Scorchsoft
Free self-report check

How well do you understand your app's risks?

The App Risk Check is a free self-report assessment of ownership, reliability, release confidence, recovery and support. Get a score, concerns or uncertainties to verify, and practical next actions. It does not inspect code or certify that an app is safe.

3–5 minutes. Free report by email. No account required.

IllustrationFive areas to verify through your answers. An illustration, not an inspection result.

Trusted by 220+ organisations

acm logo
bare logo
binding-site logo
gapped logo
eca logo
hayley logo
image-approvals logo
lime logo

Sample report

See what needs investigating

Illustrative example values. Higher scores show more reported concerns or uncertainty. The check uses your answers; it does not inspect code or certify production readiness.

50/100
Reported App Risk
Important concerns or uncertainties

Example score

Ownership &accessReliabilityReleaseconfidenceRecoveryarrangementsSupportavailability
  • Ownership & access50/200 · Low Risk
  • Reliability100/200 · Moderate Risk
  • Release confidence150/200 · Moderate Risk
  • Recovery arrangements150/200 · Moderate Risk
  • Support availability50/200 · Low Risk
“A recovery plan that has not been tested deserves investigation, even when other areas score well.”
Start the free App Risk Check

Takes about 3–5 minutes · Free · No account needed

Five areas that shape your next decision

Can you control it?

Confirm access to source code, rights and critical accounts. Know who can help when something changes.

Can you change and recover it?

Check release testing, rollback, backups and recovery evidence before relying on assumptions.

Can you support it?

Identify monitoring, recurring incidents, support availability and knowledge that depends on one person.

Choose the check that matches your question

Free App Risk Check

  • IncludedBased on what you know and can verify about the app.
  • IncludedA short score and practical questions to investigate.
  • IncludedUseful before deciding on support, fixes or a technical review.

Unknown answers raise the score because they need checking. They do not prove a code defect.

Paid code audit

  • IncludedEngineers inspect the agreed codebase and supporting setup.
  • IncludedA findings report, prioritised remediation and a sprint range.
  • IncludedStandard assessment: £3,000 + VAT, with scope agreed first.

How the App Risk Check works

1

Answer for the app as it is today

Ten questions cover five scored areas. Three further questions provide unscored context about your next decision, timing and budget.

2

Get your report

Provide your email at the end to receive the score and answer-specific actions. The report can be shared, so leave confidential details out.

3

Verify, then choose the next step

Check unknowns with the relevant owners. If you need technical evidence, explore a scoped code audit; if you need ongoing help, discuss support.

Already need an engineer to inspect the code?

The self-report check is optional. Request a free initial skim to establish whether a paid code audit would be useful.

App Risk Check questions

No. The score only summarises your answers. It does not inspect code, test security, confirm compliance or certify production readiness. Serious issues can exist even when you report few concerns.

An unverified control is something to investigate before relying on it. The score highlights uncertainty; it does not claim that the control is missing or that the app has a defect.

An app owner, product lead, operations leader or someone responsible for an existing web or mobile application. If you do not know an answer, use 'Not sure' and verify it with the relevant person.

No. The check needs no code upload or repository access. Do not paste passwords, credentials, personal data or confidential details into an enquiry. Access for a technical audit is arranged separately.

The check and report are free. Enter your email at the end to receive your results. You can use the actions with your own team; completing it does not commit you to a paid service.

Check what you know about your app

A short self-report check, followed by practical actions to verify with your team.