Flagship consultation
Backend Code Review Pass
For engineering leads who need a thorough, independent read of a Node.js service before refactoring, hiring, or external audit. We treat your repository as production code—not a tutorial exercise—and document findings your team can schedule immediately.
Who it is for
Teams running Express, Fastify, or Nest HTTP layers on Node 18+, with PostgreSQL or MySQL and at least one async worker. Common in Cape Town and Gauteng product companies with seasonal traffic spikes.
Result you receive
- PDF report (typically 25–45 pages) with severity-tagged findings
- Ranked refactoring backlog with suggested ownership (platform vs feature squad)
- 90-minute walkthrough recording and live Q&A
- Optional appendix mapping findings to OWASP API Top 10 where relevant
Scope included
- One bounded codebase up to ~25,000 LOC application code (excluding generated clients)
- HTTP routers, service layer, data access, background jobs, and test suite structure
- Configuration and secrets handling as represented in repo (not live cloud consoles)
- Up to two hours of clarification email during the review week
Out of scope
- Penetration testing or live production traffic manipulation
- Frontend React/Vue bundles unless they embed secrets or call patterns that affect API design
- Unbounded monorepos without a agreed package boundary
Provider and process
Led by Node Passage principal consultants with a minimum of eight years shipping Node backends. Week 1: access and architecture interview. Weeks 2–3: deep read and draft findings. Week 4: report delivery and walkthrough call.
Duration and delivery
Calendar time is usually four weeks from signed scope letter. Remote by default; on-site kickoff in Sandton available on request.
Preparation
Read-only Git access, a short architecture diagram, and a list of known pain points (slow endpoints, flaky jobs, recent incidents). See our preparation guide.
Pricing basis
Fixed fee from R 48,000 ex VAT for standard scope; larger repos quoted after a 30-minute scoping call. See rates for detail.