What if our codebase is a genuine disaster?
Most of them are. No documentation, no tests, dependencies that no longer resolve, a build that fails on any current machine. That’s the normal starting point, not a reason to decline.
Can you do this without touching our production data?
Yes. We work from a read-only copy of the repository and, where relevant, a sanitised database dump or schema export. We don’t need real customer records to read code, and we’d rather not have them.
What if you tell us to do nothing?
Then you’ve spent $4,900 to avoid a six-figure mistake, and you have a document that says so with reasoning attached. That’s a good outcome — it’s just not one most vendors are willing to sell you.
Do we have to hire you afterwards?
No, and there’s no clause anywhere that suggests it. If the report leads to work, we’d like to do it. If you take it to your internal team or another vendor, the report is written to be useful to them too.
Is two weeks really enough?
For a single system, usually yes — reading code for structure and risk is a different job from rewriting it, and modern tooling covers ground fast. For a portfolio of several applications, it isn’t, and we’ll tell you that on the first call rather than after you’ve paid.
Where are you, and does that matter?
Chișinău, Moldova — between Romania and Ukraine, an EU candidate country with about 26,000 IT specialists. We work a shifted schedule that overlaps 9:00 AM to 1:00 PM US Eastern.
Moldova is not at war and is not a party to the conflict. We’ve had no conflict-related interruptions and can share our continuity plan before you sign anything — it’s a reasonable thing to want to see.
Do you have SOC 2?
No. We have written security policies, role-based access control and documented offboarding, and we’ll share them. If SOC 2 is a hard requirement for a two-week read-only engagement, we’re probably not the right fit, and we’d rather say that now.
Who owns the report?
You do, outright. Mutual NDA signed before you send us anything, and we don’t reference your system publicly without written permission.