Legacy Application Assessment at a Fixed Price

Before anyone spends money on a grown application, it should be clear where things stand. That is exactly what the assessment is for: a delimited package with a fixed scope, a fixed price and a result you can decide with – whether with me or with someone else.

What you get

• Technical findings: PHP version, framework, dependencies, database, deployment, integrations – and how far all of it is from today's standard.
• Security review: known vulnerabilities in libraries, typical weaknesses in the code (injection, XSS, session handling, uploads), configuration and access protection – prioritized by risk.
• Stability and performance: error handling, logging, database bottlenecks, places that break under load or with growing data.
• Business logic map: which processes depend on the application, where undocumented logic sits, what must not break under any circumstances.
• Roadmap: recommended order of modernization in stages, with an effort estimate per stage and the honest answer to "upgrade or rewrite?".
• Report and meeting: a written report plus a session in which we go through the results – with your management or your team if you like.

Process

1. Short preliminary call (30 minutes): what is the application, what worries you, who uses it? Afterwards I name the fixed price.
2. Access: read access to the repository or codebase, a copy of the database structure, access to a test or staging environment. I do not touch production systems in this phase.
3. Analysis (2–3 working days): I use AI-assisted tools to review large codebases – evaluation and judgement are mine.
4. Result: report, roadmap, discussion. If you then want to implement the modernization with me, the assessment fee is credited.

Who it is for

• Companies whose developer or agency is no longer available and who need to know what they inherited
• Management that needs a solid basis for the decision "modernize or replace"
• Buyers or investors taking over software as part of a company
• Teams that want a second opinion on an application before a large project starts

What the assessment is not

Not an automated scan report and not a sales pitch for a rewrite project. If the application is better than feared, the report says so. If an off-the-shelf tool is the better solution, so does that.