Individual
Vendor Deliverables Audit
Risk removed
Reveals the risk that "delivered as contracted" doesn't match the real code — missing, unfinished or substandard work, checked against the source.
Ends Dec 4, 2026 (Korea time)
Final price in USD. Local taxes are your responsibility.
Inspection scope
- Deliverables audit (contract vs. code)
- Exposed secrets
- Dependency vulnerabilities
- Static security analysis
Evidence, remediation guidance and a digitally signed PDF for the selected scope
Within 2 business days after submission
Required evidence
- Source repository or ZIP
- Contracted deliverables list
Results show found, partial or not found with evidence per item and a pass rate (%) based on automated matching. Acceptance under the contract is the client's decision.
Add-ons
Final price in USD. Local taxes are your responsibility.
Expert opinion — an expert reviews the automated matching and the opinion is included in the report (capped at 4 hours).
Full refund before analysis starts; after it starts, no refund for change of mind (full refund if we fail to issue the report within the turnaround time for reasons on our side).
Who this is for
- Clients who received outsourced development and find it hard to confirm that every feature in the contract was actually delivered
- Situations where someone without a development background has to carry out acceptance review
- Cases where you also want to check the delivered code for security issues
What we check, and how
- Contract deliverables vs. codeEnter the contract deliverables by item (feature, module, API, document, test, deployment) or upload them as a CSV, and we automatically check whether each item actually exists in the code. Adding evidence hints such as code paths or API paths makes the comparison more accurate.
- Security check includedWe also run exposed secrets detection, dependency vulnerability scanning and static security analysis (the same scope as the Security Triple Check).
What the report includes
- Per-item verdicts: found / partial / not found, with evidence
- Pass rate (%) based on the automated comparison
- Security check results (file and line evidence) and a digitally signed PDF
- The final decision on contractual acceptance rests with the client.
How it works
- Upload source code and enter the list of contract deliverables
- Automated comparison and security analysis
- Within 2 business days after submission: report issued
- Optional: Expert Vendor Audit Review, in which an expert reviews the automated comparison results and their opinion is included in the report
Frequently asked questions
How do we enter the deliverables list?
Enter each item's name, type and evidence hint (optional) on screen, or upload a CSV file with the same column order.
Can we make the acceptance decision based on the automated comparison alone?
The automated comparison provides evidence for your decision; the contractual acceptance decision is made by the client. If the decision is difficult, you can add the Expert Vendor Audit Review option.
Is it safe to hand over our source code?
Source code is analyzed only in an isolated, closed-network environment and is never sent to an external LLM. Submitted source ZIPs, repository links and read-only tokens are automatically deleted once the assessment is complete, and the deletion is logged as evidence. If source code leaks through our system, we compensate 100 times the amount paid for that assessment (Terms of Service).
What do we receive?
A digitally signed PDF report that combines a one-page summary for the CEO with file- and line-level evidence your development team can act on directly. The report carries an authenticity-check hash, so it can be submitted to third parties.
Can we get a refund?
You receive a full refund before analysis starts. Once analysis has started, refunds are not available for a change of mind, but you receive a full refund if we fail to issue the report within the turnaround time for reasons on our side.