$9,500 · 5 working days · fixed scope
One week inside your codebase. Every stone turned.
Five working days on architecture, security, payment flows, and how your team ships. You get the full findings report, a remediation roadmap your team can execute, two readout calls, and 30 days of written Q&A.
Delivered by a senior platform engineer with ten years across SaaS, marketplaces and payments infrastructure. NDA standard. Read-only access. Your code never leaves a controlled environment and is deleted on completion.
01 / Fit
Who this is for
You are heading into investment or acquisition due diligence and want to find the problems before they do.
You are betting the company on this codebase and cannot afford unknown risk.
Outages keep happening and nobody inside can say why with confidence.
A review told you what you have. Now you need the full map of what to do about it.
02 / Deliverable
What you receive
Everything in the Independent Technical Review, taken to the bottom. The full findings table, plus:
Findings table · one row per area reviewed
01
Area reviewed
02
Finding
03
Severity
04
Classification (salvage, fix, rebuild, defer)
05
Challenge for your existing team
06
Recommended next action
Architecture assessment: how the system is really put together and where it will break under growth.
Security pass across authentication, authorization, data handling, and secrets.
Payment and billing flow review, end to end, by a Stripe-certified billing architect.
Remediation roadmap: the first 90 days in order, then quarter by quarter.
Two readout calls: one for you, one with your team if you want it.
30 days of written Q&A after delivery.
03 / Sequence
How it works
- 1
Pay to reserve
Payment reserves your week. Nothing starts until you are ready.
- 2
Short intake form
Sent immediately after payment. Company details, repos, environments, what is at stake.
- 3
You grant read-only access
A checklist walks you through it. Repos, staging, infra, payment sandbox.
- 4
The clock starts
The five-day clock starts when access is confirmed working, not when you pay. You get that confirmation by email.
- 5
Delivery and readouts
Report and roadmap land in your inbox, then two readout calls and 30 days of written Q&A.
04 / Access
What access is needed
- Read-only access to the repositories in scope, including commit history.
- Staging or UAT environment with role logins.
- Deployment and infrastructure overview, plus observability read access if available.
- Payment sandbox, if payments are in scope.
Partial access is workable. The report states clearly what was verified and what could not be.
05 / Scope
Where the fences are
- One product and its supporting repositories. A second product is a second engagement.
- Deep security penetration testing is excluded. The security pass is architectural, not adversarial.
- Implementation of the roadmap is quoted separately. Never required.
06 / Confidentiality
Confidentiality
A mutual NDA is available on request before payment. Your code is reviewed in a controlled environment. It is never shared, and it is deleted on completion with written confirmation.
AI-assisted analysis tooling is used under the same confidentiality obligations. You can opt out. Opting out reduces how deep the review can go in the fixed time, for the same fee. That trade-off is yours to make.
07 / FAQ
Straight answers
What is the refund policy?
Full refund any time before access is granted. No refund after the clock starts, because the work starts.
How is this different from the Independent Technical Review?
The review tells you what you have. The week tells you what you have, what to do about it, in what order, and stays with you through the first questions. If the review is a diagnosis, this is the diagnosis plus the treatment plan.
Can I use this for investor due diligence?
Yes. The report is written to hold up in front of a technical audience, and the findings format maps cleanly onto what DD teams ask for.
What if I never get around to providing access?
Your choice: a full refund, or we hold your slot until you are ready.
Who actually does the work?
Andrej, directly, all five days. Not delegated, not outsourced.
Full details in the product terms.
Know everything before you bet on it.
$9,500, five working days from confirmed access. Full refund any time before access is granted.
Prefer an invoice and bank transfer? Email andrej@invocation.io.