See what's under the water line before you pay to fix it.

Three steps, each useful on its own: a Debt Check without code access, a Code Audit on the code, and a Roadmap with fixed prices. Start where it makes sense for you.

  • Debt Check

    A quick outside view from a questionnaire and your composer.lock. No NDA, no repository access.

    €300

    Details
  • Code Audit

    Static analysis and a manual review of the code, under NDA. Ends with fixed prices.

    from €800

    Details
  • Roadmap

    A staged plan to replace legacy parts, with a fixed price for each stage.

    from €1,900

    Details

€300, report in 3 business days

Debt Check

An engineer's assessment, without code access. You fill in a questionnaire (about 30 questions) and send your composer.lock. A 30-minute call, in English or Polish, is optional. The free Lock Check already shows what the lock file itself says: end-of-life dates, known advisories and abandoned packages. The Debt Check starts where the Lock Check ends and adds what the file can't show: how much the business depends on the app, how it is hosted, deployed and tested, and who still knows the code. The report is about what that means for your business and what to do next.

  • Risk score from 1 to 5

    With the reasons behind it, in plain language: how much the business depends on the app, how changes reach production, and who still knows the code.

  • Priorities

    Which risks to deal with this month, and which can wait.

  • What blocks the next step

    Lock Check names the packages that hold PHP back. We add the server, hosting, deployment and tests, and put it all in the order you would hit it.

  • A recommended path

    Keep it safe, upgrade, or replace in stages: which one we recommend for your app, and why.

  • Price ranges

    For the recommended path and the alternatives, with the first step you can order.

How a Debt Check runs

  1. 01

    You book

    Through the contact form. Before you pay anything, we confirm that the Debt Check fits your case and agree on whether we may use AI tools on your code (see How we work).

  2. 02

    Questionnaire and invoice

    About 30 questions, a request for your composer.lock, and the invoice. The Debt Check is paid upfront.

  3. 033 business days

    Report

    Within 3 business days of receiving your answers and the composer.lock. A Takeover or Care can often be quoted at a fixed price straight from it.

from €800, report in 5–7 business days

Code Audit

NDA first, then read-only access to the repository. Tools tell us where to look; we read the code ourselves. See a sample report for a fictional application.

  • PHP compatibility

    What breaks on PHP 8.4 and 8.5, and how much of it Rector can fix automatically (dry run).

  • PHPStan level

    The level the code reaches today and what stands in the way of the next one.

  • Dependencies and CVEs

    Outdated and abandoned packages, known vulnerabilities, risky version constraints.

  • Hotspots

    Files that change often and break often, from the Git history.

  • Tests

    What exists, what runs, and which critical paths have no coverage.

  • Secrets in the repository

    Passwords and keys committed to Git, with steps to rotate them.

  • Architecture and security review

    Done by hand: structure, data access, authentication, input handling.

  • Three options with fixed prices

    Ranked by risk and cost, so you can decide and budget.

Code Audit sizes

Counted without vendor code. Prices are net.
SizeLines of PHP codePrice
Sup to 50,000€800
M50,000 to 200,000€1,500
Lover 200,000quoted individually

from €1,900

Roadmap

When the answer is "replace it in stages". The Roadmap is the plan the modernization sprints follow.

  • Module inventory

    What the system does, part by part, and how the parts depend on each other.

  • Order of stages

    Which part moves first with the strangler fig method, and why.

  • Fixed price per stage

    So you can approve one stage at a time.

  • Test plan

    How we prove each stage behaves like the old code.

  • Risks

    What could go wrong, and what we do about it.

The three at a glance

Debt CheckCode AuditRoadmap
Code accessnoneread-only, under NDAread-only, under NDA
Time3 business days5–7 business daysagreed in the quote
Resultreport with price rangesreport with fixed pricesstaged plan, fixed price per stage
Price€300from €800from €1,900

Audit questions

Why pay for an audit instead of getting a free quote?

A quote without looking at the code is a guess, and someone pays for the guess later. The audit is what lets us give you a fixed price and stand behind it.

Who sees our code?

The engineer doing the audit, under NDA, and the AI tools named in our data processing agreement, used only with your written consent and never for training. Nobody else. Details in How we work.

Can we use the report with an investor or a buyer?

Yes. It is written for technical and non-technical readers, and it is yours to share.

What if we don't continue with you?

Then you have a report any team can work from. There is no obligation to order the next step.

Start with the Debt Check

€300, no code access, report in 3 business days.