Chris HennigfeldFractional CTO
Menu

Scale Readiness Review

“What breaks when we grow, and what will enterprise customers look for?”

Your product works for today’s customers. Now you want to be sure it holds up for an enterprise client or ten times the users.

Who it’s for

You’re a good fit if you…

  • are in talks with your first enterprise customer
  • are planning a funding round or a big growth push
  • see slowdowns, outages, or rising cloud costs as usage grows

Probably not a fit if you…

  • need a SOC 2 report or an ISO 27001 certificate itself: only an audit firm issues those, and I help you prepare for them
  • haven’t launched yet: the Launch Readiness Review fits better

What you get

  • A hands-on check of the areas you choose: infrastructure, code, process, or security
  • A written report with findings ranked by severity: what holds up, what breaks first, and the risks
  • A plan for what to fix first, with effort estimates
  • A walkthrough call and answers to follow-up questions for two weeks

How it works

Two to five weeks, from the discovery call to the report.

  1. Discovery call

    Free

    We talk about what’s coming up, what worries you, and which areas matter most.

  2. Fixed quote

    Within two working days

    A fixed price and a timeline, based on the areas you choose.

  3. Review

    Two to five weeks

    I look at your setup, code, and process with read access to your real systems, and talk to your team.

  4. Report and walkthrough

    Right after the review

    You get the written report and a plan for what to fix first, then we go through it on a call. I answer follow-up questions for two weeks.

Choose your areas

One, two, or all four, depending on what matters for your next step.

  • Infrastructure and data safety: whether hosting and costs hold up at ten times the load, and whether your data is stored, backed up, and recoverable the way it should be
  • Code and architecture: where the product breaks as complexity and usage grow, and which parts weren’t built to be extended
  • Development process: whether the way your team plans, tests, and releases still works when the team and its output grow
  • Security and privacy: who can see what, down to each record and across customers, and what enterprise customers, SOC 2, or GDPR will require

One area

From €3,500

From 2 weeks

A focused, in-depth review of the area that matters most right now.

Two areas

From €5,500

From 3 weeks

A broader review, with two areas covered in depth.

Full review

From €7,500

From 4 weeks

All four areas, for a complete picture before a big step.

Example

Real client work. Outside the case studies, client names are left out for confidentiality.

SiteOwl: from “trust us” to a SOC 2 report

Physical security SaaS, US, 2023

As SiteOwl moved toward larger customers, more and more prospects asked for a SOC 2 report before trusting SiteOwl with their data. I led the technical side of SOC 2 readiness, while SiteOwl’s Chief Product Officer ran the organizational side, with a compliance platform guiding the steps. That meant tightening the AWS network setup, turning the recovery and incident response plans into playbooks rehearsed in dry runs, and working with the penetration testers on the first external test. They found no serious gaps; we addressed what they flagged, and the fixes were retested and confirmed. SiteOwl’s offshore development team handled the work as ordinary tasks in its regular sprints.

SiteOwl completed SOC 2 Type 1, a point-in-time check, about six months after starting, and Type 2, which covers months of evidence, later the same year. From then on we renewed the report every year with an external auditor. Prospects and customers, including Fortune 500 companies, got an independent auditor’s report instead of just a promise that their data was safe.

Read the case study
“During our sprint planning and review processes, Chris consistently demonstrated an exceptional ability to translate complex business requirements into clear, actionable technical plans. … One of his greatest strengths is his ability to keep a comprehensive mental map of the entire product, anticipating the ripple effects of changes and ensuring long-term stability.”
Daniel Matthewson, Director of Product Management, SiteOwl

Common questions

Which area should we start with?

The one closest to your next big step. An enterprise deal usually points to security and privacy, growing usage to infrastructure or code and architecture, and a team that keeps missing dates to the development process. We pick together on the discovery call.

Do you need access to our production systems?

Read access, yes: hosting, monitoring, and the code, plus conversations with your team. I don’t change anything, and we agree on access that fits your security rules before the review starts.

Will this make us SOC 2 or GDPR compliant?

It prepares you for compliance. You’ll know what an enterprise customer or an auditor will look for, where your software stands, and what to fix first. A SOC 2 report or an ISO 27001 certificate comes from an audit firm; GDPR has no certificate, and legal questions go to a lawyer.

Can you help with our customer’s security questionnaire?

The review is general preparation: you’ll know where you stand before the questions arrive. If a questionnaire is already on the table, I’m happy to help with specific questions during the review. For questionnaires as they come in, ongoing support covers it.

Do we need this package or the Launch Readiness Review?

This one is for a product that’s already running and growing, where you keep building on what’s there. It goes in depth into the areas you choose. If you’re still preparing a launch, or opening an MVP or a soft launch to a wider audience, the Launch Readiness Review fits better: it looks at the whole product, broadly.

What happens after the review?

You decide. Your team can work through the plan on its own, using the report as its to-do list. I’m happy to help with that too. For larger efforts such as SOC 2 readiness, I can lead the technical side as part of ongoing support, and half the review fee counts toward it if you start within two months.

What does your next stage need?

Tell me where your product and your team are heading. In a free call we look at what needs attention first and whether a review, a hire, or ongoing support fits.

Book a callSend a message