Route 03
One thorough look at your source code.
No partnership, no subscription. We run your code through our standard analysis tooling and the tooling we built ourselves, and on top of that do the manual checks a machine cannot do. The result is a report you can carry on with yourself, or put in front of the party that built it.
At a glance
- You provide
- Access to the repository, nothing else
- You get
- A report with all findings, ranked from critical to cosmetic, plus a conversation to explain it
- Hosting
- Stays entirely with you
- Repeat
- One-off, or at any frequency you like: after every sprint or per quarter, for example
What the report contains
Not a list of hundreds of automated warnings. Instead, every finding that matters, ranked from critical to cosmetic, along with what can happen if you do nothing and what the shortest way to a solution is.
- Security. Access, authorisation, personal data, dependencies with known vulnerabilities.
- Robustness. What happens on an outage, under peak load or when an integration does not respond.
- Transferability. Can another developer take this over, or does everything hang on one person?
We explain the report in person, to your builder as well if you like. After that it is yours. And if it turns out your application is in good shape, we write that down just as clearly.