How is this different from a performance audit?

The performance audit goes deep on Core Web Vitals across more surfaces over a longer window (five days). The health check goes broad: security, performance, integrations and admin hygiene in three days. Most stores book a health check first and a performance audit only if the broader audit flags performance as the biggest issue.

Do I need to give you admin access?

Yes, read-only admin access plus read-only access to your Magento file system. We never need write access for the health check. Access is revoked the day we deliver the report.

What if you find something serious?

We flag it immediately, not at the end of day 3. If we find an actively exploited vulnerability or data leak we will call you the same day. Severity-1 findings get a dedicated email summary inside business hours of discovery.

Will this slow my store down?

No. Everything we do is read-only. We do not deploy anything, we do not run load tests against production, and our external probes hit the store at the same rate a normal browser would.

What is the turnaround?

Three working days from brief to delivery. We book a calendar slot up front so it does not slip. If we find more than the standard surface count can absorb, we tell you on day 1 and let you decide whether to extend the window.

Is the audit fee credited if I book remediation?

Yes, 100% of the health-check fee credits against any remediation engagement we run for you inside 60 days. There is no upsell pressure during the walkthrough; about half of customers do the remediation themselves or with their existing agency.

Do you check our third-party integrations?

Yes, at a configuration level. We confirm webhook health, retry behaviour, error logging and credential hygiene for payment gateways, ERP connectors, shipping carriers and email service providers. Deep integration debugging needs a separate engagement.

What does the report look like?

A PDF or shared doc, your preference. Executive summary on page 1, findings catalogued by surface, each with severity, effort and impact scored. The remediation list is ordered by ROI so you can work top-down.

Website Audits

Vérification de la santé Magento

Une analyse de trois jours de votre boutique Magento. Nous vous disons exactement ce qui est lent, ce qui vous coûte de l'argent ou ce qui vous expose à des risques.

Turnaround: 3 working days
Surfaces: Security + perf + integrations + admin
Read-only: Nothing deployed
Walkthrough: 30 minutes

Overview

What it is.

Chaque boutique Magento accumule quatre types de dettes silencieuses : des correctifs de sécurité non appliqués, des performances qui se dégradent lentement, des intégrations qui perdent silencieusement des données et des pages administratives que les gens n'utilisent plus. Rien de tout cela ne se manifeste tant que quelque chose ne casse pas. La vérification de la santé est un audit approfondi de trois jours sur les quatre aspects. Vous recevez une liste de remédiation priorisée avec des estimations de coûts, la même chaîne d'outils que nous utilisons nous-mêmes, et une présentation de 30 minutes avec l'ingénieur qui l'a réalisée. Prix fixe. Le rapport vous appartient que vous réserviez ou non le travail de remédiation avec nous.

What you get

Deliverables.

Security configuration review (admin URL, 2FA, CSP, file permissions)
Performance baseline on top-4 surfaces with Lighthouse + WPT
Third-party integration health (payment gateways, ERP, shipping, ESPs)
Admin hygiene audit (user roles, stale accounts, log retention, indexer status)
Magento version + security-patch gap analysis
Database growth and cleanup opportunities
Prioritised remediation list (estimated effort vs business impact)
30-minute walkthrough call with the engineer who ran the audit

Honest limits

What it isn't.

Health check is read-only, we do not implement fixes inside this price
We do not penetration-test; that needs a dedicated security engagement
Database deep-dive is surface-level; serious DB issues get a separate quote

Not sure if it's a fit? Email us. We'll tell you straight.

How it works

From inquiry to handover.

01
1. Brief (Day 0)
You share admin read-only access, the list of integrations and any known concerns. We sign an NDA if required.
02
2. Audit (Days 1-2)
Engineer works through the four surfaces. Findings catalogued as they go, with severity, effort and impact scored.
03
3. Report + walkthrough (Day 3)
Written report delivered. 30-minute call to walk through priorities and answer questions. Recommended next steps are explicit.

Frequently asked

Questions we get from people about to book.

How is this different from a performance audit?: The performance audit goes deep on Core Web Vitals across more surfaces over a longer window (five days). The health check goes broad: security, performance, integrations and admin hygiene in three days. Most stores book a health check first and a performance audit only if the broader audit flags performance as the biggest issue.
Do I need to give you admin access?: Yes, read-only admin access plus read-only access to your Magento file system. We never need write access for the health check. Access is revoked the day we deliver the report.
What if you find something serious?: We flag it immediately, not at the end of day 3. If we find an actively exploited vulnerability or data leak we will call you the same day. Severity-1 findings get a dedicated email summary inside business hours of discovery.
Will this slow my store down?: No. Everything we do is read-only. We do not deploy anything, we do not run load tests against production, and our external probes hit the store at the same rate a normal browser would.
What is the turnaround?: Three working days from brief to delivery. We book a calendar slot up front so it does not slip. If we find more than the standard surface count can absorb, we tell you on day 1 and let you decide whether to extend the window.
Is the audit fee credited if I book remediation?: Yes, 100% of the health-check fee credits against any remediation engagement we run for you inside 60 days. There is no upsell pressure during the walkthrough; about half of customers do the remediation themselves or with their existing agency.
Do you check our third-party integrations?: Yes, at a configuration level. We confirm webhook health, retry behaviour, error logging and credential hygiene for payment gateways, ERP connectors, shipping carriers and email service providers. Deep integration debugging needs a separate engagement.
What does the report look like?: A PDF or shared doc, your preference. Executive summary on page 1, findings catalogued by surface, each with severity, effort and impact scored. The remediation list is ordered by ROI so you can work top-down.

Ready to start?

Tell us about your project.

A member of our team reads every message. Replies within one business day. No sales call required.

See all services

Website Audits

Vérification de la santé Magento

Une analyse de trois jours de votre boutique Magento. Nous vous disons exactement ce qui est lent, ce qui vous coûte de l'argent ou ce qui vous expose à des risques.

Turnaround: 3 working days
Surfaces: Security + perf + integrations + admin
Read-only: Nothing deployed
Walkthrough: 30 minutes

Overview

What it is.

What you get

Deliverables.

Security configuration review (admin URL, 2FA, CSP, file permissions)
Performance baseline on top-4 surfaces with Lighthouse + WPT
Third-party integration health (payment gateways, ERP, shipping, ESPs)
Admin hygiene audit (user roles, stale accounts, log retention, indexer status)
Magento version + security-patch gap analysis
Database growth and cleanup opportunities
Prioritised remediation list (estimated effort vs business impact)
30-minute walkthrough call with the engineer who ran the audit

Honest limits

What it isn't.

Health check is read-only, we do not implement fixes inside this price
We do not penetration-test; that needs a dedicated security engagement
Database deep-dive is surface-level; serious DB issues get a separate quote

Not sure if it's a fit? Email us. We'll tell you straight.

How it works

From inquiry to handover.

01
1. Brief (Day 0)
You share admin read-only access, the list of integrations and any known concerns. We sign an NDA if required.
02
2. Audit (Days 1-2)
Engineer works through the four surfaces. Findings catalogued as they go, with severity, effort and impact scored.
03
3. Report + walkthrough (Day 3)
Written report delivered. 30-minute call to walk through priorities and answer questions. Recommended next steps are explicit.

Frequently asked

Questions we get from people about to book.

How is this different from a performance audit?: The performance audit goes deep on Core Web Vitals across more surfaces over a longer window (five days). The health check goes broad: security, performance, integrations and admin hygiene in three days. Most stores book a health check first and a performance audit only if the broader audit flags performance as the biggest issue.
Do I need to give you admin access?: Yes, read-only admin access plus read-only access to your Magento file system. We never need write access for the health check. Access is revoked the day we deliver the report.
What if you find something serious?: We flag it immediately, not at the end of day 3. If we find an actively exploited vulnerability or data leak we will call you the same day. Severity-1 findings get a dedicated email summary inside business hours of discovery.
Will this slow my store down?: No. Everything we do is read-only. We do not deploy anything, we do not run load tests against production, and our external probes hit the store at the same rate a normal browser would.
What is the turnaround?: Three working days from brief to delivery. We book a calendar slot up front so it does not slip. If we find more than the standard surface count can absorb, we tell you on day 1 and let you decide whether to extend the window.
Is the audit fee credited if I book remediation?: Yes, 100% of the health-check fee credits against any remediation engagement we run for you inside 60 days. There is no upsell pressure during the walkthrough; about half of customers do the remediation themselves or with their existing agency.
Do you check our third-party integrations?: Yes, at a configuration level. We confirm webhook health, retry behaviour, error logging and credential hygiene for payment gateways, ERP connectors, shipping carriers and email service providers. Deep integration debugging needs a separate engagement.
What does the report look like?: A PDF or shared doc, your preference. Executive summary on page 1, findings catalogued by surface, each with severity, effort and impact scored. The remediation list is ordered by ROI so you can work top-down.

Ready to start?

Tell us about your project.

A member of our team reads every message. Replies within one business day. No sales call required.

See all services

Vérification de la santé Magento

What it is.

Deliverables.

What it isn't.

From inquiry to handover.

1. Brief (Day 0)

2. Audit (Days 1-2)

3. Report + walkthrough (Day 3)

Questions we get from people about to book.

Tell us about your project.

Vérification de la santé Magento

What it is.

Deliverables.

What it isn't.

From inquiry to handover.

1. Brief (Day 0)

2. Audit (Days 1-2)

3. Report + walkthrough (Day 3)

Questions we get from people about to book.

Tell us about your project.