---
title: Technical Due Diligence For Founders @ Varstatt
url: https://varstatt.com/x/founders/tech-due-diligence
description: "Technical due diligence for founders before a raise or a purchase: one week on the code, findings ranked by risk with each fix's cost. $997, one payment."
section: Services (https://varstatt.com)
---
# Technical Due Diligence in a Week

What diligence will find, ranked by risk, with the cost of each fix, one week, one payment of $997.

**What's included:**

- ✅ Senior developer
- ✅ Full code ownership
- ✅ Done in one week
- ✅ One price, paid once
- ❌ Meetings overhead
- ❌ Scope creep
- ❌ Hourly billing
- ❌ Billing surprises

**Get started:**

- [Start a Project](https://varstatt.com/start?cta=agent)
- [Ask Jurij](mailto:jurij@varstatt.com)

## Problems

- **The Investor Opens Your Repo** Money moves on what diligence finds. A pre-launch review found this. [Read the post](https://varstatt.com/jurij/p/when-polish-over-security-costs-real)

- **Found** An exposed key, no database rules

- **Fix** Cloud Functions and rules

- **Effort** 2 to 3 weeks, estimated

- **A Purchase Becomes a Rebuild** You open someone else's code.
> Is this codebase sound, or am I buying a rebuild?

- **Who Owns What** Whose name each one sits under.

- Repo

- Cloud accounts

- Domain

- API keys

- **Built by AI Tools or a Contractor** The code runs on the happy path.
> I can't judge the code myself.

## Find It Before They Do

| Route | What It Is | The Catch |
|---|---|---|
| The Investor's Diligence | They open your repo before they invest | You hear the findings after they do |
| An AI Code Scanner | A scan, file by file | Sees files, not ownership or fix costs |
| A Diligence Consultancy | A firm that reports to investors | Written for the other side |
| **Varstatt** | A week of reading, from your side | JavaScript and TypeScript only |

## Six Areas, Security First

- **Security** In most [Firebase projects I audit](https://varstatt.com/x/teams/firebase-audit), a user can reach data that isn't theirs.

- **Ownership and Access** Who holds the repo, cloud, domain and keys.

- **Architecture** Where state lives, how data flows, whether the base needs a rebuild.

- **Scale and Cost** What breaks first as users grow, and what gets expensive at 10,000.

- **Technical Debt** Dead code, [failures that never throw an error](https://varstatt.com/jurij/p/production-bugs-that-never-threw-an-error), stale dependencies.

- **Continuity** Where code lives in one head, and what a new developer needs.

Plus a one-page summary in business terms.

## Who It's For

**Right For**

- Founders preparing a raise

- Founders buying a SaaS or a codebase

- Non-technical founders who need code health in business terms

**Better Elsewhere**

- PHP, Python or Ruby code *A developer of that stack*

- Penetration tests, compliance certificates *A security firm or auditor*

- Legal or financial diligence *Your lawyer or an auditor*

## How It Works

A simple, predictable and transparent process that eliminates development headaches.

1. **Book** — Pay once and you get a dedicated task board. Tell me the deal, the date and any investor checklist.
2. **Setup** — Read access, granted by the seller for a purchase. I map what runs where and who holds each account.
3. **Plan & Develop** — I read the code, security first, with the checklist alongside.
4. **Review & Refine** — You review the report and summary. I revise until you're satisfied.
5. **Progress** — You approve the report. Stop there, or keep me on by the week to work down the list.
6. **Maintain** — If you keep me on, issues you report go first.

## Pricing — One-Time

One week of reading, one report ranked by risk.

- **Price:** $997
- **Note:** 1-week delivery
- **Plan:** A senior read before a raise or a purchase, without consultancy overhead.
- **Includes:**
  - 🧑‍💻 10+ years shipping software
  - 🗣️ Direct access to developer
  - 🪪 Full code & assets ownership
- **CTA:** [Get Started](https://varstatt.com/start?cta=agent)
- **Questions:** jurij@varstatt.com

## FAQ

### What is technical due diligence?

An independent read of a codebase before money moves. Run your own first, and you hear the findings before the other side does.

### How is it different from a code audit?

Same read and price, plus the ownership map and a summary you can forward. A code audit asks if your code holds you back; due diligence, if it holds up when someone else checks.

### How much does it cost?

$997, one payment, for one week. Fixes run by the week, or go to your own developer.

### Can an AI tool do the diligence?

Run one first. No file says whose name the accounts sit under, what a fix costs, or whether the code lives in one head.

### What's the tech stack?

JavaScript and TypeScript, on the [default stack](/principles/delivery/default-stack). Other backends, such as Supabase or Postgres, I judge per project.

### Can you review code I'm about to buy?

Yes. The seller grants read access for the week, and I can sign an NDA first.

### What happens after the report?

It's yours to share, whether or not I do the fixes. Before a raise, I fix the deal-breakers first; before a purchase, the list goes into the price talk.

### How do I start, and how soon?

Fill in the [project form](/start?cta=tech-due-diligence-faq), about a minute: a raise or a purchase, and the close date. I reply the next working day.

## Testimonials

> "Jurij understand the core problem, insists on building the right experiences for the customers."
> — [Kunal Modi, Founder @ SOAPNoteAI](https://www.linkedin.com/in/jurijtokarski/details/recommendations/)

> "Working with Jurij is an absolute joy, consistently exceeds expectations."
> — [Janis Ozolins, Content Creator](https://x.com/OzolinsJanis/status/1875168034249146609)

> "Consistently delivered quality code in great time, very hard working & precise."
> — [Bartosz Poźniak, CEO @ MyCointainer](https://www.linkedin.com/in/jurijtokarski/details/recommendations/)

> "The kind of engineer that every company on the planet would be lucky to have."
> — [Hosam Mazawi, COO @ LemonUnit](https://www.linkedin.com/in/jurijtokarski/details/recommendations/)

## [Founders × Varstatt](https://varstatt.com/x/founders)

Tech Due Diligence fits founders best: people building a product without a technical co-founder.

- **[Fractional CTO](https://varstatt.com/x/founders/fractional-cto)** "No one makes the technical calls." The calls and the code, every week.

- **[Prototype](https://varstatt.com/x/founders/prototype-development)** "An idea nobody has clicked." The core flow on a live link in one week, one payment.

- **[MVP Development](https://varstatt.com/x/founders/mvp-development)** "An idea, ready to test with paying users." The smallest real product, launched in week 6.

- **[SaaS Development](https://varstatt.com/x/founders/saas-development)** "Ready to build the whole product." Launched in week 6, then built on real feedback.

- **[PWA Development](https://varstatt.com/x/founders/pwa-development)** "Phones, without three separate apps." One app that installs from a link.

- **[Vibe Coding Rescue](https://varstatt.com/x/founders/project-rescue)** "An app stuck, unsafe, or left by its developer." The bleeding stopped and a plan, in one paid week.

- **[App Modernization](https://varstatt.com/x/founders/app-modernization)** "A V1 that holds the product back." V2 built beside it, until every user moves.

- **Tech Due Diligence (this page)** "A raise or a purchase on the calendar." What diligence will find, ranked, in one paid week.

Not a founder? [See what Varstatt offers you](https://varstatt.com/x).

## About

Varstatt is run by [Jurij Tokarski](https://varstatt.com/jurij), product engineer since 2011.

Contact: [jurij@varstatt.com](mailto:jurij@varstatt.com) / [X](https://x.com/jurijtokarski) / [LinkedIn](https://www.linkedin.com/in/jurijtokarski/)

Sole proprietorship headquartered in Rzeszów, Poland. VAT ID: PL8133854722.