A report you can read in one sitting. No code, no jargon.
What you own
What exists, where it runs, what it depends on, and what’s sitting in someone else’s account instead of yours.
What you were told, and what’s true
What your documentation says, checked against what the code actually does, down to the exact file and line.
Risks, ranked by cost
Ordered by what they could cost the business, not by technical severity. Each one comes with a plain fix.
Where to focus next
Dated, so you can run it again in six months and compare, instead of arguing from memory.
Two depths: a quick sweep of everything, which is where to start, or a deep look at the parts that matter most.
The documents said card payments went through one provider, and passwords were encrypted.
The code used a different payment provider entirely. The encryption tool was installed and listed, but never actually used. Passwords were being saved exactly as people typed them.
The company found out from us in week one, not from a breach.
A complete sample report, on our own code.
Read it from start to finish, with the uncomfortable findings left in. You can judge the work before you spend anything.
Four promises about your code.
Read-only access:Limited to the code you choose, and you can switch it off at any time.
Your code never runs:We only read it. Nothing of yours runs on our machines.
Your code isn’t kept:The report is what you get. Your code doesn’t stay with us afterward.
Passwords removed first:Passwords and keys are stripped out before anything is analyzed, and we tell you which ones we found.
The report finds the problems. Self-Build stops them coming back.
ProductLens is a YE Stack product. TGH Tech runs the report for you. The product lives at productlens.report.