Independent forensic audits of legacy systems and vendor deliverables.

When businesses call us for an audit

• A vendor is quoting a six-figure change and you need a second opinion.
• Performance is degrading and nobody can explain why.
• The original developer is gone and the handover was thin.
• Finance has caught discrepancies the system can't explain.
• You're inheriting software through an acquisition.
• Insurance, compliance, or an investor is asking for an independent review.

What we actually do

Route and API mapping

A complete route-by-route audit of deployed endpoints and data controllers. Every entry point gets catalogued, categorised, and compared to what the documentation claims. The gap between the two is usually revealing.

Code forensics

Static and dynamic analysis for security vulnerabilities, concurrency deadlocks, unindexed queries, hidden circular dependencies, and the quiet patterns that cause intermittent production failures. We trace exactly where things break under load.

Schema reconciliation

Data-level audit of what the application thinks is there against what the database actually contains. Orphaned records, broken foreign keys, inconsistent currency and date handling, and transaction states that have no business existing.

Written architectural roadmap

A document that names the problems, ranks them by business risk and cost of inaction, and sketches the path to fix each one. Written to be useful to both engineers and the executives who sign the invoice — and specific enough to hold a vendor to.