72 hours · $1,297 · no proposal, no call required to start
Know exactly what's broken in your codebase before you spend another hour guessing.
You don't need a discovery call to know your AI-generated code has gaps — you need someone to find them. Surface Scan is a fixed-scope, fixed-price audit of up to two repos: CVE exposure, auth gaps, and the specific anti-patterns AI tools leave behind. Request it now, connect read-only access, report lands in your inbox in 72 hours.
Who this is for
The founder or engineering lead who signs their own invoices. No procurement, no vendor form, no committee. If you can put $1,297 on a card without asking anyone, this was built for you.
Who this isn't for
If you need a multi-repo, custom-scope engagement with a PO and an MSA, that's Velocity Baseline — see the full ladder. Surface Scan is deliberately narrow so it can move fast — no proposal, no committee.
The Scope
Exactly what you're buying — nothing implied, nothing hidden.
Included
- Up to 2 repos, read-only access (no admin, no secrets, no write access)
- Dependency / CVE spot-check on lockfiles
- Pattern scan for auth gaps, exposed config, and AI-generated anti-patterns
- Critical-path test coverage gaps, where tests exist
- Severity-ranked report with evidence links, delivered in 72 hours
Not included
- Fixes — we tell you what is broken, not ship the patch (that is Baseline+)
- Repos over ~50k LOC without a scope check first
- Open-ended consulting — senior review is capped at ~1 hour per scan
Every paid engagement reflects a point-in-time review within its stated scope — a technical assessment, not a warranty of security, compliance, or fitness for a particular purpose.
Price & Guarantee
$1,297
Charged when you connect access. 72-hour clock starts on payment.
If we don't hand you a severity-ranked, evidence-linked report inside 72 hours, the scan is free and you keep whatever partial findings exist.
“Let your yes be yes, and your no be no.” — Matthew 5:37
Before You Ask
The questions a solo decision-maker actually has.
- Do I need a call first?
- No. Submit the request, connect read-only access, get the report. If your repo is an outlier (over ~50k LOC, unusual monorepo structure), we email before the clock starts instead of silently missing scope.
- Can I expense this without approval?
- That's exactly who this is priced for. $1,297 sits under most individual card and no-PO thresholds — that's deliberate, not an accident.
- What if I want more than 2 repos or a deeper review?
- That's Velocity Baseline ($5,850), and your Surface Scan payment credits $1,297 off it if you upgrade within 30 days.
- Who actually reads my code?
- Automated pass first — CVE/lockfile scan, pattern scan — then senior human review on the findings, capped at ~1 hour so the price stays fixed.
Read-only access. 72-hour clock. Report or it's free.
No proposal to review, no committee to loop in. One form, connect access, and the clock starts.
Get in Touch
The Readiness Brief below is free — instant, automated, no cost, no card required. Instant, automated output from the contact form — recommended access path, checklist, and timeline. No repo scan until Surface Scan is purchased.
Want repo findings instead? Pick Surface Scan or another paid option from the dropdown — those are billed separately, before any work begins.