Frequently asked questions
Straight answers to what people usually ask first. Can't find yours? Ask me.
Getting started
What kind of applications do you work on?
Large, old or neglected PHP applications, typically custom-built or framework-based systems that have been developed for 10, 15, 20 or more years and that businesses now depend on.
Do I need to know what's wrong?
No. If an old application has become important, risky or difficult to understand, that's enough to start. Contact
Do I need documentation or tests?
No. Starting with neither is normal. Building the safety net is part of the job.
What if I don't know where it's hosted, or have lost the source code?
It's more common than you'd think, and often recoverable. Legacy application takeover
The developer has left. What now?
That's a very common starting point. What I do in a takeover
Rewrite, refactor or upgrade
Do I need to rewrite my application?
Usually not. A rewrite is expensive and risky, and can lose years of embedded business logic. Most applications can be stabilised, secured and upgraded in stages. I'll tell you honestly if replacement is the right answer. Rewrite vs refactor vs upgrade
Is old software automatically unsafe?
No. But running unsupported software indefinitely creates growing security and operational risk. PHP upgrades
Which PHP versions are still supported?
Check the current dates at php.net. At the time of writing, PHP 8.1 and earlier are end of life, 8.2 ends security support on 31 December 2026, and 8.3 onwards are supported. Full table
Cost and terms
How much do you charge?
Prices are published: assessments from £2,500, £950 per day for direct work, urgent work from £1,300 per day, agency work from £1,150 per day, and ongoing care from £2,000 per month. All exclusive of VAT. Full pricing
Do you offer fixed prices?
Yes, wherever scope is clear. Assessments are always fixed-price, and upgrades and fixes are quoted fixed-price once I've seen the system.
Why do you recommend an assessment first?
Because I can't honestly quote for a system I haven't seen. The assessment gives you a reliable plan and price, and you can use it with anyone.
Do I have to hire you after the assessment?
No. The report is yours.
Why don't you bill by the hour?
AI has made much of the work faster, and you shouldn't pay for time that's no longer spent. Defined work is priced on outcome and risk. Pricing
AI
Do you use AI on my code?
Yes, to speed up analysis, documentation and investigation, and always with human review. You can opt out. How I use AI
Is AI-generated code reliable?
Not on its own. Every significant change is understood, reviewed and tested before it reaches your live system.
How much faster is it really?
It varies. Tracing bugs and documenting systems can be dramatically faster. Other parts of a project aren't. I'll tell you where the saving is real for your system.
Will my code be used to train AI models?
No. I don't train models on client code. Details
Security and data protection
Is running an old PHP version a GDPR breach?
Not automatically, but it's difficult to defend as "appropriate" security, especially for sensitive data. Take legal advice for your own situation. Data protection and security
Can you make us Cyber Essentials compliant?
I can't certify you, but I can fix the technical issues that cause failures. Security audit
We've been hacked. What should we do?
Preserve evidence, limit the damage, and get in touch. You may also have legal reporting duties within 72 hours. Hacked site cleanup · Tel: 03333 20 97 97
Do you provide legal advice or act as a Data Protection Officer?
No. I provide technical engineering and security remediation.
How do you handle access to our systems?
Least privilege, read-only where possible, secure connections, and removal at the end. NDA and data processing agreement on request. How I work
Working together
Do you work with agencies?
Yes, white-label, as overflow support, or by referral, on clear terms. Agency partnerships
Where are you based? Do you work remotely?
Near Bristol and Bath. Most legacy work is remote, so I work across the UK and with organisations in France and Spain.
How quickly can you start?
It depends on my availability and how urgent the problem is. I'll be honest about timing on the first call.
Will you work on our live system?
Not unless it's necessary. I work on copies and staging, and production changes are planned, tested and reversible.
What if something happens to you?
Everything I learn about your system is documented, so you're never dependent on me. How I work
Still not sure?
Tell me what you've inherited. The first conversation is free.