Before a fix
Your app has fallen behind or was inherited. The audit tells you whether to fix, stabilize, rebuild or walk away, and prices the fix.
One audit. A clear verdict.
A paid, bounded review of one mobile app and its codebase. Use it before fixing an app that has fallen behind, or to answer a technical question when someone else will do the work. Audits start at $5,000.
You keep the written findings either way. If a fix follows within 60 days, the audit fee comes off it in full.
Starting investment
Audits start at $5,000.
That covers one mobile app and one codebase, its build and release path, and the backend, database, APIs and web app it depends on. A larger app, a second native codebase, or deeper security needs are quoted higher.
The fee comes off the fix in full if work starts within 60 days, and it replaces the maintenance onboarding month if we take over the app's maintenance within 60 days.
Three reasons to book one
The audit should answer a decision, not inspect everything.
For a decision
Due diligence, an acquisition, a vendor handoff or release readiness, where the implementation is owned by someone else.
Before maintenance
If we are going to look after an app we did not build, the audit is how we learn it first, and it replaces the onboarding month within 60 days.
What you get
Four things, in writing
- 1.A verdict: fix, stabilize, rebuild or walk away, with the reasoning behind it.
- 2.A fixed quote for the fix, when the answer is fix.
- 3.A check of who actually owns the App Store and Play accounts and the signing keys.
- 4.Findings ranked by severity across the app, its backend and APIs, dependencies, the release path and secure-development practice, referenced to the NIST Secure Software Development Framework and OWASP MASVS/MASTG where relevant.
What an audit is not
- A penetration test, a legal opinion or a compliance certification. Those need their own qualified scope, and we will say so early.
- An inspection of everything. Bring the decision you need to make.
- A free estimate. A fixed price on code nobody has read is a guess, and a guess protects neither of us.
- A standalone website review. We review the web and backend work around an app, not a website on its own.
Audit questions
Should every client start with an audit?
No. A new app starts with a scoping conversation, and a leadership engagement starts with the engagement itself. The audit is for an app that already exists.
What does an audit cost?
Audits start at $5,000 for one app and one codebase. A larger app, a second native codebase or deeper security scope is quoted higher, before any work starts.
Is the fee wasted if we do not continue?
No. You keep the written findings and the fixed quote either way. If the fix starts within 60 days, the fee comes off it in full.
What if the audit says it is not worth fixing?
Then it says so, in writing, with the reasoning. That is a legitimate outcome, and it is cheaper than finding out four months in.
Can you audit an app somebody else built?
That is the normal case. Most audits are on code written by a team that has moved on.
Bring the decision, not a request to inspect everything.
We will tell you whether the question fits an audit, needs a fix, or needs something else.
One less thing to worry about.