The verdict in three sentences
When the freelancer who built your business application stops answering, the first useful spend is a code and architecture audit: EUR 2,500 to 7,000 (about USD 2,700 to 7,600), in 1 to 3 weeks. It turns vague anxiety into numbers: technical debt in days of work, security flaws ranked by severity, outdated dependencies to upgrade. With that report, choosing between a EUR 5,000 to 20,000 takeover and a rebuild becomes a rational decision rather than an emotional one.
What an audit must examine
An SME in London inheriting an app without its author often has little to go on: server access, sometimes a Git repository, rarely documentation. The auditor starts there and checks that the recovered code is actually what runs in production, which is not always the case.
| Audit area | What is checked | Deliverable | Share of time |
|---|---|---|---|
| Access and ownership | Repository, server, domain name, third-party accounts, IP rights | Inventory of access and gaps | 10 % |
| Architecture | Structure, database, APIs, hosting | Map of the existing system | 15 % |
| Code quality | Readability, duplication, tests, conventions | Score per module | 20 % |
| Security | Injections, authentication, plain-text secrets, OWASP Top 10 | Flaws ranked critical / high / medium | 20 % |
| Dependencies | Language versions, frameworks, unmaintained libraries | List with end-of-support dates | 10 % |
| Performance and data | Slow queries, backups, data volume | Measurements and risks | 10 % |
| Quantified technical debt | Upgrade effort per module | Estimate in person-days | 15 % |
Price varies with code size and quality of access. 2026 orders of magnitude: EUR 2,500 to 3,500 for a simple app (under 20,000 lines, one database, one role), EUR 4,000 to 5,500 for a standard business tool, EUR 6,000 to 7,000 for an app with several integrations (accounting, payments, partner APIs) or a fragmented architecture.
The decision grid: take over or rebuild
The audit must end with a reasoned recommendation. Here is the grid we use:
| Criterion | Leans takeover | Leans rebuild |
|---|---|---|
| Framework | Supported version, or upgrade in under 10 days | Abandoned framework or 3 major versions behind |
| Critical flaws | Fewer than 5, fixable locally | Structural flaw (authentication, permissions) |
| Automated tests | Present, even partial | Absent and code untestable |
| Technical debt | Under 30 % of rebuild effort | Over 50 % of rebuild effort |
| Business rules | Readable in the code | Buried, contradictory |
| Planned changes | Limited additions over 12 months | New offering, new uses, scaling up |
| Exit budget | Takeover EUR 5,000 to 20,000 | Rebuild above EUR 25,000, depending on scope |
Between 30 and 50 %, there is a middle path: stabilise and secure now, then replace module by module over 12 to 18 months. It is often the best option for an SME that cannot afford downtime on the tool.
Emergencies to handle in week one
Even before the audit ends, some actions protect the business: take ownership of the domain name and hosting accounts, run a full verified database backup, rotate every password and API key the freelancer knew, check the SSL certificate expiry date. These steps take half a day and prevent a working app from going down for lack of a renewal.
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
David, managing director of a wine distribution SME in London, has used an order and stock management app built by a freelancer for 4 years; the freelancer has been unreachable for six months. He orders an audit at EUR 4,800, delivered in 2 weeks. Findings: framework at end of support, 3 critical flaws, technical debt estimated at 28 person-days, about EUR 15,400 of takeover work at EUR 550 per day. An equivalent rebuild was quoted at EUR 60,000. The takeover is 26 % of rebuild cost: David secures and upgrades, saves about EUR 40,000 and keeps a tool his teams already know.
FAQ
Is an audit possible without the source code?
Partly. If only the server is accessible, the auditor retrieves the deployed code, but some compiled apps limit analysis. An audit without a Git repository usually takes 20 to 30 % longer.
Do I own the code the freelancer wrote?
Not automatically. Under UK law, copyright in software written by a contractor stays with the contractor unless assigned in writing. Check the contract or quote terms before modifying or reselling the app.
How long does a takeover take?
2 to 8 weeks for a EUR 5,000 to 20,000 takeover, depending on technical debt. Critical security fixes come first, often within the first 10 days.
Should we rewrite everything in a newer technology?
Rarely as an emergency. If the framework is still supported and the flaws fixable, a gradual upgrade costs 3 to 4 times less than a full rewrite.
Can the auditor then take over the app?
Yes, and it is common, but require a report any vendor can use. A good audit leaves you free to put the takeover out to competitive bids.
Let's scope your project. Give us access to what you have (server, repository, contract): we will scope the audit, its price and timeline, then the takeover or rebuild. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.