Architecture Review & Due Diligence

An outside read on an architecture decision, a stack choice, or a company you are about to buy, written so you can act on it.

Who it is for
Teams facing a decision nobody wants to own, and buyers who need to know what they are acquiring before they sign.
What you get
  • Architecture review, written
  • Technology stack assessment
  • Technical due diligence report
  • Engineering process review
What I need from you
Access to the codebase, the decisions made so far, and the people who made them.
Overview

What this is

A review is worth paying for when the people closest to the system can no longer be the ones to judge it, either because the decision splits the team or because somebody outside needs an answer they can rely on.

What you get is a document with the evidence in it: what I looked at, what I found, what it will cost to leave as it is, and what I would do. Where I am not sure, it says so. A review that agrees with whoever commissioned it is worth nothing, and everyone in the room knows it.

Capabilities

What you get

Architecture review

  • A read of the system as it is, not as the diagram says
  • Scaling limits, with the number at which each one bites
  • Failure modes and what currently happens when they fire
  • The cost of the current design, in money and in engineer time

Technology stack assessment

  • A comparison decided on cost, operational burden and hiring, not on preference
  • What the migration would actually cost, including the parts nobody budgets
  • The option of doing nothing, priced honestly alongside the others
  • A recommendation stated as a decision rather than as a lean

Technical due diligence

  • Codebase health, test coverage and the shape of the technical debt
  • Infrastructure, licensing and third-party dependency risk
  • Security posture and any compliance exposure
  • Key-person risk, which is usually the finding that matters most

Engineering process

  • Where delivery time is going, measured rather than guessed
  • Review, branching and release practice
  • On-call load and what is generating it
  • What to change first, ordered by what it costs against what it returns
Evidence

What I can show you

ICF is early, so there are no named client logos here yet. What there is: public code you can open and read, and work described without naming whose it was.

Approach

How I work

01

Scope

What decision this has to support, and by when. A review without a decision attached becomes a document nobody reads.

02

Read and interview

The code, the infrastructure, the incident history, and the engineers. The incident history is where the honest version lives.

03

Write it down

Findings with evidence, options with costs including doing nothing, a recommendation, and what would change my mind.

04

Defend it

A session where the team takes the findings apart. Anything that does not survive that does not belong in the document.

Technology

Stack

AWSGCPKubernetesTerraformPostgreSQLGoRustNode.jsReactDORA
When to engage

Signs this is the work you need

A re-architecture decision has split the team for weeks

You are acquiring a company and the diligence has to be technical

A vendor is recommending the thing the vendor sells

The people who can judge the system are the people who built it

Related Services

You may also need

Is this the work you need?

Tell me what you are running and what is slowing you down. I reply within one business day, and I will say so if this is not work I should take.

Taking a small number of contracts