Know in 3 weeks where your software stands
An independent review of code, architecture, security and the processes around them. You get a report with priorities and a roadmap on one A4. Three weeks, fixed price, and the report is yours.
- Management summary
- Scope and approach
- Architecture verdict
- Findings by priority
- Quick wins
- Open verification
The three documents you end up with, shown as an example for a fictional company.
When a review is the answer
Software from a single builder
It works, but nobody is looking over their shoulder and nobody knows who could take over.
Before the next investment
Expanding, scaling, a new builder or an acquisition. Decide on what is there, not on a feeling.
AI without guessing
The roadmap tells you where automation and AI save time in your software, and where they do not.
One person, no agency
I am Mathijs Oggel. Ten years of building and leading software platforms that run live at clients, and since 2025 as an independent technical partner for SMEs.
I only read: nothing about your software changes. And I do not sell rebuilds, so you get a verdict with no stake in the outcome. The difference between different and better is in every report.
Five concrete deliverables
No slide deck of platitudes, but documents your team can act on right away.
- Management summary
- Scope and approach
- Architecture verdict
- Findings by priority
- Quick wins
- Open verification
Review report
Codebase, architecture and security examined. Every finding weighed on risk and impact.
- critical Backups run, but a restore has never been tested
- high Admin access without two-factor authentication
- medium No tests on the invoicing module
- low Outdated dependencies with no known risk
Priority list
What has to happen first, what can wait, and what you can consciously leave alone.
Roadmap on one A4
From today to the next phase, including where automation demonstrably saves time.
- Data processing agreements
- Data within the EU
- Restore test of the backups
- Access of former staff
- Logging of personal data
Compliance checklist
GDPR, security and hosting: what is in place and what is still open.
- The headline for management
- Findings and priorities
- Roadmap and next steps
- All questions
Walkthrough session
We go through the report together, with your team in the room.
fixed price, excl. VAT · 3 weeks
Examples for a fictional company. Every report is bespoke, and the findings are yours.
From access to report
Access & analysis
week 1Read access to code and environments, and the whole platform mapped.
Depth & verification
week 2Every finding verified against the live environment. No assumptions in the report.
Report & walkthrough
week 3You receive the report and we walk through it together.
- Read access to the code and, where possible, the live or staging environment
- One hour with the person who built it
- One hour in week three for the walkthrough
Two development tracks, one decision
An AI platform handling highly sensitive personal data had to choose between two development tracks. The review gave management the basis for that choice.
- One report that underpinned the choice between two tracks
- Migration plan to EU hosting, with an honest weighing of the options
- Follow-up started on the basis of the findings
The report is yours
You are not tied to anything. With the findings you can go four ways.
Do it yourself
Your team picks up the priority list. The report is executable without me.
I do it
The most important findings as a scoped follow-up, at a fixed price.
Technical partnership
Ongoing building, automation and technical leadership, for a fixed monthly fee.
See the partnershipMaintenance with a support desk
In good shape already? Then I keep it running, with a support desk for your users.
See maintenanceFrequently asked questions
Our builder might not like this.
I work alongside your builder, not against them: I talk to them in week one and the report is written so they can act on it. Most are relieved that the priorities are on paper.
We are not a tech company.
All the more reason for an independent verdict in plain language. The report has a headline for you and the substantiation for your builder.
Does this work outside Laravel or PHP?
Yes. Recent reviews covered Next.js, Supabase, Spring Boot, Angular and Keycloak. I assess architecture, security and data models independently of the stack.
What about confidentiality?
Everything is confidential, with an NDA up front if you prefer. I share findings with you only.
Can I start with something smaller?
Yes: take the three-minute software check or book an intro call. I do not do half a review, because a verdict on half the information is an opinion.
And if nothing serious comes out?
Then you know that, and that is value too: peace of mind, a roadmap for twelve months and a list of what you can consciously leave alone.
Book a thirty-minute call
No obligation. In thirty minutes you know whether a review is the right instrument. If not, I will say so.
Loading the calendar_