Service
Production Readiness Audit
Fixed-scope review of one AI-built application: secrets, auth, data flow and failure paths — with a written fix path when you need one.
Book a free 30-minute scoping call
Thirty minutes on fit, access, boundaries and timing. No repo review and no written findings on this call.
What you get
Prioritised findings with evidence and coverage limits. Audit tier adds a 90-day roadmap and handover. Fix Sprint and Retainer are optional follow-on.
Who it is for
You ship AI-assisted code and need written findings before launch, a customer security review, or diligence. Not a penetration test.
How we communicate
- Weekly written update on progress and blockers.
- One named contact for the engagement.
- Async-first, with Bangkok afternoon overlapping European morning.
- Reply within one business day on open questions.
Packages
| Tier | Includes | Price | Timeline |
|---|---|---|---|
| Quick Check | One repo: secrets, auth, obvious risks. One-page findings. | Price on request | 48 hours |
| Review | Quick Check plus data flow, webhooks, logging and a prioritised fix list. | Price on request | 3 days |
| Audit | Evidence-backed findings, 90-day roadmap and handover for one agreed application. | €3,500 | 5 review days |
| Fix Sprint | We implement fixes from an Audit or equivalent scope. | €6,000–10,000 | 4 weeks |
| Retainer | Ongoing monitoring, evals and production ownership. | €1,500–4,000/month | Monthly |
Confirmed euro prices are listed below. Everything else stays Price on request until scope is agreed in writing.
Questions
Is the scoping call the same as the audit?
No. The call is fit and access only — no repo review and no written findings. The Audit is the paid five-day engagement.
What does the €3,500 Audit include?
Five review days on one application. Repos and critical flows agreed in writing. Deliverables: prioritised findings with evidence and limits, a 90-day fix roadmap, and a handover walkthrough.
What is excluded?
Reviews are not a penetration test, certification or legal advice. We state coverage limits and do not claim to find every issue.