Legacy Health Check:
A Complete IT Audit for
Your Business
A structured, independent technology audit delivered in 2 weeks.
You get a prioritised modernisation roadmap, a risk register, and an executive summary —
everything you need to decide what to fix first and build a business case.
Who is this for.
A Legacy Health Check is designed for businesses that know something is wrong with the current systems, though need evidence before committing budget or starting a larger modernisation programme. If you are starting from the financial angle, our guide to the hidden costs of legacy software explains how to calculate the full cost of a legacy system before you commission an audit. For a structured view of where things could go wrong, see our SMB IT risk assessment process; for a specific path forward when a desktop database has quietly become business-critical, see modernising an old Access database.
A Health Check is right for you if
- You suspect your systems are outdated and are unsure what to fix first.
- You need an independent assessment to support a board case, budget request, or investment proposal.
- You are acquiring a business and need IT due diligence.
- You want a prioritised plan before committing to modernisation.
You might not need a Health Check if
- You already know what needs modernising and want to start scoping delivery.
- You are early in the process and want a lighter first step.
- You mainly want a quick sense of risk before deciding whether to talk to anyone.
What you get.
The Legacy Health Check is a productised software audit. The point is clarity — something you can act on, present internally, or hand to another provider.
Prioritised modernisation roadmap
A ranked list of systems, components, and integrations that need attention. Each item is prioritised by business impact, risk, and estimated effort, so you can see what should happen first, what can wait, and where quick wins may exist.
Prioritised modernisation roadmap
A ranked list of systems, components, and integrations that need attention. Each item is prioritised by business impact, risk, and estimated effort, so you can see what should happen first, what can wait, and where quick wins may exist.
For many UK businesses, this is the document set that turns a vague concern about old systems into a decision the business can act on.
How it works
You know what happens, what we need from you, and what you get back.
01 — Free discovery call
We start with a 30-minute call to understand your systems, your goals, and the context around the work. We use that conversation to decide whether a Health Check is the right starting point or whether another route would serve you better.
02 — Access and setup
You provide access to the relevant systems, repositories, and existing documentation, if any exists. We put NDA and secure access arrangements in place before analysis begins; no code leaves your infrastructure unless that is explicitly agreed.
03 — Analysis
Our senior engineers review the technology stack across code quality, architecture, dependencies, security posture, infrastructure, integrations, and operational processes. Where appropriate, we use AI-assisted tools to speed up documentation and dependency analysis, with human review applied throughout.
04 — Report and walkthrough
We deliver the roadmap, the risk register, and the executive summary, then walk you through the findings in a one-hour session. You can ask questions, challenge assumptions, and discuss what the right next step looks like for your business.
What we assess.
The scope is broad enough to show how risk accumulates across systems, infrastructure, and day-to-day operating practices.
Code quality and architecture
Structure, patterns, technical debt, test coverage.
Dependencies and third-party risk
Outdated libraries, unsupported frameworks, licence exposure.
Security posture
Authentication, data handling, known vulnerabilities, alignment with accepted security practice.
Infrastructure
Hosting, deployment, monitoring, backups, disaster recovery.
Integration points
APIs, data flows, single points of failure.
Compliance alignment
GDPR and sector-specific requirements where relevant.
Operational processes
How changes are deployed, who maintains what, key-person dependency.
Fixed price. Fixed timeframe. Clear deliverables.
£5,000 + VAT
Fixed engagement fee
2 weeks
From agreed access
3 outputs
Roadmap · Risk register · Executive summary
For larger or more complex environments — multiple systems, multiple sites, or unusual integration depth — we scope the work during the discovery call and confirm whether the standard package fits or whether a wider assessment is needed.
ways we protect your access and data.
Access and confidentiality are often the main objections in any external IT audit. The process here is built to settle those questions early rather than late.
See how AI is used and what controls apply →Why this format works for decision-makers.
Clearer than where you started
The value of the Health Check is not that it pushes you into a project. Its value is that it gives you a clearer position than you had before, with enough structure to support a real business decision.
Independent
Some clients use the report internally, some ask us to help deliver the roadmap, and some use the findings to brief another provider. There is no lock-in.
Concrete
You are paying for a fixed-scope technology audit with a roadmap, a risk register, and a board-ready summary.
Practical for SMBs
Many consultancy-led IT audits cost more and take longer; this format is designed to bring decision value into a package that is easier to approve and use.
Frequently asked questions
Everything teams typically ask before booking a Health Check.
What if we already know what needs modernising?
Is £5,000 a lot for an IT audit?
What access do you need?
What happens after we get the report?
Can you audit one system rather than our whole estate?
Do you use AI in the Health Check process?
Named systems
When the Health Check is the safest first step
A Health Check is often the safest first step when your business depends on systems such as SQL Server 2016, Exchequer, Pegasus Opera, Sage, Microsoft Access databases or bespoke legacy software. We publish dedicated pages on the named systems we cover most often.
Not sure if a Health Check is the right first step? Let's talk.
Book a free 30-minute discovery call. We'll discuss your situation and recommend the right next step — a Health Check, a direct modernisation engagement, or something else entirely.