Security
Weaknesses an attacker could use — from injection and broken access checks to leaked secrets and risky dependencies.
Performance
Slow queries, wasted work and code that won't cope as your user numbers grow.
Bugs
Logic errors, unhandled edge cases and fragile code that's waiting to fail in production.
A fix plan
Every finding ranked by risk and effort, so you know exactly what to fix first.
What We Offer
A second pair of expert eyes on your code
White-box testing means we look inside your software — reading the source code itself — rather than only poking at it from the outside. That lets us find problems that external testing can miss.
A senior engineer oversees every review, checks the findings, and writes the feedback — so you get real engineering judgement, not an automated dump of warnings.
And it's not just security. We'll also tell you where your code is slow, where it's likely to break, and anything else that's worth your attention.
Let's Talk →How It Works
From first chat to fix plan
Get in touch
Contact us for a free chat. Tell us about your software and what's worrying you, and we'll confirm the size and price.
NDA & access
We sign a non-disclosure agreement to protect your code, then you give us read access to it.
We review
A thorough analysis of your code, with a senior engineer overseeing the work and checking every finding.
You get the report
A written report covering security, performance and bugs, with a prioritised plan for fixing them.
Pricing
Fixed prices, sized to your code
Every review includes a written report covering security, performance and bugs, plus a prioritised fix plan. All prices include VAT.
| Package | Size of code | Price (inc. VAT) |
|---|---|---|
| Small | Up to 10,000 lines | From £495 |
| Medium | 10,000 – 50,000 lines | From £1,250 |
| Large | 50,000 – 150,000 lines | From £2,950 |
| Larger systems | Over 150,000 lines | On request |
| Re-check after fixes | Any | 25% of the original price |
Prices are a starting point. We'll confirm a fixed price after our first chat, before any work begins.
FAQs
Common questions and answers
Due to the complexities involved in running and deploying some applications, we'd prefer your own team work through the fix plan. Once fixes are in, our re-check confirms they work.
However, if your application is simple enough to run, test and deploy, we may be able to help on a case-by-case basis