--- title: "Laravel code audits and reviews - Spacestar Digital" description: "Inherited a Laravel or Statamic codebase? We review security, performance, tests and upkeep, then list what's required, recommended and optional." url: https://spacestar.digital/services/code-audits/ generatedAt: 2026-11-12T10:48:31.357Z --- # Laravel code audits **Gone code-blind? We'll take a look.** We'll review your Laravel or Statamic codebase and give you a written list of what's required, what we'd recommend and what's optional, each with a rough time against it. An audit is for when you need to know where a codebase stands before you spend more on it. You might have inherited it from a developer who's moved on, be an agency taking on a client's site or be weighing up whether to fix what you've got or start again. It also suits teams who've been close to their own code for so long that they've stopped seeing it, and want someone outside to check their thinking before a big change. ## What we check * ### Security Packages with known vulnerabilities, how logins and permissions are handled, exposed settings and secrets, and whether forms are protected from spam and abuse. * ### Upkeep Which versions of PHP, Laravel or Statamic you're on, how far behind the packages are, and what an upgrade would involve before support runs out. * ### Code quality Static analysis with PHPStan, plus a read through the parts that matter most, looking for code that's hard to follow, duplicated or likely to break when it's changed. * ### Tests and deploys Whether there are automated tests and what they cover, how code gets from a developer to the live site, and whether there's a staging site to check changes first. * ### Performance Slow pages and database queries, caching, and jobs that should be running in the background rather than making visitors wait. * ### Accessibility For the front end, automated scans plus a check of keyboard use and contrast against WCAG 2.1 AA. ## What you get A written report in plain English, sorted into three groups. **Required** covers things that are a risk now, such as a security hole or an unsupported PHP version. **Recommended** covers things that will cost you more the longer they're left. **Optional** covers improvements that would be nice to have. Each item has a rough time against it, so you can plan and budget, and we'll go through it with you on a call. You can have us do the work, give the list to your own developers, or a mix of both. ## Audits we've done For a specialist insurer, we assessed the Statamic site we'd built for them in 2024 against a Silktide accessibility scan in October 2026. We then fixed what it found, including colour contrast, focus outlines, tap target sizes, the skip link, the cookie banner, mobile tables and the PDF reports, and checked the results against a fresh scan. We've also reviewed a restaurant software platform for an agency partner and carried out a performance audit for a direct client. Most of our audits are for agencies and their clients, and those stay private. ## How it runs We need read access to the code, and to the hosting if that's part of the question. After a first look we'll tell you how many days the audit should take, based on the size of the codebase, and agree that upfront before we start. We'll flag the security problems we find in the code. If you need a formal penetration test for compliance, we'll point you to a specialist who does them. We review Laravel, Statamic and the front end that goes with them. If your project is built on something else, tell us what it is and we'll say whether we can help. If the audit leads to a rebuild, there's more on our [Laravel development](https://spacestar.digital/services/laravel-development/) page, and if it leads to regular upkeep, see [support and hosting](https://spacestar.digital/services/support-and-hosting/). ## Your next project deserves better. Hi. Tell us what you’re building and we’ll come back with some questions, a rough idea of cost and how we’d approach it. [Start a project ](https://spacestar.digital/contact/) [hello@spacestardigital.com ](mailto:hello@spacestardigital.com)