Service
Senior technical judgment, fixed price, when the stakes are high.
Independent assessments you can put in front of a board, an investor, or a regulator.
Codebase X-RayFreeGated
Start with an X-Ray of your codebase
Our agents read your codebase and report what a machine can prove: what it would cost a traditional team to build, how it is maintained, where it is exposed, how it is found. The judgment about what to do next is what you pay for.
Gated, not casual: a mutual NDA before any repo access, and read-only analysis; your code is never executed. We run a fixed number each month, so every one gets senior attention rather than a template.
Engagements start small on purpose. An X-Ray, then usually a first fixed-price fix under £6k, carrying the same signed done-test and money-back as a full build. We ask for bigger commitments after we've earned them.
The assessments
Each assessment is scoped up front and priced as a fixed deliverable against a signed done-test. The ranges below are indicative; the quote is fixed before any work begins. The done-test template is published in full, so you can see what you would be signing before you ask for a quote.
Technical Due Diligence
£10–30k
What you get
A full assessment of codebase, architecture, team, and IP, with a board-ready report of severity-rated findings and a clear view of the risk in the deal.
Who it's for
PE and VC investors, acquirers, and boards ahead of a transaction.
Security Assessment
£10–25k
What you get
Threat model, vulnerability scan, GDPR data map, and a prioritised remediation plan across infrastructure, application, and policy.
Who it's for
Teams holding sensitive data, and boards that need assurance ahead of a certification, audit, or enterprise deal.
AI Readiness Review
£5–15k
What you get
Where AI fits your product and operations, what to build versus buy, and a straight answer on what is not worth doing yet.
Who it's for
Leadership teams under pressure to act on AI without a clear starting point.
Architecture Review
£10–20k
What you get
Current-state architecture, decision records, a scaling plan, and technical debt prioritised by business impact.
Who it's for
CTOs and product owners planning growth on a system that is starting to strain.
Codebase Rescue Assessment
£10–25k
What you get
What is salvageable, what to rewrite, and the true cost to fix it, with a sequenced path out.
Who it's for
Owners of a stalled or inherited codebase deciding whether to repair or restart.
GDPR Compliance Audit
£10–20k
What you get
Data map, processor inventory, and a remediation plan you can evidence to clients, partners, and the ICO.
Who it's for
Companies handling personal data that must demonstrate compliance to close deals or satisfy the regulator.
Who signs the report
An independent assessment is worth what its author is worth, so it is worth saying who that is. Kevin Maguire, 20+ years as a CTO and CIO. CISSP. CISO at Earthport, responsible for security at Spark, and built CyberSee, a security risk assessment platform.
Machine findings are counted rather than asserted, and the judgment about what they mean is signed by a person who has been accountable for the answer rather than commentating on it.
Built to be a first engagement
Assessments suit a decision with money riding on it: an investor pricing a deal, a board needing independent assurance, a founder deciding what to do with a codebase. The price is fixed, the report stands on its own, and it is yours whatever you decide next.
Build on the findings
Where the report calls for building or fixing, it becomes the spec: a fixed-price build, delivered against a signed done-test.
Fixed-price deliveryKeep the judgment on tap
Where the decision needs ongoing senior attention, the assessment rolls into a reserved-capacity retainer.
Reserved senior capacityFacing a decision with money on it?
Tell us the decision. We'll come back with the assessment that answers it, and a fixed price for it. No obligation.