Loading...

The WebFix 10‑day
systems audit.

Two to three weeks, fixed price, fixed scope. You receive an architecture map of the system as it actually is, a risk register ranked by consequence, a remediation plan, and a fixed-price proposal for the work — and you own all four whether you hire us, hire someone else, or decide the honest answer is to do nothing yet.

Price

$18K – $35K

Fixed, quoted after the free review

Duration

2 – 3 weeks

Ten working days of engineering

Walk-away clause

Yours

Every deliverable, regardless of what follows

What you actually receive.

Most firms describe their assessment. We would rather show you the artefacts, because the difference between a useful audit and an expensive PDF is visible in about ten seconds — and you should be able to check before you pay.

SAMPLE — RISK REGISTER
CLIENT DETAILS REDACTED
ID FINDING SEVERITY CONSEQUENCE IF UNADDRESSED EFFORT
— Real redacted finding required HIGH Real consequence required —
— Real redacted finding required MED Real consequence required —
— Real redacted finding required LOW Real consequence required —

How the two weeks run.

Ten working days, spread across two to three calendar weeks so your team is not required to drop everything. Every phase produces something you keep.

Day 1 – 2

Handover

Repository, environments, credentials, ticket history and whatever documentation exists. We read the code before we ask you anything, so the first working session is about what you want the system to do — not about explaining what it currently does.

Output · Access confirmed · scope of the estate agreed in writing

Day 3 – 5

Architecture map & risk register

Every service, dependency, data store, scheduled job and third-party integration drawn as it actually is rather than as the last diagram claimed. Each risk written down with a consequence, a likelihood and a cost of leaving it alone.

Output · Architecture map · risk register, ranked by consequence

Day 6 – 8

Failure-mode review

Where this breaks next, and what it takes down when it does. Run-cost model, capacity headroom against your growth assumptions, and the security and compliance findings that cannot wait behind a rebuild.

Output · Failure-mode analysis · run-cost model · security findings

Day 9 – 10

Remediation plan & proposal

Sequenced work with its dependencies made explicit, a recommendation on what to repair versus replace versus retire, & a fixed price against a fixed scope for whatever we think should happen next. Presented live, with the engineers who did the work.

Output · Remediation plan · fixed-price proposal · recorded walkthrough

What you keep, either way.

The walk-away clause is contractual, not a gesture. These artefacts are delivered in editable formats with no licensing conditions, and taking them elsewhere is a legitimate outcome of having bought them.

Architecture map of the system as built
YOURS
Risk register ranked by business consequence
YOURS
Prioritised remediation plan with sequencing and dependencies
YOURS
Run-cost model and capacity assessment
YOURS
Security and compliance gap findings
YOURS
Repair / replace / retire recommendation per component
YOURS
Fixed-price proposal for the recommended work
YOURS
Recording of the final walkthrough
YOURS

Whether you should buy one.

Worth the money when

  • ✓ A system you depend on that nobody currently understands end to end
  • ✓ A build that has already missed a date, and you need to know whether the plan or the code is the problem
  • ✓ An inherited estate after an acquisition, or after the team that wrote it left
  • ✓ A rebuild being argued about internally, where the argument has no shared facts under it
  • ✓ A board or investor asking for a technical position you cannot currently defend
  • ✓ An audit finding or pen-test result you need scoped into actual engineering work

Don't buy one if

  • ✕ You already know what is wrong and just need hands — go straight to a sprint or a pod
  • ✕ The system is under a thousand lines and one person still knows it well
  • ✕ You want a second opinion on a quote, rather than a position of your own
  • ✕ You need the answer this week — the audit takes two to three
  • ✕ The decision is already made and you are looking for a document that supports it

Why it is priced this way.

Discovery is conventionally priced at five to ten per cent of the estimated build budget. On a $300,000 program that puts the audit near $25,000 — and it is the last point at which that program can still be cancelled cheaply.

The number is fixed before the work starts and does not move afterwards. There is no hourly rate underneath it, because an hourly rate makes the duration our commercial interest rather than yours.

What moves it within the range: the number of distinct services and data stores, how many runtimes and languages are in play, whether infrastructure is defined in code, whether a compliance regime applies, and how much institutional knowledge still exists inside the company.

Questions before you buy.

Why does an assessment cost eighteen thousand dollars?

Because it is two to three weeks of senior engineering time, and because the alternative pricing — free, unscoped, performed by someone whose only path to revenue is selling you the build — produces a document you cannot trust.

The industry convention is to price discovery at roughly five to ten per cent of the estimated build budget. On a $300,000 program that puts the audit somewhere near $25,000, and it is the cheapest point at which the program can still be cancelled.

Then that is what the report says, and you keep it. An assessment that can only ever conclude “hire us for the rebuild” is not an assessment, it is a proposal with a longer timeline.

We would rather write a report that saves you a seven-figure mistake and earns us nothing further than write one that wins us a program we do not believe in.

No, and the walk-away clause is contractual rather than a gesture. Every deliverable is yours, in editable formats, with no licensing conditions attached. Clients have taken our remediation plan to their in-house team or to another firm, and that is a legitimate outcome of buying it.

Read access to the repositories, the ability to run the system in a non-production environment, ticket and incident history, and ninety minutes each with two or three people who have worked on it. We do not need production data, and we ask not to be given it.

Number of distinct services and data stores, how many runtimes and languages are in play, whether infrastructure is defined in code or by hand, whether a compliance regime applies, and how much of the institutional knowledge still exists inside the company. We quote the fixed number after the Code & Risk Review, not before.

Yes, and we will sign yours rather than insisting on ours.

Five ways to engage us.

Nobody signs a modernization program to a firm they met last week. Each rung below exists to de-risk the next one, and every client we have on a program today started somewhere near the top of this list.

Rung 01

Code & Risk Review

Ninety minutes, live and recorded. Two of our engineers, your codebase and your worst problem. You keep the findings whether or not you hire us. This is not a sales call — there are no salespeople on it.

No charge

90 minutes

Rung 02

Systems Audit

Our named diagnostic. Fixed price, fixed scope, walk-away clause: you own the architecture map, risk register, remediation plan and a fixed-price build proposal regardless of what you do next.

$18K – $35K

2 – 3 weeks

Rung 03

Stabilization Sprint

Stop the bleeding on a failing system, or take one stalled AI pilot the whole way into production. Most companies we meet have exactly one of these waiting.

$85K – $180K

8 – 12 weeks

Rung 04

Modernization Program

The rebuild. Phased and milestone-billed, with a named architect and a steering cadence you can take to a board. Almost never sold cold — it is bought by people who already watched us.

$250K – $750K

6 – 12 months

Rung 05

Embedded Engineering Pod

Four to six engineers and a tech lead, running your roadmap under our delivery process. The rung that compounds, and the one we have been doing longest.

$28K – $65K

per month, ongoing

LET'S BUILD YOUR AI FUTURE

Tell us about your project and we’ll be in touch.

Celebrating Our Silver Jubilee – 25 Years Of Custom Software Development Excellence | Since 2002

WebFix believes in transparent and upfront pricing. By knowing your anticipated budget, we can provide a more accurate and customized scope for your project.

$0

©2002-2026 Webfix, Inc. All Rights Reserved. Webfix™

Design By Founder/CEO – Shahzad Ali