How is this different from a performance audit?

The performance audit goes deep on Core Web Vitals across more surfaces over a longer window (five days). The health check goes broad: security, performance, integrations and admin hygiene in three days. Most stores book a health check first and a performance audit only if the broader audit flags performance as the biggest issue.

Do I need to give you admin access?

Yes, read-only admin access plus read-only access to your Magento file system. We never need write access for the health check. Access is revoked the day we deliver the report.

What if you find something serious?

We flag it immediately, not at the end of day 3. If we find an actively exploited vulnerability or data leak we will call you the same day. Severity-1 findings get a dedicated email summary inside business hours of discovery.

Will this slow my store down?

No. Everything we do is read-only. We do not deploy anything, we do not run load tests against production, and our external probes hit the store at the same rate a normal browser would.

What is the turnaround?

Three working days from brief to delivery. We book a calendar slot up front so it does not slip. If we find more than the standard surface count can absorb, we tell you on day 1 and let you decide whether to extend the window.

Is the audit fee credited if I book remediation?

Yes, 100% of the health-check fee credits against any remediation engagement we run for you inside 60 days. There is no upsell pressure during the walkthrough; about half of customers do the remediation themselves or with their existing agency.

Do you check our third-party integrations?

Yes, at a configuration level. We confirm webhook health, retry behaviour, error logging and credential hygiene for payment gateways, ERP connectors, shipping carriers and email service providers. Deep integration debugging needs a separate engagement.

What does the report look like?

A PDF or shared doc, your preference. Executive summary on page 1, findings catalogued by surface, each with severity, effort and impact scored. The remediation list is ordered by ROI so you can work top-down.

Website Audits

Magento Gesundheitscheck

Drei Tage forensische Analyse Ihres Magento-Shops. Wir sagen Ihnen genau, was langsam ist, Geld kostet oder Sie in Gefahr bringt.

Turnaround: 3 working days
Surfaces: Security + perf + integrations + admin
Read-only: Nothing deployed
Walkthrough: 30 minutes

Overview

What it is.

Jeder Magento-Shop sammelt vier Arten von stillem Schulden: nicht angewendete Sicherheitsupdates, langsam driftende Leistung, Integrationen, die stillschweigend Daten verlieren, und Admin-Seiten, die niemand mehr nutzt. Nichts davon zeigt sich, bis etwas kaputtgeht. Der Gesundheitscheck ist ein dreitägiges tiefgehendes Audit über alle vier Bereiche. Sie erhalten eine priorisierte Liste von Maßnahmen mit Kostenschätzungen, die gleichen Werkzeuge, die wir selbst verwenden, und eine 30-minütige Durchsprache mit dem Ingenieur, der es durchgeführt hat. Festpreis. Das Ergebnis gehört Ihnen, egal ob Sie die Maßnahmen mit uns buchen oder nicht.

What you get

Deliverables.

Security configuration review (admin URL, 2FA, CSP, file permissions)
Performance baseline on top-4 surfaces with Lighthouse + WPT
Third-party integration health (payment gateways, ERP, shipping, ESPs)
Admin hygiene audit (user roles, stale accounts, log retention, indexer status)
Magento version + security-patch gap analysis
Database growth and cleanup opportunities
Prioritised remediation list (estimated effort vs business impact)
30-minute walkthrough call with the engineer who ran the audit

Honest limits

What it isn't.

Health check is read-only, we do not implement fixes inside this price
We do not penetration-test; that needs a dedicated security engagement
Database deep-dive is surface-level; serious DB issues get a separate quote

Not sure if it's a fit? Email us. We'll tell you straight.

How it works

From inquiry to handover.

01
1. Brief (Day 0)
You share admin read-only access, the list of integrations and any known concerns. We sign an NDA if required.
02
2. Audit (Days 1-2)
Engineer works through the four surfaces. Findings catalogued as they go, with severity, effort and impact scored.
03
3. Report + walkthrough (Day 3)
Written report delivered. 30-minute call to walk through priorities and answer questions. Recommended next steps are explicit.

Frequently asked

Questions we get from people about to book.

How is this different from a performance audit?: The performance audit goes deep on Core Web Vitals across more surfaces over a longer window (five days). The health check goes broad: security, performance, integrations and admin hygiene in three days. Most stores book a health check first and a performance audit only if the broader audit flags performance as the biggest issue.
Do I need to give you admin access?: Yes, read-only admin access plus read-only access to your Magento file system. We never need write access for the health check. Access is revoked the day we deliver the report.
What if you find something serious?: We flag it immediately, not at the end of day 3. If we find an actively exploited vulnerability or data leak we will call you the same day. Severity-1 findings get a dedicated email summary inside business hours of discovery.
Will this slow my store down?: No. Everything we do is read-only. We do not deploy anything, we do not run load tests against production, and our external probes hit the store at the same rate a normal browser would.
What is the turnaround?: Three working days from brief to delivery. We book a calendar slot up front so it does not slip. If we find more than the standard surface count can absorb, we tell you on day 1 and let you decide whether to extend the window.
Is the audit fee credited if I book remediation?: Yes, 100% of the health-check fee credits against any remediation engagement we run for you inside 60 days. There is no upsell pressure during the walkthrough; about half of customers do the remediation themselves or with their existing agency.
Do you check our third-party integrations?: Yes, at a configuration level. We confirm webhook health, retry behaviour, error logging and credential hygiene for payment gateways, ERP connectors, shipping carriers and email service providers. Deep integration debugging needs a separate engagement.
What does the report look like?: A PDF or shared doc, your preference. Executive summary on page 1, findings catalogued by surface, each with severity, effort and impact scored. The remediation list is ordered by ROI so you can work top-down.

Ready to start?

Tell us about your project.

A member of our team reads every message. Replies within one business day. No sales call required.

See all services

Website Audits

Magento Gesundheitscheck

Drei Tage forensische Analyse Ihres Magento-Shops. Wir sagen Ihnen genau, was langsam ist, Geld kostet oder Sie in Gefahr bringt.

Turnaround: 3 working days
Surfaces: Security + perf + integrations + admin
Read-only: Nothing deployed
Walkthrough: 30 minutes

Overview

What it is.

What you get

Deliverables.

Security configuration review (admin URL, 2FA, CSP, file permissions)
Performance baseline on top-4 surfaces with Lighthouse + WPT
Third-party integration health (payment gateways, ERP, shipping, ESPs)
Admin hygiene audit (user roles, stale accounts, log retention, indexer status)
Magento version + security-patch gap analysis
Database growth and cleanup opportunities
Prioritised remediation list (estimated effort vs business impact)
30-minute walkthrough call with the engineer who ran the audit

Honest limits

What it isn't.

Health check is read-only, we do not implement fixes inside this price
We do not penetration-test; that needs a dedicated security engagement
Database deep-dive is surface-level; serious DB issues get a separate quote

Not sure if it's a fit? Email us. We'll tell you straight.

How it works

From inquiry to handover.

01
1. Brief (Day 0)
You share admin read-only access, the list of integrations and any known concerns. We sign an NDA if required.
02
2. Audit (Days 1-2)
Engineer works through the four surfaces. Findings catalogued as they go, with severity, effort and impact scored.
03
3. Report + walkthrough (Day 3)
Written report delivered. 30-minute call to walk through priorities and answer questions. Recommended next steps are explicit.

Frequently asked

Questions we get from people about to book.

How is this different from a performance audit?: The performance audit goes deep on Core Web Vitals across more surfaces over a longer window (five days). The health check goes broad: security, performance, integrations and admin hygiene in three days. Most stores book a health check first and a performance audit only if the broader audit flags performance as the biggest issue.
Do I need to give you admin access?: Yes, read-only admin access plus read-only access to your Magento file system. We never need write access for the health check. Access is revoked the day we deliver the report.
What if you find something serious?: We flag it immediately, not at the end of day 3. If we find an actively exploited vulnerability or data leak we will call you the same day. Severity-1 findings get a dedicated email summary inside business hours of discovery.
Will this slow my store down?: No. Everything we do is read-only. We do not deploy anything, we do not run load tests against production, and our external probes hit the store at the same rate a normal browser would.
What is the turnaround?: Three working days from brief to delivery. We book a calendar slot up front so it does not slip. If we find more than the standard surface count can absorb, we tell you on day 1 and let you decide whether to extend the window.
Is the audit fee credited if I book remediation?: Yes, 100% of the health-check fee credits against any remediation engagement we run for you inside 60 days. There is no upsell pressure during the walkthrough; about half of customers do the remediation themselves or with their existing agency.
Do you check our third-party integrations?: Yes, at a configuration level. We confirm webhook health, retry behaviour, error logging and credential hygiene for payment gateways, ERP connectors, shipping carriers and email service providers. Deep integration debugging needs a separate engagement.
What does the report look like?: A PDF or shared doc, your preference. Executive summary on page 1, findings catalogued by surface, each with severity, effort and impact scored. The remediation list is ordered by ROI so you can work top-down.

Ready to start?

Tell us about your project.

A member of our team reads every message. Replies within one business day. No sales call required.

See all services

Magento Gesundheitscheck

What it is.

Deliverables.

What it isn't.

From inquiry to handover.

1. Brief (Day 0)

2. Audit (Days 1-2)

3. Report + walkthrough (Day 3)

Questions we get from people about to book.

Tell us about your project.

Magento Gesundheitscheck

What it is.

Deliverables.

What it isn't.

From inquiry to handover.

1. Brief (Day 0)

2. Audit (Days 1-2)

3. Report + walkthrough (Day 3)

Questions we get from people about to book.

Tell us about your project.