Code Review · Websites & web apps
Is your code safe, solid, and ready to grow?
A careful, human review of your website or app's code, with a plain-English report that tells you what's risky, what's fine, and what to fix first. Fixed price, agreed before we start.
Who it's for
- You paid a freelancer or agency for a site or app, and you'd like to know it was built properly.
- You're taking over code from a developer who's moved on.
- You're about to launch, raise money, or sell, and want a second set of eyes first.
- Something feels off: it's slow, it breaks, or you're worried about security.
What we look at
Security
- Outdated libraries with known vulnerabilities
- Passwords or keys left in the code
- Logins, forms, uploads, and payments handled safely
- Common attacks: injection, cross-site scripting, weak access checks
Quality & speed
- How easy the code is to maintain and hand over
- Bugs and fragile spots waiting to break
- Slow database queries and heavy pages
- Accessibility basics in the code itself
What you get
- A plain-English summary for you: the overall verdict and the top things to fix, ranked by risk.
- A technical section for your developer: each issue, where it is in the code, and how to fix it.
- A video walkthrough of your report: a recorded video you can share with your team, or a live 30-minute Microsoft Teams or Google Meet meeting. Your choice.
- Half your review fee credited toward fixes if you hire Novacraft within 30 days.
Pricing
Every review gets a fixed quote after a free consultation by email, Teams, or Google Meet, so you know the exact price before anything starts.
How it works
- Tell us about your code using the form below.
- Free consultation by email, or a 15-minute Teams or Google Meet meeting, to agree on what to review. You get a fixed quote.
- Sign the authorization online, confirming the code is yours to share and what we're allowed to do with it.
- Pay securely through Stripe.
- Share your code by uploading a zip file to your private review page, or inviting us to your repository (read-only).
- We review it, usually within 5–10 business days.
- Get your report with a video walkthrough, recorded or live.
Your code is safe with us
- We only ever need read-only access to the code. We never ask for passwords to your live site or hosting.
- We review the code only. We don't test, scan, or log in to your live website unless you give separate written permission.
- Your code is kept private and confidential, stored outside the public website, and used only for your review.
- It's deleted within 30 days of your report, or sooner if you ask.
Request a code review
Common questions
Is this a penetration test?
No. A code review reads your code to find problems. A penetration test attacks your live system, and needs different permissions and tools. If you need one, we'll tell you and point you to the right people.
My site is on Shopify, Wix, or Squarespace. Can you review it?
Only the custom code you've added, like theme edits. For most sites on these platforms, our Full Website Audit is the better fit.
Will you fix what you find?
If you'd like us to. You'll get a separate quote, and half your review fee is credited toward fixes if you go ahead within 30 days. Or hand the report to your own developer. It's written for them.
Can you guarantee my code is secure after this?
No one honestly can. A review catches a lot, and we're thorough, but it's a best-effort assessment of the code you send us. See our terms for the details.