What diligence will find, ranked by risk, with the cost of each fix, one week, one payment of $997.
Found
An exposed key, no database rules
Fix
Cloud Functions and rules
Effort
2 to 3 weeks, estimated
Money moves on what diligence finds. A pre-launch review found this.
Read the post“Is this codebase sound, or am I buying a rebuild?”
You open someone else's code.
Whose name each one sits under.
“I can't judge the code myself.”
The code runs on the happy path.
Found late, a problem costs a slower close or a lower price. A week earlier, it's a task.
| Route | What It Is | The Catch |
|---|---|---|
| The Investor's Diligence | They open your repo before they invest | The catch: You hear the findings after they do |
| An AI Code Scanner | A scan, file by file | The catch: Sees files, not ownership or fix costs |
| A Diligence Consultancy | A firm that reports to investors | The catch: Written for the other side |
| Varstatt | A week of reading, from your side | The catch: JavaScript and TypeScript only |
Ranked by severity, each finding with the file, the fix and its effort.
Security
In most Firebase projects I audit, a user can reach data that isn't theirs.
Ownership and Access
Who holds the repo, cloud, domain and keys.
Architecture
Where state lives, how data flows, whether the base needs a rebuild.
Scale and Cost
What breaks first as users grow, and what gets expensive at 10,000.
Technical Debt
Dead code, failures that never throw an error, stale dependencies.
Continuity
Where code lives in one head, and what a new developer needs.
Plus a one-page summary in business terms.
Founders facing a raise or a purchase, in JavaScript or TypeScript.
Right For
Better Elsewhere
A simple, predictable and transparent process that eliminates development headaches.
Pay once and you get a dedicated task board. Tell me the deal, the date and any investor checklist.
Read access, granted by the seller for a purchase. I map what runs where and who holds each account.
I read the code, security first, with the checklist alongside.
You review the report and summary. I revise until you're satisfied.
You approve the report. Stop there, or keep me on by the week to work down the list.
If you keep me on, issues you report go first.
One week of reading, one report ranked by risk.
— 1-week delivery
A senior read before a raise or a purchase, without consultancy overhead.
An independent read of a codebase before money moves. Run your own first, and you hear the findings before the other side does.
Same read and price, plus the ownership map and a summary you can forward. A code audit asks if your code holds you back; due diligence, if it holds up when someone else checks.
$997, one payment, for one week. Fixes run by the week, or go to your own developer.
Run one first. No file says whose name the accounts sit under, what a fix costs, or whether the code lives in one head.
JavaScript and TypeScript, on the default stack. Other backends, such as Supabase or Postgres, I judge per project.
Yes. The seller grants read access for the week, and I can sign an NDA first.
It's yours to share, whether or not I do the fixes. Before a raise, I fix the deal-breakers first; before a purchase, the list goes into the price talk.
Fill in the project form, about a minute: a raise or a purchase, and the close date. I reply the next working day.
Jurij understand the core problem, insists on building the right experiences for the customers.
Kunal Modi
Founder @ SOAPNoteAI
Working with Jurij is an absolute joy, consistently exceeds expectations.
Janis Ozolins
Content Creator
Consistently delivered quality code in great time, very hard working & precise.
Bartosz Poźniak
CEO @ MyCointainer
The kind of engineer that every company on the planet would be lucky to have.
Hosam Mazawi
COO @ LemonUnit
Tech Due Diligence fits founders best: people building a product without a technical co-founder.
“No one makes the technical calls”: the calls and the code, every week.
“An idea nobody has clicked”: the core flow on a live link in one week, one payment.
“An idea, ready to test with paying users”: the smallest real product, launched in week 6.
“Ready to build the whole product”: launched in week 6, then built on real feedback.
“Phones, without three separate apps”: one app that installs from a link.
“An app stuck, unsafe, or left by its developer”: the bleeding stopped and a plan, in one paid week.
“A V1 that holds the product back”: V2 built beside it, until every user moves.
Tech Due Diligence
“A raise or a purchase on the calendar”: what diligence will find, ranked, in one paid week.
Not a founder? See what Varstatt offers you.
Sole proprietorship headquartered in Rzeszów, Poland. VAT ID: PL8133854722.
