Home/Code Review & System Integration
Code Review & System Integration

Code Review & System Integration
Before You Buy a Website, Know What You're Buying

Plenty of Hong Kong companies are locked in by vendors, inherit "black box" websites, or want system integration but don't know where to start. We provide independent third-party technical review — honest answers, no upselling of unnecessary work.

Request a Code Review WhatsApp Us
When You Need This

Five Situations Where
You Should Review First

A code review isn't fault-finding — it's understanding the current state before you invest more money.

Redesign: Rebuild or Refit?

The site still works but looks dated and mobile experience suffers. After review we tell you what to keep and what to rebuild — saving unnecessary spend.

Switching Vendors / Inheriting a Site

The previous vendor can't produce source code, documentation is incomplete, code has no comments. We assess maintainability and advise takeover versus rewrite, with budgets.

The Site Was Hacked

Malware injected, redirects to ads or phishing pages. We find the entry point, clean the backdoors and close the vulnerabilities so it doesn't happen again.

Slow Site, Unknown Cause

6–8 second loads, and the vendor's only answer is "upgrade your hosting". We analyse the real bottleneck layer by layer: front end, database queries, caching and images.

ERP / CRM Integration Plans

You want to connect shop, POS, accounting and inventory but don't know if current systems can integrate, or what it costs. Feasibility first, then quotation.

Pre-Acquisition Due Diligence

Before M&A or investment: assessing the target's website and system asset quality, technical debt and latent risk — a technical basis for valuation.

Code Review Scope

What the Review Actually Covers

Five dimensions, 60+ check items — all documented in a written report with severity grading.

Security

  • Injection vulnerabilities: SQL Injection, XSS, CSRF
  • Authentication and access control (privilege escalation)
  • Sensitive data storage and transport encryption (passwords, personal data)
  • Third-party package vulnerabilities (known CVEs) and outdated versions
  • File upload validation, backup file exposure, directory traversal
  • SSL configuration, Security Headers, admin panel exposure

Performance

  • Core Web Vitals (LCP / CLS / INP) measured live
  • Database query efficiency, N+1 queries, missing indexes
  • Image and static asset optimisation, lazy loading
  • Caching strategy (page / object / CDN)
  • Front-end resource loading order and render-blocking
  • Server response time (TTFB) and load testing

Code Quality

  • Architecture soundness, modularity, coupling
  • Naming conventions, comment coverage, documentation completeness
  • Error handling and logging mechanisms
  • Duplicate code, dead code, technical debt assessment
  • Version control (Git) history and deployment workflow
  • Maintainability score and refactoring priorities

Technical SEO & Compliance

  • Semantic HTML, heading hierarchy, alt attributes
  • Sitemap, robots.txt, canonical, hreflang
  • Structured data (Schema.org) correctness
  • Mobile-friendliness and responsive implementation
  • Cookie consent mechanism and privacy compliance
  • Third-party licensing (plugins / fonts / stock images) compliance risk
Three things we never do: one, exaggerate problems to win engineering work; two, touch any production code without your written consent; three, use the review report to pressure you into follow-up contracts. The report and recommendations are entirely yours — hand them to any provider, including your current one.
Deliverables

What You'll Receive

A report written for people, not just engineers. Technical detail and business impact are listed separately, so management can follow it.

  • Executive summary (1 page) — overall score, the five most critical issues, recommended actions and budget range.
  • Issue list (Excel / PDF) — every issue with severity (Critical / High / Medium / Low), impact, location and fix recommendation.
  • Performance test report — PageSpeed Insights, GTmetrix and real-device data, with before/after comparisons.
  • System architecture diagram — visual map of current systems, data flows and integration points.
  • 1-hour walkthrough meeting — presented in Cantonese, with your existing vendor welcome to attend.

Basic Review

For typical corporate websites

HK$4,800
  • Security + performance + technical SEO
  • Issue list and fix recommendations
  • 1-hour walkthrough meeting
  • Delivered in 5–7 working days
Request Basic Review
RECOMMENDED

Deep Review

For shops and system-type sites

HK$9,800
  • Full five-dimension check (60+ items)
  • Code quality and technical debt assessment
  • Penetration testing (non-destructive)
  • Architecture diagram and integration advice
  • 2-hour walkthrough + vendor meeting
Request Deep Review

Due Diligence

For M&A and investment evaluation

HK$28,000 from
  • Technical asset inventory and valuation reference
  • Licensing compliance and legal risk assessment
  • Team and process maturity assessment
  • Integration feasibility and cost estimation
  • Coordination with accountants and lawyers
Book a Consultation
System Integration

Database Integration &
System Connectivity

Website, shop, POS, ERP, CRM and accounting systems working in silos is the main source of manual errors and inefficiency. We connect them.

API Development & Integration

RESTful / GraphQL API design and development, connecting ERPs (SAP, Oracle, Microsoft Dynamics), accounting (Xero, QuickBooks), logistics and payment platforms.

Data Migration

Legacy data clean-up, field mapping, test migrations and cutover — orders, customers and inventory moved with zero loss, fully traceable.

ETL & Synchronisation

Scheduled or real-time sync across systems with conflict handling, retries and alerting, plus complete sync logs for audit.

E-Commerce Integration

Shop-POS inventory sync, membership data integration, buy-online-pickup-in-store (BOPIS), orders auto-posted to accounting.

Data Warehouse & BI

A central data warehouse consolidating all sources, with Looker Studio / Power BI dashboards for management.

Website Takeover & Rescue

When vendors go quiet or won't cooperate, we help recover domain, hosting and source code control, with transition-period support.

System integration projects typically start at HK$45,000. We begin with a feasibility assessment (HK$3,800, creditable against the project fee) before quoting.

Book an Integration Assessment
Process

Review Process: Five Steps

01

Initial Discussion

Site background, pain points and your goals

02

Access Granted

Source code, staging and hosting access (NDA signed)

03

Manual + Tool Review

Automated scanning backed by senior engineer review

04

Report Writing

Graded issues, fix costs and priorities estimated

05

Walkthrough Meeting

1–2 hour session, vendors welcome

0+check items
0–7 daysdelivery time
0%report ownership is yours
HK$0Kbasic review from
FAQ

Code Review FAQs

Yes, but with limited depth. With a URL only, we can run an "external review": security headers, SSL configuration, front-end performance, technical SEO, known package version detection and non-destructive penetration testing. Deep backend code and database query inspection needs source code or staging access. We'll state exactly what's achievable up front — never charging full price for half the work.
No. We review read-only, and all penetration testing is non-destructive — nothing written, deleted or modified. If live-environment testing is truly needed, we obtain your written consent first and schedule it in the lowest-traffic window.
Our reports state facts and technical evidence only — no personal or company commentary. Every issue comes with location, impact and a recommended fix: objective technical documentation. In fact, many clients hand the report to their original vendor for remediation, which is exactly the outcome we like — your website improving matters more than us winning the work.
The report lays out both paths — "fix" versus "rebuild" — with costs, timelines and risks side by side, and you decide. Choose to rebuild with us and the review fee is fully credited against the rebuild project; choose another provider and the report is still yours, with no extra charges.
Not usually. Most cases can be connected through APIs or a middleware layer without replacement. Only when systems have no API at all, are end-of-life, or architecturally can't scale do we recommend replacement — with reasons and a transition plan. We don't resell any ERP or CRM software, so our advice is never commission-driven.
Get Clarity First

Before Spending More,
Understand What You Have

Send us the URL and some background — we'll first tell you what level of review is possible, then you decide whether to proceed. The initial conversation is free.

Request a Code Review WhatsApp Us

Mon–Sat 10:00–19:00 | Average reply within 2 hours