Fixed-price Magento audit
A Magento audit that tells you what actually matters
Before you sign off an upgrade, a replatform or a new agency, find out what you're really working with. We go through security, custom code, extensions, hosting, speed and your upgrade path, and sort every finding by risk and effort. You'll also get our honest view on whether to fix the store or rebuild it. We don't change anything on live, the price is fixed up front, and the report is yours whatever you do next. If we spot something urgent, like live malware, you hear about it that day.
- Fixed price, agreed before we start
- Security, code, speed and upgrade path
- Findings sorted by risk and effort
- An honest answer on fix or rebuild
Fixed
Price, agreed before we start
Read-only
Nothing changed on your live store
Ranked
Each finding sorted by risk and effort
Merchants planning a big upgrade, replatform or redesign
New CTOs or e-commerce leads who've just inherited a store
Businesses switching agency who want an independent starting point
Stores getting PCI DSS questions from an acquirer or insurer
Before a big upgrade, a migration or a change of agency, you need to know what's under the bonnet. How many extensions are abandoned? Has anyone edited core? Has the store been hacked? How much of the code is worth keeping? When nobody has answered those questions, quotes for the same job can be three times apart. An audit answers them before you commit.
signs-you-need-this.log
- ›There's hardly any documentation for the store, server or custom code
- ›Quotes for the same upgrade or migration are miles apart
- ›You suspect a security problem but can't prove it
- ›Every change seems to break something else
- ›You're weighing up Magento 2 against Shopify
- ›Your acquirer or insurer is asking about PCI DSS
We only look. Nothing on your live store gets changed, and the report is yours to keep.
- Step 01
Scope and access
A short call to agree what you most need to know, whether that's security, the upgrade, speed, which platform to choose, or all of it. We fix the price and get read access.
- Step 02
Security
We sweep files, media and database for malware by content, and check admin and API users, SSH keys, cron and server services, checkout scripts, patch level and known vulnerable extensions.
- Step 03
Code and extensions
Each custom module and third-party extension: how well it's written, whether anyone still maintains it, its licence, whether it works with current Magento and PHP, plus any core edits and risky patterns.
- Step 04
Hosting and speed
Hosting, PHP, database, Redis, OpenSearch, Varnish and CDN setup, backups, and a speed baseline on your key pages with Core Web Vitals from real visitors.
- Step 05
Report and walkthrough
A report that says what to fix now, what to plan for and what to leave alone, with rough effort for each item. Then we talk you through it on a call.
Written by people who do the work
The developers who write our audits also run our upgrades, incident work and rebuilds. So the recommendations are realistic, because we know what each one takes.
Security is always in
Every audit includes a malware sweep. More than once, the audit is where we found out a store had been hacked long before anyone noticed.
A short list that matters
Some issues will cost more to fix than they'll ever cost you, and we say so. Two hundred findings all given the same weight help nobody.
No strings attached
The report is yours. Hand it to your own team, another agency or us. We write it so any decent Magento developer can act on it.
From our clients
Scopebit has just saved us a massive amount of time with their full security check on our Magento 2 website. We will be using them for the new Magento 2 rebuild after their security breach findings. Highly recommend.
Reviews from real clients. We leave their names off.
Related services
Malware removal & security
Skimmers and backdoors removed, the way in found and closed, and a report your payment provider can use.
Magento upgrades
Get to Magento 2.4.9, PHP 8.4 and OpenSearch, tested on a copy of your store and released in a quiet window.
Performance optimisation
Faster category pages, checkout and admin, with every change measured before and after.
Magento to Shopify migration
Products, customers, orders and every URL Google ranks, moved from Magento to Shopify or Shopify Plus.
Tell us what you're planning for the store.
You'll speak to one of the developers. We'll tell you which route we'd take, what usually goes wrong on projects like yours and where we'd start.
Happy to sign an NDA · Everything tested on staging first · The code is yours