What you get for it.
Every engagement ends with something written down. A conversation you can’t hand to an engineer six months from now isn’t a deliverable.
Audits
One piece of work, one price, one date. You know exactly what you're getting before you pay.
Security Audit
A full pass over your application's attack surface — authentication, authorisation, injection, dependencies, headers, and the way secrets move through your stack.
- Written report, findings ranked by exploitability and blast radius
- Proof-of-concept for anything I claim is exploitable
- Concrete remediation for each finding, not just a CVE number
- A 60-minute walkthrough call with your engineers
UX & UI Review
A structured critique of the flows that matter to your revenue: onboarding, checkout, and whatever your support inbox complains about most.
- Heuristic review of up to five core journeys
- Annotated screen-by-screen teardown
- Accessibility pass against WCAG 2.2 AA
- Prioritised fix list, sequenced by effort against impact
Performance Audit
Why your site is slow, in specifics. Field data and lab data, the render path, the payload, and the queries behind them.
- Core Web Vitals breakdown from real user data where available
- Waterfall and bundle analysis with the actual offenders named
- Server and query-level findings where they dominate
- A ranked list of changes with expected millisecond savings
Bug Hunt
One reproducible bug that has beaten your team. I find the root cause, and you get the reasoning, not just a patch.
- Root cause analysis written up in full
- A minimal reproduction you can keep in your test suite
- A proposed fix, as a patch or a pull request
- Notes on what let it happen, so the class of bug closes too
Retainers
A standing second opinion from someone who already knows the codebase. Monthly, cancel any time.
Essential Retainer
A standing line to an engineer who already knows your codebase. For teams who want review and advice, not a body on the team.
- Up to 8 hours a month of review, advice, and pairing
- Pull request review on anything touching auth, payments, or data
- Same-week response on non-urgent questions
- Monthly written summary of risk and technical debt
Plus Retainer
Everything in Essential, with hands on keyboard. For teams shipping continuously who want a second pair of eyes that can also fix things.
- Up to 20 hours a month, including implementation
- Priority response within one working day
- A quarterly security and performance re-audit at no extra cost
- Direct access over your team's own channel
Scoping
For when the problem needs defining before it can be quoted.
Discovery Deposit
Holds a slot in the schedule and pays for the scoping session. Credited in full against the engagement we agree.
- A 90-minute scoping session over video
- Access review of the repository or environment in question
- A written scope and fixed quote within three working days
- Your slot held for 14 days while you decide
Deducted from the final invoice. Fully refundable if we decide the work isn't a fit.
Something else?
Larger or stranger work gets scoped individually — a written quote with a fixed price and a date, then an invoice payable by bank transfer.
Ask for a quote