A Rails audit to know where to act first
Your application runs, but it is slowing down, costly to change, or nobody dares to touch it. The Devintech audit tells you what is really going on in the code and the infrastructure, and where to start.
What the audit covers
Architecture
Code structure, separation of responsibilities, dependencies between modules: what makes change easier or harder.
Performance
Slow queries, N+1, missing indexes, caching, Sidekiq jobs piling up.
PostgreSQL
Schema, indexes, data volume, risky migrations, use of transactions.
Security
Mass assignment, authorization, vulnerable dependencies, secrets handling, data exposure.
Technical debt
Ruby and Rails versions, outdated gems, tests, areas of the code nobody masters anymore.
Infrastructure
Deployment, monitoring, backups, observability, ability to absorb load.
We adapt the scope to your need: the audit can cover just one of these topics.
Who it is for
Engineering teams, CTOs and executives running a Rails application who want an outside view: before a fundraising or an acquisition, after a key developer leaves, when facing slowness or incidents, or before a version upgrade.
The audit is carried out by a senior Rails engineer who reads the code and examines the infrastructure, rather than handing you a questionnaire.
How it works
Scoping
We define the scope, the access needed and what you expect from the result.
Analysis
We read the code, measure performance and examine the database and the infrastructure.
Report
We deliver a clear report, with findings ranked by impact and effort, and present it to your team.
Next steps
If you wish, we help implement the priorities. Your team can also act on the report on its own.
What about confidentiality?
Your code and your access stay confidential. We work with access limited to the audit scope, and we sign a non-disclosure agreement if you wish.
Frequently asked questions
How long does an audit take?
It depends on the size of the application and the scope. We give you an estimate after a first conversation.
Do you need access to production?
Read access to the code is enough to start. For performance and infrastructure, we ask for limited access to monitoring tools, without touching production.
What does the report contain?
The findings, their severity, the estimated effort to fix them and a priority order. We present it to your team.
How much does it cost?
Every audit is priced by quote, depending on the scope. Write to us through the form or at contact@devintech.fr.