Frequently Asked Questions

General questions about our services

What distinguishes you from other IT consultants?

We focus exclusively on code quality and development processes. Our auditors are experienced developers who work in practice daily, not just theorists. We offer concrete, practical recommendations instead of vague advice.

What types of organizations do you work for?

We work for organizations of all sizes, from startups to large enterprises. Our clients range from software companies to financial institutions, government organizations, and non-profits. What matters most is that software is being developed and there's a need for quality improvement.

Which programming languages and technologies do you support?

Our experts have experience with a wide range of technologies: Java, C#/.NET, Python, Ruby, PHP, JavaScript/TypeScript, C/C++, and many more. We also cover legacy systems like COBOL, RPG, and various assembler variants. If we don't have in-house expertise for your specific technology, we'll be honest about it.

How do you handle confidential code and business data?

Confidentiality is central to our approach. We always work with strict NDAs, use secure access methods, and all our staff are bound by our comprehensive code of conduct. We never share information about clients or projects without explicit permission.

Source Code Audits

What exactly does a source code audit involve?

We analyze your source code on various aspects: security, maintainability, performance, code standards, and architecture. We identify vulnerabilities, technical debt, and improvement opportunities. The result is a detailed report with concrete recommendations.

How long does a code audit take?

This depends on the size and complexity of your codebase. A small application can be audited in 1-2 weeks, while large, complex systems may require 4-6 weeks. After an initial analysis, we provide you with an accurate time estimate.

Can you also audit legacy code?

Absolutely. We have extensive experience with legacy systems in various languages and technologies. Legacy code often requires a different approach, and we understand the unique challenges and constraints involved.

What if critical security issues are found?

We immediately inform you about critical security vulnerabilities. The decision about disclosure lies entirely with you as the client. We can advise on industry standards for responsible disclosure, but always respect your decisions.

Development Process Audits

Why should I have my development process audited?

Inefficient processes cost time and money. An audit helps identify bottlenecks, improves your team's productivity, and can lead to faster time-to-market. We look not only at tooling, but also at team dynamics and organizational culture.

Do you follow specific methodologies like Scrum or Agile?

We are methodology-agnostic. Instead of promoting a specific method, we look at what works best for your situation, team, and organization. Often a hybrid approach works best.

Troubleshooting Services

What types of problems can you help with?

We help with persistent bugs, performance issues, integration problems, intermittent errors, and complex legacy system issues. If your team is stuck on a technical problem, we can often provide a fresh perspective and solution.

How quickly can you start on urgent problems?

In real emergencies, we can often assign a specialist within 24 hours. We understand that some problems can't wait and adjust our planning accordingly.

Do you work on a 'no cure, no pay' basis?

For many troubleshooting projects, we do indeed offer 'no cure, no pay' options. This ensures we work in a targeted manner and you have no costs if we can't solve the problem. We discuss the specific conditions during the intake meeting.

Practical matters

How does the collaboration work in practice?

After an intake meeting, we match you with the most suitable expert. We work both remotely and on-site, depending on your preference and the nature of the project. Regular updates keep you informed of progress.

What are your rates?

Our rates depend on the complexity of the project and the required expertise. After an initial conversation, we provide a transparent quote without hidden costs. We always strive for a positive ROI for our clients.

Do you also offer training to teams?

Yes, we can offer training and coaching as part of our recommendations. This can cover secure coding practices, code review techniques, or specific technologies. Training is usually more effective than just a report.

How can we best contact you?

The easiest way is via email: info@sourcecodereviews.com. You can also use the contact form on our website. We usually respond within a few hours during business days.