See the inside story.

What we look at

• Your live system. Our agents drive the app through Playwright — login flows, role boundaries, auth handling, exposed endpoints, console and network errors. You hand us a username and password.
• A recorded demo (optional). Walk us through your app the way you'd show a customer. Josh watches it and writes notes on the parts the agents can't see on their own.
• Stack + EOL. What you run. When the vendor stopped patching.
• Security posture. Top five risks in plain language. CVE scan of your dependencies.
• Migration effort. Lines of code. Endpoints. Entities. Weeks of work.
• Hiring-pool reality. Developer count for your stack. Wage trajectory.
• Top 3 risks. Prioritized. One mitigation each.
• The review call. 30 to 45 minutes. Josh walks you through every finding, answers questions, and tells you which ones are worth fixing first. No black-box scores.

How it works

1. 1. Pay $299. Stripe Checkout. Takes 20 seconds.
2. 2. Sign the MNDA. Plain language. Typed name. Takes 2 minutes.
3. 3. Give us a way in. Username and password for the running system so our Playwright MCP agents can log in. Optional: a short recorded demo of the app. Optional: a read-only repo token if you want a code-level look too.
4. 4. Get the report. 48 hours. PDF plus a browser view. Josh's written notes on every finding.
5. 5. The review call. 30 to 45 minutes on the calendar. Josh walks you through the findings live. Ask anything. If there's more work worth doing, we talk about it then.

What you keep

• A 6-section PDF report you can bring to your board.
• Written notes from Josh on every finding.
• The recording and summary of the review call.
• A signed MNDA we both hold.
• The $299 credited against month one if we sign a retainer within 90 days.