Something feels wrong
Releases are late, bugs return and every change costs more than the last one.
IT audit services: the truth about your software, in plain words.
A senior engineer reviews your code, security, servers and costs, then tells you what is fine and what is dangerous.
CodeHow it is built, and how hard it is to change.
SecurityWhere an attacker could get in.
Infrastructure and costsWhat it runs on, and what you pay.
Supplier dependenceWhether you could ever leave.
Technologies and platforms we work with.
An IT audit, explained in one minute.
Think of a check-up at the doctor. You may feel fine, but the check-up tells you what is healthy, what is risky and what to treat first. We do that for your software.
- Step 1You give us accessTo your website, app or systems. Read-only is enough.
- Step 2We look at everythingCode, security, servers, data and costs, by our engineers.
- Step 3You get the truth, on paperWhat is fine, what is risky and what to do next, in plain words.
Request a quote No technical words needed. Write to us the way you would explain it to a friend.
What is an IT audit?
An independent check of the software you already have, and the servers it runs on.
Most owners rely on their supplier's word about the state of their software. An IT audit replaces that word with facts. A senior engineer, who has no stake in what they find, goes through the code, the security, the servers and the bills, and writes down what is really there.
Think of it like an X-ray at the dentist. Nothing is changed while we look: the audit uses read-only access. What you get is a clear picture and a plan, in a written report in plain words that you can act on with us, with your current supplier or with anyone else.
It is different from our Automation Audit, which looks at how your business works. The IT Audit looks at the software itself.
- The code and how it is tested
- Cyber security and customer data
- Servers, backups and costs
- Who really controls the system
Not sure where to start? Tell us what you have, and we will tell you what it needs.
When you are paying for software you cannot see inside.
These are the moments owners come to us for an audit.
The bills keep growing
Hosting and support invoices rise every year, and nobody can explain why.
You feel locked in
Only your current supplier understands the system, and they know it.
You do not know if you are safe
Customer data sits in a system nobody has checked from the outside.
Tell us about your system. We will tell you how we would audit it.
A short description and what worries you is enough. You get a written offer for the audit.
What do we check?
Six areas, every time. Each one ends in a plain answer: fine, watch it, or fix it.
- 01The codeIs it built well, or held together with tape?
- 02SecurityWhere could someone break in, and how easily?
- 03Servers and hostingIs it set up properly, and could it fall over?
- 04Data and backupsIs your data safe, and could you get it back?
- 05SpeedWhat makes it slow, and what would make it fast?
- 06What you pay forAre you paying for things you do not need?
Want to know the real state of your software? Ask for an audit.
Request a quoteWhat the IT audit checks.
Everything that decides whether your system is healthy, safe and fairly priced, in four parts.
The code
How it is written and organised, how well it is tested, and how much it will cost to change.
- Structure and readability
- Tests, and what they miss
- Outdated parts that block change
Cyber security
Logins, permissions and customer data, and the weak spots an attacker would try first.
- Who can get in, and how
- Where personal data lives
- Known security holes, ranked
Infrastructure and costs
The servers, backups and services the system runs on, and every bill attached to them.
- Servers and accounts mapped
- Backups tested, not assumed
- Costs you could drop
Dependence on your supplier
Who owns the code, the accounts and the knowledge, and how easily you could move them.
- Ownership of code and data
- Accounts in your name or theirs
- What a handover would take
How does the IT audit work?
Confidential from the first message, and nothing in your system is changed.
A first call
What the system does, who built it and what worries you.
A written offer
What we will check, how we will do it and what it costs.
The review
Read-only access to the code and servers, and a short conversation with the people who use it.
The report
What is fine, what is dangerous and what each fix costs, walked through with you.
What you get: a report an owner can read.Every finding says what it means for your business, how urgent it is and what fixing it would cost. It is yours to use with anyone.
Who does what?
You open the door. We do the looking and the explaining.
What you do
- Give us accessWe tell you exactly what we need, and nothing more.
- Tell us what worries youSlow, insecure, expensive? Say it in your words.
What Gradax does
- Look at everythingCode, servers, security, data and costs.
- Sort the findingsMost serious first, so you know where to start.
- Explain it plainlyA report you can read without a dictionary.
- Plan the fixesWhat to do, in what order.
- Walk you through itA call to answer every question.
- Stay neutralYou can fix it with us, your team or anyone else.
A security review at the heart of every audit.
Cyber security runs through every part of the audit. And if you work with us afterwards, we take care of all of it, including the infrastructure underneath.
- Logins and accessWho can get in, how they prove who they are, and what they can reach.
- Customer dataWhere personal data lives, whether it is encrypted and who can read it.
- Outdated partsComponents with known security holes, listed and ranked.
- Passwords and keysSecrets left in code or in shared accounts, found.
- Signs of troubleLogs and settings checked for anything that should not be there.
Infrastructure and costs, explained.
Many systems run on more than they need, or on less than is safe. The audit shows which, and what the right setup would be.
We map every server, service and account your software depends on, with the monthly cost of each. Then we check whether the hosting is safe: are there backups, would anyone notice if the system stopped, and are the accounts in your name?
If the answer points to a better home, we can run it on our cloud, in Europe or the United States. But the report stands on its own: you are free to act on it anywhere.
- What it runs onServers, services and accounts, in one picture.
- What it costsEvery recurring bill, and the ones you could drop.
- How it is watchedWhether anyone would notice if it stopped.
- Who controls itAccounts in your name, or in your supplier's.
After an audit, owners often need these.
Connected work, from the same team. One offer can cover all of it.
Ask for all of it in one offerWhy choose Gradax for your IT audit?
Six reasons owners give us when we ask why they wrote to us and not to someone else.
- Building since 2014More than a decade of building and running software for businesses like yours.
- Built and operated in EuropeA European company with its engineers in Romania, working under EU rules.
- One team for everythingSoftware, cloud and security from the same people. Nobody blames another supplier.
- A written offer firstWhat we do and what it costs, on paper, before any work starts.
- Everything in your nameCode, content, domain and data stay yours. Leaving means a handover, not a fight.
- Engineers you can talk toYou speak with the people who do the work, in plain words.
Read how we work or our story, or ask us directly.
IT Audit or Automation Audit?
Two different questions. The Automation Audit looks at how your business works; the IT Audit looks at the software you already have.
Automation Audit
- Looks at your business processes
- Finds the manual work worth automating
- Answers: what should we build or connect?
- For a business planning its next step
IT Audit
- Looks at your existing software and servers
- Finds risks, waste and hidden dependence
- Answers: what state is our system really in?
- For an owner who needs the truth before deciding
Want the column on the right? It starts with one conversation.
Worried about something? Most owners are.
These are the questions owners ask us before they write. The answers are short.
Will I understand the report?
Yes. It is written for owners, not for engineers.Will it upset my current developers?
It should not. An audit is a second opinion, not an accusation.I do not know what it will cost.
You get a written offer before we start. No surprises.Is my data safe with you?
We ask only for the access we need, and we sign to keep it private.
Another worry? Ask us. A question costs nothing.
Ask it on a callBuying a company, or investing in one?
An IT audit as part of your due diligence, before you sign.
When you buy a company or invest in one, you are also buying its software. We review it confidentially, as part of your due diligence, and report to you: what the system is worth to the business, where the risks are, and what it will cost to keep it running or to fix it.
The price of any audit depends on the size of the system, so we send a written offer after a first call. These are the things that decide it.
- Size of the systemHow many parts, screens and integrations.
- How it is builtLanguages, frameworks and their age.
- Data it holdsCustomer and financial data need more care.
- Where it runsOne server, or many services and providers.
- Security depthA review, or a deeper look at weak spots.
- Who reads the reportOwners, investors or a technical team.
Connected service
Found problems? We can fix them too.
The same engineers who audit your software can fix it and look after it. Or you can take the report anywhere you like.
Free
Not ready for a quote? Start with the free review.
Want a lighter first look before a full audit? A senior engineer reviews your site, your search presence and how enquiries reach you, then writes down the three things worth fixing first. It costs nothing.
Systems we audit, by industry.
Clinic software, booking systems, client portals and shops. The questions are the same in every sector.
- Construction & TradesQuotes, sites and crews
- Professional ServicesBilling, portals and case files
- Healthcare & ClinicsAppointments and records
- Retail & E-CommerceSelling online, and the stock
- HospitalityBookings, menus and orders
- Real EstateListings, leads and viewings
- Education & TrainingEnrolment and courses
- Pharmacies
- Insurance Brokers
- Manufacturing
- Home Care & Support
- Financial Advisors
- Engineering Consultancy
- Warehousing & Fulfilment
- Metalwork & Fabrication
- All industries
Your sector is not listed? We work with every kind of business.
Related services and catalogue work.
What usually comes after an audit, if you want it.
- ServiceSoftware MaintenanceA dedicated engineer looks after the system from then on.See the service
- ServiceAutomation AuditThe other audit: how your business works.See the service
- ServiceSoftware DevelopmentWhen the report says rebuild rather than repair.See the service
- ServiceWebsite MaintenanceUpdates, security and backups for your website.See the service
Fixed-scope work from the catalogue
- Search & VisibilityTechnical SEO auditA full crawl, read by a person, ending in a fix list in priority order.See what is included
- Search & VisibilitySite migration planMove the site without losing the rankings it took years to earn.See what is included
- Search & VisibilitySEO competitor analysisWho actually outranks you in search, and the specific reasons they do.See what is included
- Search & VisibilitySEO strategy roadmapA month-by-month SEO plan sized to the hours and budget you actually have.See what is included
What happens after you contact us.
No pressure and no obligation. Pick the door that suits you.
- We read it and replyAn engineer reads your message, not a sales script, and answers in plain words.
- We talk it throughA short conversation about your business. No technical words needed.
- You get a written offerWhat we would do and what it costs, on one document. You decide.
- No obligation
- Your details stay with us
- Plain words, no jargon
Questions owners ask about IT audits.
What is an IT audit?
An independent review of your software and the servers it runs on: the code, its security, its infrastructure and costs, and how dependent you are on your current supplier. You get a written report in plain words.
How is it different from the Automation Audit?
The Automation Audit looks at how your business works and what could be automated. The IT Audit looks at the software you already have and tells you what state it is really in.
Will my current supplier know?
Only if you decide to tell them. We need read-only access, which you or your supplier can give, and the report is yours alone.
Do you change anything in my system?
No. The audit uses read-only access. Nothing is changed while we look.
What does the report look like?
A document written for owners: what is fine, what is dangerous, ordered by urgency, and what each fix costs. We walk you through it.
Can you audit software before we buy a company?
Yes. As part of due diligence before an acquisition or investment, we review the software confidentially and report to you.
How much does an IT audit cost?
It depends on the size of the system, so we send a written offer after a first call.
Do we have to fix things with you afterwards?
No. The report is yours to use with us, with your current supplier or with anyone else.
Explore more.
Other services, the cloud underneath them, and the words worth knowing.
Know the truth about your system before you decide.
An honest report in plain words. And if you want it, a team that takes care of everything afterwards, security and infrastructure included.