# Software Audit Services Source: https://ordergroup.co/services/consulting-discovery/software-audit-services/ Last updated: 2026-10-23 > Software audit services: a technical audit of code, architecture, infrastructure and delivery process, based on our Skyfri audit. Free consultation. # Software audit services At Skyfri in Oslo we ran a seven-week technical audit, and more work followed. Our software audit services cover code, architecture, infrastructure and delivery process, and end with proposals for what to change. For CTOs and product owners deciding whether to invest in, take over or scale a system. [Book a free consultation](https://ordergroup.co/contact-us/) ![Laptop showing an analytics report with charts (Unsplash free license)](https://ordergroup.co/media/images/photo-1504868584819-f8e8b4b6d7e3.format-webp.width-1600.webp) Projects **160+** Software projects delivered since 2013 Industries **15+** Industries we have built software for Weeks of audit **7** Technical audit at Skyfri, 20 Nov 2023 to 7 Jan 2024 Hours **48h** Maximum time to our reply after you send the contact form, on working days ![Team members taking notes around a wooden meeting table (Unsplash free license)](https://ordergroup.co/media/images/photo-1517048676732-d65bc937f952.format-webp.width-2880.webp) ## When companies order a software audit A software audit answers one question: what state is this system in, and what should be done about it? It is one of our [consulting and discovery](https://ordergroup.co/services/consulting-discovery/) services, and three situations call for it before a decision is made. - Before an investment or a funding round. You see the technical state of the product before money is committed: architecture, code, infrastructure and delivery process. - Before taking over a system from another vendor or team. You learn what you are inheriting and where the work should start. - Before scaling a product. You see which parts will carry growth and which need attention first. A product that does not exist yet needs a different first step: our free [product strategy workshops](https://ordergroup.co/services/consulting-discovery/product-workshops/) produce a scope, a roadmap and an estimate. ![Code on screen (Unsplash)](https://ordergroup.co/media/images/photo-1526628953301-3e589a6a8b74.format-webp.width-2880.webp) ## What a software audit covers In an audit we look at the code and its architecture (the code audit), at data processing and performance, at infrastructure, and at the delivery process and team practices. The result is a picture of the system's state and recommendations. At Skyfri the audit covered React, C# and ASP.NET, Python and pyspark, Kusto/ADX, Databricks and Azure. It focused on data processing and performance, on the product build process and team practices, and on the repeatability of interface components. The stack and the questions differ from system to system. Accessibility audits against [WCAG](https://ordergroup.co/glossary/wcag-2-2/) are a separate service: see our [accessibility audit services](https://ordergroup.co/services/design/accessibility-audit-services/). ## How an audit runs ### First conversation You describe the system and the decision ahead of you in a free consultation. We reply to a form enquiry within 48 hours on working days. ### Kick-off At the start of the work we hold a kick-off with you, record the project in our GDPR registers and update access whenever the team changes. ### Your tools We work in your tools when you want that. At Skyfri we used MS Teams, Outlook with accounts in the client's domain, and the client's Slack and Jira. ### Analysis We analyse your current projects and the technology stack. ### Proposals and priorities We present proposals for solutions and agree the order of changes together with you. ![Two engineers reviewing code on a monitor in an office (Unsplash free license)](https://ordergroup.co/media/images/photo-1531482615713-2afd69097998.format-webp.width-2880.webp) ## What you get at the end of a software audit You get proposals for solutions and a shared view of what to change first. At Skyfri the client asked us to show what to change in the product build process and in recurring performance issues, and the audit answered that request with proposals. The order of changes was then agreed together with the client. ## Technical due diligence before an investment or an acquisition Technical due diligence is a technical assessment of a product and its team before an investment, an acquisition of a company or a large purchase. It typically covers architecture, code quality, security, scalability, infrastructure and dependence on key people. A software audit looks at the same ground from the side of the system: code, architecture, data, infrastructure and delivery process. If you are about to invest in your own product, or to take over a system from another vendor or team, the audit gives you the technical picture to decide on, together with proposals for what to change. ![Two colleagues discussing work at laptops, seen through glass (Unsplash free license)](https://ordergroup.co/media/images/photo-1553877522-43269d4ea984aut.format-webp.width-2880.webp) ## An audit that opens an engagement: Skyfri The Skyfri audit ran from 20 November 2023 to 7 January 2024 in Oslo. After it, we agreed the order of changes with the client. In our conversations with the team in Oslo a new project came up: an [energy management system](https://ordergroup.co/glossary/ems/) (EMS) for a Skyfri client. From January 2024 our team has worked inside the Skyfri team. The EMS went into production in June 2024 and controls 7 plants, with more than 5 MWh of battery capacity and more than 4 MW of battery power. Later services at Skyfri received full CI/CD and infrastructure as code, with Terraform replacing ARM Templates and Azure CLI. Infrastructure work like this belongs to our [Platform & Cloud Engineering](https://ordergroup.co/services/platform-cloud-engineering/) services. The full story is in the [Skyfri case study](https://ordergroup.co/case-studies/skyfri-solar-asset-management-platform/). The engagement that followed the audit ## Skyfri case study [Show all Case Studies](https://ordergroup.co/case-studies/) - [Skyfri - Solar & Battery Asset Management Platform](https://ordergroup.co/case-studies/skyfri-solar-asset-management-platform/) [![Skyfri - Solar & Battery Asset Management Platform](https://ordergroup.co/media/images/skyfri_peak_shaving_dashboard_la.format-webp.width-1280.webp)](https://ordergroup.co/case-studies/skyfri-solar-asset-management-platform/) ![Presentation to a team at a conference table with laptops (Unsplash free license)](https://ordergroup.co/media/images/photo-1542744173-8e7e53415bb0aut.format-webp.width-2880.webp) ## After the audit The decision about the result is yours, and the audit does not commit you to working with us. If it points to changes in an existing system, [Software Modernization](https://ordergroup.co/services/platform-cloud-engineering/legacy-software-modernization/) is where we carry them out, step by step on a system that keeps running. For a new product, the free [product strategy workshops](https://ordergroup.co/services/consulting-discovery/product-workshops/) give you a scope, a roadmap and an estimate of cost, time and team composition. To build it, we offer [custom software development](https://ordergroup.co/services/software-development/custom-software-development/). [Support and maintenance](https://ordergroup.co/services/platform-cloud-engineering/support-maintenance/) after the changes runs under an SLA set in the contract. Hypercare, a period of closer support right after changes go live, is possible, with scope and duration agreed before the start. ## Code access, confidentiality and GDPR Confidentiality is standard for us: without a client's consent we describe clients by industry or not at all. We act as a processor and you are the controller, and each project has a separate data processing agreement based on Article 28(3) of the GDPR. Our GDPR documents were prepared with a law firm acting as our data protection officer and approved by our management board. Access to your systems goes through named accounts, AWS IAM Identity Center and the principle of least privilege. Our disks are encrypted and we review our procedures every 12 months. We report an incident within 24 hours at the latest. When the contract ends we delete or return your data within 10 working days and confirm it in writing within 7 days. More in [Security & GDPR](https://ordergroup.co/company/security/). Let's discuss your system ## Talk to us about your system Talk to us before the decision is made. [Book a free consultation](https://ordergroup.co/contact-us/) ![pattern](https://ordergroup.co/media/images/pattern_nh6u4su.2e16d0ba.format-webp.fill-2880x1620.webp) ## Why run a software audit with us Order Group is a software house based at Chmielna 25 in Warsaw, working since 2013, with 160+ projects in 15+ industries. Our rating is 5.0/5 on Clutch, from 18 verified reviews. At Skyfri our team went from the audit into working inside the client's own team. ## How to start a software audit Book a free consultation and tell us whether the decision is an investment, a handover or a growth plan. The first conversation is free, and so are our product strategy workshops for new products. ## Software audit FAQ Questions CTOs and product owners ask before an audit ![Maciej Sułek](https://ordergroup.co/media/images/T02DHCC1Z-U04AVB19V-45105f88ff4a-512.format-webp.webp) Maciej Sułek Co-founder & CTO [Book a free consultation](https://ordergroup.co/contact-us/) ### What are software audit services? Software audit services are a technical analysis of an existing system: its code, architecture, data, infrastructure and the way it is developed. The audit ends with a picture of the system's state and recommendations. Ours covers the code, architecture, infrastructure and delivery process, and ends with proposals for what to change. ### What does a software audit cover? A software audit covers the code and architecture (the code audit), data processing and performance, infrastructure, the delivery process and team practices. At Skyfri it covered a stack of React, C# and ASP.NET, Python and pyspark, Kusto/ADX, Databricks and Azure, and also the repeatability of interface components. ### When should we order a software audit? Order one before a decision that depends on the state of a system: an investment or funding round, taking over a system from another vendor or team, or scaling a product. Skyfri asked for one to learn what to change. ### How long does a software audit take? It depends on the system and the question you want answered. The technical audit we ran at Skyfri took seven weeks and covered the client's current projects and its technology stack. It ended with proposals for solutions. ### What is technical due diligence, and how does it differ from a software audit? Technical due diligence is a technical assessment of a product and team before an investment, an acquisition or a large purchase. It typically covers architecture, code quality, security, scalability, infrastructure and dependence on key people. A software audit analyses the system itself and ends with recommendations, so the two overlap on the technical questions. ### What do we get at the end of an audit? You get proposals for solutions and agree the order of changes with us. At Skyfri the audit ended the same way, with an order of changes agreed with the client. The audit does not commit you to working with us afterwards. ### Who sees our code, and how do you protect it? Access goes through named accounts, AWS IAM Identity Center and the principle of least privilege, and our disks are encrypted. Each project has a data processing agreement under Article 28(3) of the GDPR. We report an incident within 24 hours, and after the contract we delete or return your data within 10 working days. ### How do we start a software audit? Book a free consultation. We reply to the contact form within 48 hours on working days, hold a kick-off with you at the start of the work and record the project in our GDPR registers. ![Developer with headphones coding at desktop monitor in an open office](https://ordergroup.co/media/images/Image_1_3kejLC8_Y69T2Sz.format-webp.width-2880.webp) ## Tell us about your system Your message goes to ![Filip Szamborski](https://ordergroup.co/media/images/Filip_dTWHyBo.2e16d0ba.fill-432x432.format-webp.webp) Filip Szamborski Co-founder & CEO [](https://www.linkedin.com/in/filip-szamborski/) SO FAR WE HAVE WORKED WITH BRANDS LIKE: - ![AASA24](https://ordergroup.co/media/images/aasa24-mono.max-208x64.format-webp.webp) - [![AP-Tech](https://ordergroup.co/media/images/ap-tech-mono_ihuJP5T_6b2rSSb.max-208x64.format-webp.webp)](https://ordergroup.co/case-studies/monster-airport-lighting-system/) - ![Avafin](https://ordergroup.co/media/images/avafin-mono.max-208x64.format-webp.webp) - [![BizBot](https://ordergroup.co/media/images/bizbot-mono_StdJIUN.max-208x64.format-webp.webp)](https://ordergroup.co/case-studies/bizbot-fintech-ux-design/) - [![Enerace](https://ordergroup.co/media/images/enerace-mono_FKuME1X_Fp3WF4B.max-208x64.format-webp.webp)](https://ordergroup.co/case-studies/enerace-energy-trading-software/) Thank you for your message. We read every message ourselves and get back to you within 48 hrs on business days. Something urgent? [hello@ordergroup.co](mailto:hello@ordergroup.co)