The verdict in three sentences
When the freelancer who built your business application disappears, the takeover starts with a code audit at 8,000 to 20,000 USD over 2 weeks, then remediation at 15,000 to 60,000 USD depending on technical debt, and finally application maintenance at 800 to 2,500 USD per month. Even before the audit, the priority is to recover access: source code, hosting, domain name, database and third-party service accounts. In 7 cases out of 10, the app can be taken over without a full rewrite, provided you act before the next outage.
The immediate risks: access, source code, hosting
For a 60-employee services company in New York, the business app (scheduling, quotes, client tracking, invoicing) often runs day-to-day operations. The danger is not the code itself, it is dependence on a single person who holds everything.
| Item to recover | Risk if missing | Priority | How to recover it |
|---|---|---|---|
| Complete source code (Git repository) | No way to fix or extend | Critical | GitHub, GitLab or Bitbucket repo, otherwise copy from the server |
| Hosting access (AWS, DigitalOcean, Azure) | Site goes down when the subscription ends | Critical | Account in the company's name, company card |
| Domain name | Loss of the address and email | Critical | Transfer to a company-owned registrar account |
| Database and backups | Loss of client data | Critical | Full export, verified restore |
| Third-party accounts (transactional email, payments, maps) | Features stop without warning | High | List API keys, recreate in the company's name |
| Documentation and deployment credentials | Cannot ship to production | Medium | Rebuilt during the audit |
| Contract and IP assignment clause | Dispute over usage rights | Medium | Review by your attorney |
An often-ignored legal point: in the US, code written by an independent contractor belongs to the contractor unless there is a written assignment or a valid work-for-hire agreement. You may have an implied licence to use it, but modifications can be challenged. Have the contract reviewed early.
Audit, remediation, maintenance: 2026 budgets
The audit answers one question: take over, partially rebuild or rewrite? It covers code quality, framework versions (unsupported PHP 7 or old Rails and Node versions are common), security, performance, backups and the ability to redeploy the app from source.
| Step | Range (USD) | Timeline | Deliverable |
|---|---|---|---|
| Access recovery and emergency backup | 1,500 to 4,000 | 2 to 5 days | Inventory, verified backup, accounts transferred |
| Code and infrastructure audit | 8,000 to 20,000 | 2 weeks | Report, risk map, costed scenarios |
| Light remediation (updates, security, CI/CD) | 15,000 to 30,000 | 4 to 6 weeks | Maintainable app, automated deployment |
| Heavy remediation (rebuild critical modules) | 30,000 to 60,000 | 8 to 14 weeks | Rewritten modules, tests, documentation |
| Full rewrite (if the audit is negative) | 80,000 to 200,000 | 4 to 8 months | New app, data migration |
| Monthly maintenance | 800 to 2,500 per month | Ongoing | Fixes, updates, monitoring, small enhancements |
2026 estimates for the New York market (order of magnitude). Real cost depends mostly on codebase size and the absence of tests.
The takeover checklist and the clauses to require next time
During the takeover, follow this order: secure (backup and access), understand (audit), stabilise (updates and security), and only then extend. Adding features on an unaudited codebase stacks up risk.
To never relive the situation, require in the next contract:
- IP assignment of the code, written and comprehensive.
- Git repository in the company's name, with the vendor invited as a contributor.
- Hosting, domain and third-party accounts opened in the company's name and with its payment methods.
- Minimum documentation: installation, deployment, architecture, environment variables.
- Reversibility clause: 2 to 5 days of knowledge transfer at contract end, at a price fixed in advance.
- Maintenance commitments: response time (for example 4 business hours for a blocking incident) and backups tested monthly.
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Jason, owner of a 60-employee services company in New York, uses a scheduling and invoicing app built 4 years ago. The freelancer no longer answers, hosting expires in 2 months and a reported vulnerability remains unpatched.
He commissions access recovery (2,500 USD), then an audit (12,000 USD). Verdict: sound codebase, framework to upgrade. Light remediation: 22,000 USD, then maintenance at 1,500 USD per month. First-year cost: 2,500 + 12,000 + 22,000 + (1,500 x 10) = 51,500 USD. By comparison, a rewrite would have cost at least 100,000 USD and 5 months, and a one-week outage (60 staff without scheduling) represents about 35,000 USD of lost productivity. Illustrative scenario to adapt to your situation.
FAQ
Can we take over an app without the source code?
If the app runs PHP, Python or server-side JavaScript, the code is almost always recoverable from the server. For a compiled app without sources, a rewrite often becomes the only option, from 80,000 USD.
How long does a code audit take?
Two weeks for a mid-sized business app (20,000 to 80,000 lines). The report delivers costed scenarios to within about 20%.
Does the freelancer own the code?
Without a written assignment, often yes. A negotiated assignment after the fact usually costs a few hundred to a few thousand dollars and secures what comes next.
Should we rewrite everything in a modern framework?
Rarely. In about 70% of audits, remediation at 15,000 to 60,000 USD is enough to keep the app maintainable for 3 to 5 years.
What does 800 to 2,500 USD of monthly maintenance cover?
Monitoring, security updates, bug fixes and a bucket of small enhancements (often 2 to 8 days per quarter).
Let's scope your project. Describe your application (technology if known, hosting, access you still have) and we will propose a takeover plan: access recovery, audit, remediation budget and maintenance. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
