Audits and code review
( service 04 )
A second pair of eyes on every line that matters. We read your code, your architecture and your dependencies, and hand back a plan your team can act on.
- Price
- from ₦3,000,000from $3,500from $6,000
- Timeline
- 2 to 5 weeks
- Team
- 2 people
What you get
- 01
Source code review
Line-by-line review of auth, payments, data handling and crypto.
- 02
Architecture review
How data moves, where it is stored and who can reach it.
- 03
Dependency audit
Every library checked for known flaws, licences and abandonment.
- 04
Compliance readiness
The gaps between today and SOC 2, ISO 27001 or HIPAA, in plain words.
- 05
Remediation plan
Findings ranked by risk and effort, so the first sprint fixes the most.
- 06
Follow-up review
We review the fixes and sign off once they are in place.
Timeline
- ScopingWeeks 1 to 11 weeks
- ReviewWeeks 2 to 32 weeks
- ReportWeeks 4 to 41 weeks
- Follow-upWeeks 5 to 51 weeks
Questions
Do you need access to our repositories?
Read-only access to the parts in scope. We work under an NDA and delete our copies when the audit ends.
Is an audit the same as a pentest?
No. A pentest attacks the running product from outside; an audit reads the code from inside. Most clients get the most out of doing both.
Can you help us pass a compliance audit?
We prepare you for one. We map your gaps, help fix them and work with your auditor, but we do not issue certificates ourselves.
Which languages do you review?
TypeScript, Go, Python, Rust, Java, Kotlin and Swift most often. Ask us about anything else.
( next step )