Fixed-price .NET code audit
A graded assessment, a prioritised action plan, and an AI hosted in Europe that never learns from your code. Optional: a 100% private AI, on a server in France.
Quote within 2 business days. Net prices, VAT not applicable.
When should you have your code audited?
- You are acquiring a company or a software product and want to know what the code is worth.
- You are preparing a funding round or a due diligence audit.
- Your application still runs on .NET Framework or .NET 8, which will be out of support from 10 November 2026.
- The team has changed and nobody has the full picture any more.
- Every change takes longer and releases are scary.
Plans
Flash
€1,800 net
2 days
For
A quick first opinion before a decision
Includes
- Automated measurements
- Targeted review of risk areas
- 5-8 page summary with at least 10 prioritised actions
- 30-minute debrief
- Guarantee: refunded if fewer than 10 actions
Payment
100% on order
Complete
€4,500 net
5 days
For
A full assessment and an action plan
Includes
- Everything in Flash
- Interviews with the team
- A to E grades per area
- 15-25 page PDF report
- Findings register (CSV)
- Prioritised action plan
- 1-hour debrief
Payment
50% on order, 50% on delivery
Migration
€5,500 net
6 days
For
Moving from .NET Framework or .NET 8 to .NET 10
Includes
- Everything in Complete
- Inventory of blocking dependencies and APIs
- Effort estimate per module
- Migration roadmap in batches
Payment
50% on order, 50% on delivery
Each plan covers up to 100,000 lines of code. Beyond that, or for specific needs: €900 per additional day, on quote.
Clients established outside Europe (outside the European Union, the United Kingdom and Switzerland): +20%.
Estimate your audit
Three questions, an instant price.
Keep the first step: the exact size will be measured and confirmed during scoping, before any commitment.
Your code stays on a dedicated server, in France, with no external AI.
Your estimate
€4,500net, VAT not applicable
Complete
Deposit on order: €2,250
Indicative, non-binding estimate. Only the signed quote is binding.
What you get
- A 15 to 25 page PDF report (Complete plan), readable by an executive as well as a developer.
- An A to E grade for each area: maintainability, reliability, security, performance, testability, readiness to migrate.
- A register of all findings in CSV format, ready to import into your ticketing tool.
- A prioritised action plan: what to do first, what it costs, what it brings.
- A one-hour debrief with your team.
Grades are based on public standards: ISO/IEC 25010 (software quality), the SQALE method (technical debt), OWASP ASVS level 1 (security).
How it works
Scoping (30 min): Goals, scope, read-only access to the code.
Automated measurements: Build, static analysis, dependencies, secrets, test coverage.
Targeted review: I read the code where the measurements flag a risk.
Interviews: 1 to 2 hours with the team to understand the history (Complete and Migration plans).
Debrief: Report, grades and action plan presented and discussed.
Usual lead time between order and debrief: 2 to 3 weeks.
Confidentiality
- Read-only access to the code.
- Your code is never sent to ChatGPT, Copilot or any American AI service. As standard, the AI used is hosted in the European Union (OVHcloud) and does not use your data for training.
- 100% private AI option: everything stays on a server dedicated to your engagement, in France, with an AI installed on that server. No data leaves it.
- The code is deleted from my machines no later than 30 days after the debrief.
- Non-disclosure agreement (NDA) signed on request.
Going further (no commitment)
Remediation support
€1,500 / month net
Follow-up of the action plan with your team: code reviews, trade-offs, regular check-ins.
“Code health” subscription
€390 / month net
Monthly automated measurements and a trend grade, to check that the debt does not come back.
Follow-up audit
€1,500 net
A new measurement 6 to 12 months after the audit, to quantify progress.
Frequently asked questions
Is my code sent to ChatGPT or Copilot?
No. As standard, I use an AI hosted in the European Union by OVHcloud, which does not train its models on your data. With the 100% private AI option, nothing leaves a server dedicated to your engagement, in France.
Which should I choose: standard or 100% private AI?
Standard suits most projects. The private option is designed for sensitive sectors (banking, healthcare, defence, large volumes of personal data) or internal policies that forbid any external AI.
Which .NET versions?
.NET Framework 4.x and .NET Core / .NET 5 to 10, in C#. Web applications, APIs, services and desktop clients (WinForms, WPF).
Does the project need to build?
It is better, because some measurements need it. Otherwise the audit is still possible, with static analysis only; I will tell you during scoping.
How long does it take?
2 to 3 weeks between order and debrief, depending on your team's availability for the interviews.
Do you sign a non-disclosure agreement?
Yes, on request, before any access to the code.
What if the Flash audit does not find much?
If it contains fewer than 10 actions, you are refunded in full, without having to ask, no later than 15 days after delivery. An action is a specific problem located in the code, a concrete recommendation, a priority and an estimated effort. Conditions set out in your quote.
Is the calculator price guaranteed?
It is an estimate. The final price is set out in the quote, after a short discussion about your project.
How do I pay?
By invoice, via bank transfer or card. Invoices are issued in electronic format.
Do you accept purchase orders?
Yes. Your purchase order number appears on the quote and on the invoice.
What if the audit reveals more than expected?
I tell you as soon as I notice it. Any additional work is subject to a quote that you accept or not; never any imposed overrun.
Request a quote
A few details about your project, and you will receive your quote within 2 business days.