Independent code quality audits
Know how your code scores, then what to fix first
Start with a free public evaluation of one public GitHub repository: a score out of 100, six axes graded from 1 to 10, finding counts and a badge for your README. The repository's owner also receives an extract of the audit report.
Whether people or AI agents wrote the code.
The full audit report is optional, delivered privately, with one follow-up verification.
Evaluations cover public GitHub repositories. For private code, talk to us.
Public evaluation: github.com/arhuman/kwalitai
Metrics only. The audit report of the same review holds each finding with its location, its cause and a recommendation.
85/100
- architecture 9/10
- performance 8/10 weakest axis
- consistency 8/10 weakest axis
- security 9/10
- documentation 8/10 weakest axis
- correctness 9/10
Findings by axis
| Axis | tool-detectable | found by review | check gaps |
|---|---|---|---|
| architecture | 0 | 0 | 0 |
| performance | 4 | 0 | 0 |
| consistency | 0 | 0 | 2 |
| security | 0 | 0 | 2 |
| documentation | 0 | 0 | 0 |
| correctness | 0 | 1 | 0 |
Free evaluation, optional audit report
Each review produces a free public evaluation. The full audit report is optional and paid. They do different jobs.
| Aspect | Evaluation (free) | Audit report (490 EUR) |
|---|---|---|
| Purpose | Follow a repository over time | Understand the code and decide what to fix |
| Content | Metrics: a score out of 100, six axis grades, finding counts | Every finding explained, recommendations in priority order, and the same metrics |
| Visibility | Public | Delivered privately: it describes weaknesses, some of them exploitable |
| Form | A repository page and a README badge | A report delivered to you |
Evaluations are published by default. The owner of a repository can ask for its evaluation to be removed through the contact form.
Fix the weakest area first
Each axis is graded from 1 to 10, and the score is capped by the weakest one: a repository cannot hide one poor axis behind five good ones. See what the six axes measure.
See what your tools miss
Every defect is classed as tool-detectable or found by review, and the quality checks your project is missing or not running are counted apart.
Examples of what audits find: missing HTTP server timeouts, database queries inside loops, CI actions pinned by tag instead of commit, complexity limits set one step too loose.
Read change honestly
A change between two evaluations is shown as a number only when both used the same method. Otherwise the page says the method changed instead of comparing unlike things.
The audit report
- Every finding with its location, its cause and its class: what a tool can catch, what only review finds, and the checks your project is missing.
- Recommendations in priority order.
- Six axes graded from 1 to 10: Architecture, Performance, Consistency, Security, Documentation, Correctness.
Optional, for one public repository: 490 EUR. The price includes one follow-up verification after your fixes. The report stays private because it describes weaknesses, some of them exploitable. See the audit offer.
A score you can recompute
The score out of 100 comes from the axis grades by a published rule, and is always shown with the commit and the method that produced it. Read the method.