coresmith.dev
← All services
07 · Technical audit

A read of what you have, before you decide to fix or replace it

Rewriting is expensive and often unnecessary. Before you decide, it helps to know what is actually wrong: whether the code is the problem, whether the architecture is, or whether one bad decision is doing all the damage. You get the findings whether or not you hire us afterwards.

What is included

Performance and Core Web Vitals

Measured on your live site, not simulated. Largest paint, layout shift, page weight, request count — and which of them a visitor actually notices.

Technical SEO and indexability

Whether a crawler receives your pages at all. This is where we most often find something serious: a JavaScript app serving an empty document to every search engine.

Architecture and code review

Where the structure will fight you as the product grows, and where it is fine. Including which parts are worth keeping — usually more than people expect.

Dependency and security check

Known vulnerabilities, abandoned packages, secrets in the wrong places, and the configuration mistakes that only show up under load or under attack.

What we look at

Speed on the devices your customers use

Core Web Vitals measured on your live site and on real phones, not on a simulator with a fibre connection.

Whether search engines see you at all

The most common serious finding: a JavaScript app serving an empty document to every crawler — including the ones behind AI answers.

Security posture

OWASP checks, vulnerable and abandoned dependencies, secrets in the wrong places, and server configuration that only fails under attack.

Load and breaking point

How many users it holds before it falls over. Worth answering before a campaign rather than during one.

Database and query health

Slow queries, missing indexes, and the table that will stop the site at four times today's traffic.

Cloud bill and monitoring

What you are paying for and whether it is used, and whether anything would tell you if it broke at three in the morning.

Architecture and code

Where the structure will fight you as the product grows, and — usually more than expected — which parts are worth keeping.

Who it fits

Before a rewrite decision

The cheapest hour you will spend on the question. Sometimes the answer is that the rewrite is right, and then you have evidence rather than a feeling.

After inheriting a system

A new developer, a new CTO, an acquisition. You need to know what you now own before you promise anyone a date.

When traffic is not converting

Sometimes the marketing is fine and the site is quietly broken — slow on the phones your customers use, or invisible to search.

What we use

A link beside a group means it is running in production in a project you can read about. The rest is what the team also covers.

Performance

LighthouseCore Web VitalsWebPageTestbundle analysisChrome DevTools

In production: Elegance Transfer — booking in four languages

Search and indexability

Search ConsoleBing Webmaster Toolscrawl simulationJSON-LD validationsitemap and hreflang checks

In production: ActExpress — Romanian documents agency

Security

OWASP Top 10dependency auditsecret scanningTLS and header review

Load testing

k6Locust

Infrastructure and observability

query plans and indexesnginx and PM2 reviewSentryuptime and alertingcloud cost review

In production: Multi-warehouse retail ERP + POS

Start with the scope conversation. It costs nothing and it is usually one call.