// services

I take over web applications that nobody fully owns anymore.

The agency moved on, the freelancer stopped answering or the in-house developer left. Credentials are scattered, nobody knows how deployment works and every incident turns into an investigation.

I take the application over in a structured way: recover and document access, audit the code, infrastructure and data, close the urgent risks and give you a stabilization roadmap — then stay on as the technical owner if you need one.

This service is for you if…

situations.md
  • the person who built or maintained the application is gone;
  • you are not sure who has access to the servers, domains or third-party services;
  • nobody can say with confidence how to deploy a change;
  • the application handles payments, customer data or critical processes — and that worries you;
  • you need someone to take responsibility, not just to fix one bug;
  • you plan to grow the product and need to know what you are building on.

Scope of work

  1. scope/01

    Access recovery

    Repository, hosting, domains, DNS, databases and third-party accounts — collected, verified and moved under your control.

  2. scope/02

    Infrastructure review

    Servers, containers, backups, monitoring and hosting costs.

  3. scope/03

    Deployment

    How the application is built and released today, and a reproducible pipeline to replace the manual steps.

  4. scope/04

    Code and database

    Architecture, dependencies, data model, critical business processes and their weak points.

  5. scope/05

    Security risks

    Outdated packages, exposed services, secrets in the code and risky permissions — ranked by impact.

  6. scope/06

    Stabilization roadmap

    A documented plan: what to fix now, what to schedule and what can wait, with estimates.

The takeover audit, item by item

Every takeover goes through the same checklist. Each item moves from unknown to documented, so at the end you know exactly what you own and what it depends on.

takeover.sh · audit
  • unknown — not yet reviewed
  • checking — under review
  • verified — confirmed to work
  • documented — written down for you
  1. 01repository accessunknowncheckingverifieddocumented
  2. 02infrastructureunknowncheckingverifieddocumented
  3. 03deploymentunknowncheckingverifieddocumented
  4. 04databaseunknowncheckingverifieddocumented
  5. 05integrationsunknowncheckingverifieddocumented
  6. 06security risksunknowncheckingverifieddocumented
  7. 07documentationunknowncheckingverifieddocumented
  8. 08stabilization roadmapunknowncheckingverifieddocumented

How the work goes

● passed · services/web-application-takeover · main5 stages · 0 surprises
  1. ~1 wk
    audit:takeover

    Takeover audit

    Access, infrastructure, deployment, code and data reviewed and written down.

    → audit report
  2. ~1 wk
    plan:roadmap

    Plan

    Risks ranked by business impact and a stabilization roadmap with estimates.

    → stabilization roadmap
  3. weeks
    fix:stabilize

    Stabilization

    Urgent risks closed first: access, backups, deployment and critical bugs.

    → controlled system
  4. per release
    deploy:release

    Release

    Changes released through a documented, repeatable process.

    → safe releases
  5. ongoing
    support:ongoing

    Ongoing ownership

    Monitoring, updates and development as your long-term technical owner.

    → owned product

What you can expect

  • All access in your hands — documented and verified.
  • A clear picture of the system: architecture, infrastructure, data and dependencies.
  • Urgent security and stability risks addressed first.
  • A deployment process that does not depend on one person’s memory.
  • A roadmap you can plan budget and features around.

Technology involved

Takeovers rarely come with a stack of your choice — these are the technologies I can take responsibility for.

export const stack = [
'PHP',
'Laravel',
'Yii2',
'Node.js',
'Vue',
'Nuxt',
'MariaDB',
'MySQL',
'MongoDB',
'Docker',
'CI/CD',
'Git'
]

Where I have done this before

Long-term ownership is at the core of how I work: I joined a fintech platform in 2020 and have been responsible for it ever since.

  • 6 years with one product client, since April 2020.
  • 99.9% production uptime, kept by resolving incidents, removing recurring failure modes and hardening critical services.
  • Data models with 150M+ row tables across MariaDB, MySQL and MongoDB.
  • CI/CD with GitHub Actions, GitLab CI and Bitbucket Pipelines in place of manual releases.

Questions clients ask first

What if we no longer have some of the credentials?

That is common. Recovering access — through hosting providers, domain registrars or account owners — is the first part of the audit, and everything recovered is moved under your company’s control.

How long does the takeover audit take?

For a typical application, about a week for the audit and another week for the roadmap. Large or completely undocumented systems take longer; you will know the timeline before the work starts.

Do you need the previous developer?

No, although a short handover call helps if it is possible. The audit is designed to work from the code, infrastructure and data alone.

Will you change everything?

No. The goal is control and stability first. Changes are made where they reduce risk or unblock the business, in small steps you can review.

Can you stay on after the takeover?

Yes. Many takeovers turn into ongoing maintenance on a monthly retainer — the person who audited the system is the best placed to keep it running.

What do you need from us to start?

A contact who knows the business processes, whatever access you still have and a short list of what hurts most right now.

git push --message

Inherited an application nobody owns?

Tell me what you have — even if it is only a domain and a server login. I reply within one working day with the first questions and next steps.