№007 · Authentication & compliance · Live

22

problems found, all checked

Picking up a stalled project, and checking it before charging for it

A site where families build memory books, family trees and memorials. It came over from a previous agency and had more or less stopped moving, and part of the job was getting the hosting into Clive's own name. Before building anything new we went through the code properly: 22 things worth fixing, each one checked against the actual code before it went on an invoice. The worst was a way past the login on pages that were meant to be protected. That was closed in the first week. The whole scoped brief was delivered inside a week, with a few extras thrown in at no charge.

A Story To Tell
The four things people ask

Cost, speed, ownership, and what runs on its own.

What it cost
Not published. We do not put a client's invoice on our website without being asked to. What we can tell you is the shape of the ladder it sat on: starter builds are £300–£1,500 and anything built end to end across several systems starts at £3,000.
How fast
The whole scoped brief inside a week, with a few extras at no charge.
What they own
The code and the hosting, both moved into the owner’s own name as part of the job.
What runs unattended
The platform itself. The audit was a one-off piece of work, not something that runs.
Measured

Every figure, and where to check it.

Each row links to the basis for that number — what was measured, over what period and how it was verified. Where part of it is still open, the entry says which part.

Next.jsSupabaseStripe ConnectSecurity audit

The login problem was fixed in the first week and is described here without any detail that would help anyone. We have not put a figure on how much faster things move now than under the previous arrangement, because we could not verify one.

Other work
All of it, including what is unfinished →
Got one of these?

Tell us the job and we will price it.

Send us a message

You will hear back within 24 hours, from a person. (Ironic, we know.)

We won't email you unless you email us first. No spam, no mailing list, no “just circling back”.