Discuss a project

DL-AUD-04 · Audit / Code & architecture

Code and architecture audit, including AI-built apps

Inherited, outsourced or written with Cursor, Lovable or Claude Code: we read the codebase your business runs on and tell you what holds, what breaks at scale and what to rewrite.

Discuss a project Scope
51.4344.0060°01AUDITDETAIL 01 · AUDIT · DL-AUD-04

When a code and architecture audit pays off

  1. 1.

    The original developers or agency are gone, and so is the documentation

  2. 2.

    An app built with AI tools now holds real orders and customer data

  3. 3.

    Every new feature breaks something that used to work

  4. 4.

    You have to decide: keep, refactor or rewrite

The codebase and its infrastructure configuration go into the review, which returns a module map of the system as built, a risk register and a keep, fix or rewrite verdict per component.read accessconfigCODEBASEinherited / AI-builtINFRASTRUCTUREcloud config / CICODE REVIEWmap / probe / rankMODULE MAPas builtRISK REGISTERranked by impactVERDICTkeep / fix / rewrite
  1. 01CODEBASEinherited / AI-builtCODE REVIEWmap / probe / rankread access
  2. 02INFRASTRUCTUREcloud config / CICODE REVIEWmap / probe / rankconfig
  3. 03CODE REVIEWmap / probe / rankMODULE MAPas built
  4. 04CODE REVIEWmap / probe / rankRISK REGISTERranked by impact
  5. 05CODE REVIEWmap / probe / rankVERDICTkeep / fix / rewrite
Fig. 01What an audit reads and what it returnsThe codebase and its infrastructure configuration go into the review, which returns a module map of the system as built, a risk register and a keep, fix or rewrite verdict per component.Scale NTS

What the engagement covers.

  1. 01

    Architecture map

    Modules, data paths and dependencies drawn as built, not as documented.

  2. 02

    Code quality and tests

    Test coverage, error handling, dead code and the parts nobody dares to touch.

  3. 03

    AI-built code review

    What Cursor, Lovable or Claude Code skipped: authorization, secrets, input validation, data handling.

  4. 04

    Scale and cost

    Where the system breaks as orders grow, and what it costs to run.

  5. 05

    Technical due diligence

    Before you buy or invest: what the code really does and what it costs to keep.

How it runs.

  1. P01

    Access

    Read-only access to repositories, cloud configuration and logs.

  2. P02

    Map

    Modules and data flows documented as they really are.

  3. P03

    Probe

    Security, failure paths and load limits tested against the code.

  4. P04

    Rank

    Every finding ordered by business risk and cost to fix.

  5. P05

    Brief

    Walkthrough with your engineers and decision-makers; the report stays yours.

What you get.

ItemDeliverableQty

  1. 01Architecture and dependency map of the system as built1
  2. 02Risk-ranked findings with code references1
  3. 03Keep, refactor or rewrite verdict per component1
  4. 04Remediation plan with effort estimates1

Stack08

  • TypeScript
  • Node.js
  • Python
  • Ruby
  • AWS
  • PostgreSQL
  • Amazon SP-API
  • Amazon Ads API

Related projects.

  1. DL-001Amazon SP-API optimization for an agencyVaso Group · USA01Audit02Stabilize
  2. DL-017Rescuing an inherited Amazon advertising SaaS on deadlineName withheld · US South01Audit02Stabilize04Secure
  3. DL-043Amazon and Walmart API architecture review for an eCommerce SaaSName withheld · Singapore01Audit02Stabilize
  4. DL-040Amazon Vendor data architecture for a Japanese electronics brandName withheld · Japan01Audit03Build
  5. DL-042Amazon Vendor forecasting and purchase order consultingName withheld · South Korea01Audit02Stabilize
  6. DL-018Architecture audit of a catalogue-mirroring Amazon repricerName withheld · US South01Audit
All case studies

Questions engineers ask us.

Q01Do you audit apps built with AI coding tools?

Yes. Apps generated with Cursor, Lovable, Claude Code and similar tools are reviewed like any other codebase, with extra attention to what generators tend to skip: authorization, secrets, input validation and tests.

Q02What access do you need?

Read-only access to the repositories, the infrastructure configuration and the logs. We change nothing during the audit.

Q03What if the verdict is rewrite?

You get the reasons per component and an estimate. You can rebuild with us, with your own team or with another partner; the report is yours.

Q04Is this the same as an Amazon SP-API audit?

No. Here we review your system for you. When Amazon assesses your app, see Amazon audit readiness.

Related services.

Know what you inherited

Tell us what the system does and how it was built. We reply with an audit scope and a timeline.

Discuss a project