How we start: an audit
We do not guess. We ask for read access to the code, the deployment setup and, where possible, monitoring and slow-query data. We then run the app, profile it and read the database schema. You receive a written findings list ordered by impact and effort, so you can decide what to fix first.
Where tenancy is part of the problem, we also review how customer data is separated, linked to multi-tenant architecture. We sign an NDA on request before seeing your code.
