Buying software or a company
Know what you’re taking on before you sign.
Code and security reviews where every finding is checked twice
Before you raise money, sell, launch or rely on code someone else wrote, it’s worth knowing what’s in it. We read the whole codebase with AI, then check every finding with a second, independent pass before it reaches you.
When it’s worth doing
A supplier has delivered
An independent check before you accept the work.
Before a big launch or demo
Find the problems before your customers do.
AI-written code has piled up
A clear view of what your coding assistants have actually produced.
You’ve inherited an app
What it does, what’s risky and what to fix first.
How we review
-
We map every part of the system
-
Reviewers look through separate lenses
Security, data protection, correctness, performance, and “will it even start?”.
-
Each finding is written from the source code
With evidence.
-
Independent passes try to disprove each finding
Anything that doesn’t survive is dropped.
-
You get a ranked list and a fix plan
Reviews we’ve done
Our own warehouse platform
Each finding was reproduced and challenged by two independent reviewers. Any finding that didn’t survive the challenge was dropped.
A client’s operations portal
Each finding was re-checked against the code before it reached the client.
A third-party build, reviewed for our client
An independent review of a data platform another supplier had built, with re-testing after each round of fixes.
What you receive
For directors
A plain-English summary: what’s wrong, how serious it is and what it costs to fix.
For developers
A detailed register with file references and evidence.
A fix plan
In order of risk, sized so you can schedule it.
How we keep findings accurate
Evidence for every finding
Each finding is written from the source code, with file references and evidence.
Checked twice
Independent checking passes try to disprove each finding before it reaches you.
Read-only, never live data
Read-only access to the code is enough. We never touch live data.
Totals only, with permission
Findings stay with you. We only ever quote totals, never details, and only with your permission.
Where the AI runs
Tier 1
A hosted model, through a UK or EU endpoint
The best quality for the least effort. Before any of your data goes to a provider, we check that its business terms rule out training on it, and we tell you which region does the processing.
Tier 2
Inside your own cloud account
The model runs in your AWS or Azure account, under your access controls and your logs.
Tier 3
A private model on hardware in the UK
Open-weight models on your hardware or ours. Nothing goes to an outside AI provider. Our own research and document reading run this way.
Storage location and processing location aren’t the same thing. We’ll tell you both, in writing.
What it costs
-
Code or security review
From £3,000
For a small codebase. A fixed price after a 30-minute call.
Prices exclude VAT where VAT applies.
Questions
Do you need access to our live systems?
No. Read-only access to the code is enough. We never touch live data.
Will it embarrass our developers?
It’s about the code, and we write it that way. Most teams use the register as their to-do list.
Is it confidential?
Yes. We sign an NDA, and findings stay with you. We only ever quote totals, never details, and only with your permission.
Get in touch
Tell us what the code is and what’s riding on it.
One paragraph is enough. We’ll reply with honest thoughts on whether we can help, and what it would cost.