360° Tech Audit

A 360° tech audit is a 15-hour, fixed-scope review of a startup's architecture, security, delivery process, team, and infrastructure costs, delivered as a scored report and a 90-day roadmap.

I take one per quarter, alongside my full-time work as co-founder and CTO of Togethrust, a French-regulated fintech. The cap is the point: it keeps the work senior and the attention undivided.

Three situations this is built for

Any software company. The five areas below apply whatever you build; the regulated end is simply where my background goes deepest.

The 360°

Five areas, reviewed in one pass, so the findings connect to each other instead of arriving as five separate opinions.

✓ Architecture & scalability ✓ Security & compliance posture ✓ Delivery process & CI/CD ✓ Engineering team & organization ✓ Infrastructure costs

Three deliverables, nothing vague

Scored written report

Each of the five areas scored, with the evidence behind the score. Written to be forwarded to a board or an investor without translation.

Prioritized 90-day roadmap

What to fix first, what can wait, and what to leave alone. Ordered by risk and effort, not by what is most interesting to build.

90-minute restitution

One working session with the founding team to walk the findings, argue with them, and agree on what happens next.

15 hours over 3 weeks

Fixed scope and a hard time-cap. I scope the depth to fit the box rather than letting the box grow.

Access on day 1

You provide repository, infrastructure, and documentation access at the start. Time spent waiting for access comes out of the 15 hours.

Review

I work through the five areas, reading code and configuration directly and interviewing the people who own them.

Report

Scores, evidence, and the 90-day roadmap, delivered in writing before we meet so you read it without me in the room.

Restitution

A 90-minute session with the founding team. After that the engagement is closed, unless you ask for something more.

Why my read is worth having

18+ years in engineering across 5 countries, most of it on regulated banking infrastructure: trading systems and core banking. Today, CTO of an ACPR-supervised fintech. Past clients include BNP Paribas, Société Générale, Crédit Agricole, Desjardins, and EDF.

35%

Cloud cost reduction

Roughly 180K CHF per year, from right-sizing infrastructure and moving non-critical workloads to spot instances.

→ Crypto bank, Zurich
3 days

Delivery time, down from 2 weeks

CI/CD pipeline overhaul and process streamlining on a regulated platform.

→ Crypto bank, Zurich
96%

Product activation, up from 24%

Measured after a full rebuild of the product, as co-founder and CTO.

→ Togethrust, Paris

Audit case studies are published with client approval as engagements complete.

I take one audit per quarter

Tell me about your company. If an audit is not the right answer for you, I will say so.

Fixed scope • 15 hours • Scored report and 90-day roadmap

Tell me about your company →

Or write to me at khaled.souf@gmail.com