before we start.
A detailed report covering findings, their severity, and a prioritised list of recommended actions. We'll walk you through it on a call and answer any questions. You'll leave the engagement with a clear roadmap.
The audit itself focuses on diagnosis. If you want us to carry out the fixes, we can scope a follow-on engagement. Many clients use the audit report to brief their own team or to get accurate quotes from other providers.
Not necessarily. A read-only review of the codebase and hosting configuration is usually sufficient. We'll be clear about what access I need and why, and we can work within whatever constraints you have.
Some of the most costly problems are invisible until they become urgent. An audit is as much about confidence as it is about finding problems — and in our experience, there's always something worth knowing.
Let's Find Out What's Really Going On
If something feels off, or you just want an independent set of eyes on your system, let's talk about what a diagnostic could look like for you.