Platform Risk Scorecard
How risky is your platform, really?
Ten quick questions on how your platform is built, shipped and run. You'll get a risk score, your top three risks and what to do about them. It takes about three minutes and you don't need to sign up.
What the scorecard covers
The scorecard looks at the ten areas that most often turn a working platform into an expensive problem. Each question has four answers, from a well-run setup to a serious gap, and your score is calculated from all ten.
- Code ownership and access: Who controls your source code, cloud accounts and domains?
- Deployment process: How does code get to production?
- Automated tests: How much of your platform is covered by automated tests?
- Security and secrets handling: How are secrets (API keys, database passwords, tokens) managed?
- Observability and incident response: If something breaks at 2am, what happens?
- Scaling headroom: What would happen if your traffic or data doubled next month?
- Key-person dependency: If your most knowledgeable engineer left tomorrow, what would happen?
- AI-generated or vibe-coded code quality: How much of your codebase was generated by AI tools or built quickly without senior review?
- Tech debt and delivery speed: How has delivery speed changed over the last 12 months?
- Documentation: Could a new senior engineer get productive from your documentation?
Why these risks matter
Platforms rarely fail because of one dramatic event. They fail because small gaps pile up: nobody outside one engineer understands the deployment, secrets live in a shared document, tests cover the easy parts, and AI-generated code ships without senior review. Each gap is survivable on its own. Together they slow delivery, raise the cost of every change and make outages more likely and harder to recover from.
The same gaps matter before you add AI. A model is only as dependable as the platform that feeds and serves it, so ownership, observability and a repeatable deployment process come first.
What you get at the end
You see your overall risk band straight away, your three highest-risk areas and practical next steps for each. Your answers stay in your browser unless you choose to have the report emailed to you.
If the result raises questions, book a free 30-minute call with a senior engineer. We will talk through your answers and tell you honestly what we would fix first, even if that work is not something you need us for.