Website audit
Pages are slow, something breaks every time you ship, or an agency has just handed you a build and you want to know whether it was done properly before you sign off.
I read the code, reproduce the bugs, measure what is slow and name the cause, then price every fix so you can decide what to fund and in what order.
From 2,000 USDexcl. VAT
- Every finding written as problem, why it matters, key issues, business impact and recommendation.
- The urgent findings separated from work that can safely wait.
- Hours priced per finding, collected in one table with a total.
What I find
The things nobody has been able to name for you
Bugs your users hit and you don't
Forms that fail silently, layouts that break on a real phone. Each one reproduced and traced to the line that causes it.
What makes the site slow
PageSpeed says to defer offscreen images. The report names the script holding the main thread, or the hero sitting at zero opacity until a reveal fires.
Why your next change costs so much
Hardcoded sections, no design tokens, no types. This is why a one-line copy change gets quoted at three days.
What breaks quietly after launch
Dead links, redirects landing on 404s, pages that render empty when a third party is down.
Failures nobody is watching for
No error monitoring, no alerting. A checkout that broke on Friday gets found on Monday, if at all.
Security a scanner will not catch
I check whether role checks also verify record ownership and whether secrets sit in git history.
A sample finding
What a finding looks like in the report
The example is a real finding from this site, my own. I do not publish findings from client reports.
Problem
The homepage teaser lit up its hover state anywhere inside the section, including the gap between its two columns. Traced to one component,
site-teaser.astro.Why it matters
A hover state promises a click will do something. This one fired over text that was not a link, on the one section whose job is to get a click.
Key issues
Two links to the same URL shared one hover wrapper. The hover applied to the whole section on desktop, including text that was not linked.
Business impact
The hover suggested that unlinked text was clickable. Visitors could try to click it and leave without opening the link.
Recommendation
Apply the hover to the link with one CSS selector. A client report also prices the hours for this fix in a table with the other findings.
In practice
How the audit runs
You send the site and the code
A live URL and read access to the repository.
You get a fixed fee and a fixed date
The audit starts at 2,000 USD excl. VAT. I quote the final fee after reviewing the site and before work starts. Delivery takes five to seven working days from read access.
You get the report, and a call to walk it
Hire me for the fixes, hand the list to your team, or take it into a renegotiation.
Client feedback
What clients say about the work
01 / 05
Questions, answered
What does the audit cover?
Bugs, performance, architecture and code quality, the content model and how your editors work, and security read from the code. Every finding names a file, a URL or a measurement - if I cannot point at it, it does not go in.
How is the audit different from the vibe-coded site rescue?
The rescue is this audit for a site an AI coding tool built that keeps breaking. Both start with a diagnosis, an audit of the code and a roadmap of fixes, each task estimated in hours, from 2,000 USD excl. VAT. The rescue adds a recommendation to repair or rebuild. If every change to your AI-built site breaks something else, take the vibe-coded site rescue.
How much does an audit cost?
The audit starts at 2,000 USD excl. VAT. I quote the final fee after reviewing the site and before work starts, and it does not change with the number of findings.
How long does it take?
Five to seven working days from read access to the repository. Then I walk you through the report on a call.
Do you need access to the code?
Yes, read access. I can measure a slow page from the browser, but not tell you which line causes it without the code.
Is this a penetration test?
No. I review the code for security problems, such as role checks that do not verify record ownership or secrets left in git history. I do not attack a running system or sign a compliance certificate.
Can you fix what you find?
Yes. I quote the repair work separately and start only after you approve it. Your team can use the report to make the fixes instead.
Can I combine the rebuild credit with the half-price retainer month?
I confirm whether both apply to your project before quoting the total. If you commission a full rebuild, 50% of this fee comes off it. If you take a website retainer, its first month is half price.
What if the build turns out to be fine?
I report that the build is sound. The fee is fixed before the audit starts, so the number of findings does not change what I earn.
What if my team disagrees with a finding?
Raise it on the call where I walk you through the report. Every finding names a file, a URL or a measurement, so your developers can check it, and a finding that does not hold up comes off the list.
Something else on your mind? The chatbot answers questions about my work from this site. Ask in English, Polish or your own language.
Ask the agentGet in touch
Start a website audit
Working with an AI agent?