App audit: reviewing an existing app
Companies with an existing web app, PWA or customer portal that need an independent assessment before a decision.
Updated: 2026-11
An app audit shows the real state of an existing application: permissions and security, data protection, accessibility, code quality, dependencies and operations. It makes sense before taking over from another agency, before a major expansion or when customers ask for evidence. The result is a prioritised action list.
Many applications were built quickly and have run for years. When the original agency is no longer available, a major expansion is planned or a customer asks for security evidence, nobody knows exactly the state of code, permissions and dependencies.
An audit creates this clarity before money goes into expansion or a rebuild.
What you get
Security and permissions
Review of authentication, roles, tenant separation, secrets and known vulnerabilities in dependencies.
Data protection
Data flows, storage locations, deletion and services used, compared with the FADP and GDPR.
Accessibility
Sample testing of key journeys against WCAG 2.1 AA.
Code and operations
Structure, tests, documentation, deployment and maintainability, with an assessment of whether further development or a rebuild is cheaper.
How it runs
- 01
Access
Access to code, environments and documentation, conversation with those responsible.
- 02
Review
Technical review of security, data protection, accessibility and code.
- 03
Assessment
Rate findings by risk and effort, describe options for the way forward.
- 04
Handover
Report with action list and recommendation, discussed with your team.
Price framing
Fixed scope based on application size and review depth; a penetration test can be added through specialised partners.
Indicative, not a binding quote — the frame is confirmed during scoping.
What drives the price? → Cost guide
Parent service: App Development
FAQ
Is an app audit a penetration test?
No. We review code, configuration and workflows. A penetration test with targeted attacks can be added through specialised partners.
Can you take over the app afterwards?
Yes, if it runs on a stack we support and the audit recommends further development. The recommendation is independent of that.
What do you need for the audit?
Access to the source code, a test environment and existing documentation, plus a conversation with those responsible.
App audit: reviewing an existing app
Companies with an existing web app, PWA or customer portal that need an independent assessment before a decision.