What the audit actually is
The audit reads the store as it is, no fixes along the way. I go through four areas, from server response time to checkout settings, and next to every finding I write what to do about it. You get a substantial report, the fixes in order and a call about the results.
- 01
Performance
How fast the store responds, where it loses time and what to do about it.
- Server response time and Core Web Vitals on product, category and cart pages
- Database queries and data loaded on every visit
- Background jobs and caching
- 02
Security
Whether the store has known holes, who can get in and whether there is a backup to restore from.
- Core, plugins, theme and PHP against published vulnerabilities
- Administrator accounts and backups
- Files and folders visible from outside
- 03
Store configuration
Whether the checkout works from product to confirmation and what turns orders away.
- A test order from cart to confirmation
- Guest checkout, shipping cost, number of steps, the cart on a phone
- E-mails, taxes, shipping, payments, the 30-day lowest price
- A month of tracking, click maps, session recordings, abandoned carts*, Extended variant only.
- 04
Housekeeping
What has piled up over the years and how much of it slows or exposes the store.
- Plugins unused or abandoned by their authors
- Database size and tables that keep growing
- Error logs
Two variants, one report
Basic reads the store from the inside, admin and server. Extended adds a month of tracking what customers actually do before they abandon the cart.
- Variant 01
Basic
560 EURnet, one-offWhat kind of storeA store that sells, but nobody has looked under the hood since launch. The owner wants to know what holds sales back.
What you getA review of the four areas, a test order, a substantial report with the fixes in order and a call about the results.
What I install in the storeNothing. A read with no changes to the store.
- Variant 02
Extended
1,020 EURnet, one-offWhat kind of storeA store with traffic where customers reach the cart and vanish, and the settings do not explain why.
What you getEverything in Basic plus a month of tracking, that is click maps, session recordings, the path from product to order and abandoned carts. The report follows the month.
What I install in the storeOne tracking script for the month, removed afterwards.
- Net prices, one-off, for one store.
- Tracking in the Extended variant runs on a free tool, in line with the store's cookie policy.
What the price covers, and what it does not
A substantial report with findings in four areas, opening with a summary for the owner on page one.
A list of what to fix, in order. From what costs orders or invites a break-in down to cosmetics.
Next to every finding, what to do about it, concrete enough for any contractor to quote from.
A test order from cart to confirmation, cancelled after the test.
Core, plugin, theme and PHP versions checked against published vulnerability sources.
A call about the results once you have read the report, and a quote for the fixes if you want me to do them.
Any fix at all, however small. The audit is a diagnosis, and fixes are a separate job quoted from the list.
Implementing the recommendations. As a separate project with a quote, or as the onboarding setup of the care plan.
Penetration tests and break-in attempts. I read versions and settings and do not attack the store.
SEO, content, advertising and sales analytics audits.
Stores outside WooCommerce. Shopify, PrestaShop and IdoSell have a different back end, so that is a separate conversation.
The scope is closed and, apart from the month of tracking in Extended, the same in both variants. I agree and quote work outside the list before it is done.
An audit is a diagnosis, not a repair
days to start care with the onboarding setup included in the audit price
During the audit I fix nothing in the store, even when the fix would take a minute. You get the store in the same state and a report that says what to change in it.
You can take the report to any contractor or have me do the fixes, quoted from the list.
If you start care within 30 days of the audit, that is the monthly retainer for updates and backups, the onboarding setup (worth up to 280 EUR) is included in the audit price. That is the only discount there is.
A review of the store and the report, no fixes along the way.
You choose what to fix, when and with whom.
A separate job quoted from the list, with me or with another contractor.
How it works, from start to finish
Three steps from your enquiry to the call about the results.
Call, contract and access
You get in touch in any form and we set up a call. On it we settle the variant and the details, then the contract. After that you set up an administrator account for me and hosting panel access.
Reading the store
I go through the four areas and the checkout. In Extended a tracking script runs for a month, then I remove it.
Report and call
You get a substantial report with the fixes in order. Once you have read it, we talk through the results and, if you want, the quote.
What I need from you
- Access
- A separate administrator account for the audit and hosting panel access with administrator rights.
- Test order
- Consent to one order from cart to confirmation. I cancel it after the test and it does not count towards your sales.
- The call
- Whoever makes the decisions about the store, on the call once the report is read. Without them the list stays on paper.
Who this is not for
A store still being built
The audit reads a store that already sells. A new store is a project with a quote up front.
A store that has outgrown WooCommerce
If the engine itself is the problem, not its settings, we talk about a rebuild on a headless stack, not about a list of fixes.
A store on Shopify, PrestaShop or IdoSell
A different back end and different settings. That is a separate conversation, outside this audit.
The audit is one product, not everything I do. New features, integrations with company systems, apps and stores from scratch are projects with a quote.
Let's start with a conversation.
Every project starts with a first conversation. We sign a contract only once both sides know this collaboration makes sense.
Your data is secure and will not be shared with third parties