Holdfast

Services

Four ways to work with Holdfast, from a one-off audit to ongoing engineering. Every engagement starts read-only, at a fixed fee.

Rescue audit

For founders and owners of an app that is fragile, inherited or built quickly with AI tools.

from £950

A fixed-fee review of the code, hosting, data and payments. The report ranks every finding by severity, estimates the hours to fix each one, and ends with a clear fix-or-rebuild verdict.

  • Security: exposed keys, access control, known vulnerabilities
  • User data: whether one customer can see another's records
  • Payments: billing logic, webhooks, failed payments
  • Backups, restores and the data model
  • Hosting, costs and who owns each account
  • Code health and how much depends on one person's memory

Read a sample report

Deal review

For buyers, sellers and advisors on acquisitions from £250K to about £2m.

£2,500–£3,500

Technical due diligence sized for small software deals. Everything in the rescue audit, applied to a larger codebase, plus what the deal needs.

  • A one-page summary for buyers and advisors
  • Account and asset transfer checklist
  • Findings to fix before completion, and after
  • Revenue checks against the payment provider where access allows

Selling? A seller-side review finds the problems before a buyer does. Working with advisors

Caretaker

For businesses that depend on an app nobody is actively maintaining.

£750 a month

A monthly retainer that keeps the app secure and running, without hiring a full-time engineer.

  • Security and dependency patching
  • Backup checks, restore tests and uptime monitoring
  • Up to four hours of fixes a month
  • A short monthly health note

Fractional engineering

For when the foundations are solid and the next step is building.

£2,500 a month

Twenty to thirty hours a month of senior engineering on your roadmap: features, architecture and code review, with Caretaker included.

Specialist depth in Scala and Java on the JVM, Kafka and Spark. Background

Which one fits?

A 15-minute call is enough to tell. If none of them do, you will hear that too.

Or email rob@holdfastapps.com

Book a call