Human Resources
About this project
As part of an internal initiative, we audited a mature timesheet system used for time tracking and employee-related workflows. The goal was to identify hidden technical risks before modernization and support architectural and investment decisions based on the actual condition of the codebase rather than assumptions.
Services
Software audit
Technologies
AI, on-premises AI models, static code analysis, architecture review, security review, CI/CD analysis
Our team conducted an audit supported by on-premises AI models operating exclusively within a controlled environment.
We combined analysis of code logic, data flows, inter-module dependencies, operational processes, and CI/CD assumptions with senior-level validation of the findings.
This allowed us to separate material risks from noise and uncover issues that were not visible in the system's day-to-day operation but could significantly increase the cost of change. These included weak password hashing that had been running in production for two years without triggering alerts, an identity-mapping defect affecting authentication logic in critical edge cases, and inconsistencies in the CI/CD lifecycle that created hidden delivery risk.
The audit produced a decision-ready risk map and a remediation plan.
We identified 22 key findings, including 5 security issues, 2 of them critical, as well as 4 performance issues.
We also estimated 396 person-days of remediation work and assessed the system's baseline maturity at 32.5%.
The audit converted hidden code-level risk into a concrete backlog, a roadmap, and a realistic view of the cost of modernization.
The team gained greater predictability ahead of a system rewrite, vendor re-engagement, investment planning, and backlog prioritization.
Using on-premises models without moving the code outside a controlled environment also supported requirements related to trust, GDPR, and SOC 2.
Show more