Rescue & Harden Sprint
Rescue and harden: fix what the audit found.
After an audit, or when the app is broken now.
Get a free technical assessmentWhat it's for
After an audit, or when the app is broken now.
What you get
- Fixes from the findingsThe sprint follows the written list, not a new wishlist.
- RLS and server-side checksThe browser stops being the place that enforces access.
- Secrets rotatedA key that leaked stays leaked until it is replaced.
- Migrations in version controlThe database can be rebuilt from the repo.
- Dev, staging and production environmentsChanges stop landing straight on the live app.
- CI with checksA broken policy fails the build instead of failing in production.
- Error trackingFailures have a place to land.
- Runbook and handoverSomeone else can operate it after we leave.
How it works
- Scope. We turn findings into a written list you approve.
- Acceptance criteria. You know what 'done' means before we start.
- Build. Fixes land in your repo and your accounts.
- UAT. You test against the criteria. We fix gaps in that list.
- Handover. Runbook, access removed where you want it removed, and the final payment after you sign off.
What we need from you
- The audit report, or a free assessment if you do not have one yet
- Read-only access to the repository
- A staging URL
- A read-only role on the database project
- A list of roles and user types
What happens next
A free assessment, a written proposal, and your acceptance. Then the sprint, your acceptance testing, and the final payment.
- Free assessment
- Proposal
- Acceptance
- 30% advance
- Build
- 40% on completion
- UAT (your acceptance testing)
- 30% after UAT
Custom quote after a free assessment. Terms: 30% to start, 40% on completion, 30% after your acceptance testing.
FAQ
Questions worth answering first
Do you rebuild the whole app?
Only if the assessment shows a rebuild is the smaller path. Otherwise we keep what works.
Can you start without an audit?
Yes. The free assessment decides whether a short sprint is enough or whether an audit should come first.
Who owns the code?
You do. Work happens in your repository and your hosting accounts.
What does acceptance testing mean?
You test against the criteria in the proposal. The last 30% is due after you sign off.
How is it priced?
A custom quote for the written scope. 30% to start, 40% on completion, 30% after acceptance testing.
Next step
Not sure what your app needs?
Book a free 30-minute technical assessment. You'll leave with a short written list of risks and next steps, whether or not you hire us.
Every price is a custom quote after your assessment. No work starts until you accept the proposal.