Skip to main content

Service · Software Project Rescue & Takeover

Stalled software project?Take back control.

An unfinished app, an agency that stopped answering, a codebase nobody on your side can run. We take it over in an order that keeps you in control: access first, diagnosis second, fixes third.

Most rescue conversations start the same way: "We paid for a product, it is almost done, and now we are stuck." The team that built it is gone or slowing down, every change breaks something, and you are not sure what you actually own.

The first thing we do is not write code. It is to establish who holds every account, what runs where, and whether the product can be built from what you have. Then we write down what we found, what it means and what we would do first — and you decide the next step with a document in hand, not a sales pitch.

01 / Situations

Five ways a project ends up here

The code can be good, bad or unknown. What these situations share is that responsibility has to move, and nobody has written down what is being handed over.

  • 01
    The agency or freelancer stopped delivering
    Deadlines slip, answers get shorter, invoices keep arriving. You need a second opinion on the code and a plan to move it without losing what was built.
  • 02
    An unfinished app you need to launch
    The product is "90% done" and has been for months. The remaining 10% is usually the part nobody scoped: edge cases, payments, store submission, operations.
  • 03
    A live product that breaks on every change
    Users are on it, revenue depends on it, and every release introduces a new incident. Stabilization has to happen in flight, without a freeze.
  • 04
    The internal team left
    One or two developers held everything in their heads. The code is yours, the knowledge is not. The takeover is mostly recovery and documentation.
  • 05
    A business decision to switch vendors
    Cost, time zone, team size, or simply trust. The product works, there is time, and the transition can be planned — which is exactly when the checks tend to get skipped.

02 / Fit

Who this is for, and who it is not for

A good fit when

  • There is an existing product — in production or close to it — and a business reason to keep it alive.
  • You can give us read-only access to the code and infrastructure, or arrange it with the previous team.
  • You want a written assessment before committing to a longer engagement, and you are prepared to hear "rebuild" if that is the honest answer.
  • Someone on your side can sign off on ownership transfers: cloud account, domain, app-store accounts, payment provider.

Not the right fit when

  • You need a quote for "finishing the app" without anyone looking at the code. We do not price what we have not seen.
  • The goal is a legal dispute with the previous vendor. We document what we find; we are not expert witnesses and this page is not legal advice.
  • The product was built with AI tools and the question is specifically about AI-generated code quality — that has its own page.
  • The system runs on a technology stack that is end-of-life and the question is modernization rather than responsibility — that also has its own page.

03 / Access audit

Step one: access and ownership, before any fix

A fix that depends on a password held by someone who has left is not a fix. The audit produces one table: every asset, its registered owner, who actually has access, and its status.

  1. 01

    Inventory

    Code repositories, environments and servers, databases and backups, domain and DNS, app-store accounts and signing keys, third-party services and API keys, secrets, work tools, contracts and licenses.

  2. 02

    Registered owner versus actual access

    For each row: whose name is the account in, and who holds the credentials. "Unknown" is acceptable at the start of the inventory and unacceptable at its end.

  3. 03

    Transfer and rotate

    Accounts registered to the previous team move into your organization. Passwords and keys are rotated at an agreed time with a rollback plan, so a service that stops after a rotation can be restored.

  4. 04

    Clean build and backup restore

    The product is built from the repository on a clean machine and compared with production; the latest backup is restored into a test environment. Gaps between what runs and what you hold are the first findings.

04 / Assessment deliverables

Step two: a written diagnosis you can act on

The assessment is a deliverable in its own right. If you decide to continue with another team, this is what stays with you.

  • System map
    Which components exist, how they talk to each other, what runs where, and which external services are involved — including anything running in production that is not in the repository.
  • Ranked findings
    Each finding with severity, user impact and an effort estimate: critical, important, livable. Not a list of two hundred issues — an order of work.
  • Asset and access table
    What is registered to whom, what was transferred, what is still open. The document that prevents the "who has the password" question a year from now.
  • Keep, refactor or rebuild — with reasons
    A recommendation and a proposed first phase. If rebuilding is the honest answer, we say so and point you to the right service; it is our second choice, not our default.

05 / Stabilization

Step three: stabilize in priority order

Only after ownership is yours and the diagnosis is written does the code change. The order is set by the findings, not by what is easiest to show.

  1. A first, small, non-critical change goes all the way through: code, test, deploy to production. If the deployment path does not match the documented process, the process is fixed before the next change.
  2. Security and data integrity first: exposed secrets, missing authorization checks, backups that have never been restored.
  3. Stability second: the incidents users actually hit, with tests that stop them from coming back.
  4. Then the unfinished scope — specified in writing, estimated against the diagnosis, and shipped in sprints with a version you can open after each one.
  5. Documentation and a handover record are written as we go, so the product does not depend on us any more than it depended on the previous team.

06 / The decision

Keep, refactor or rebuild: how the decision is made

Four signals, read from the diagnosis. Upgrading is not always rebuilding: sometimes one component is replaced and the rest stays.

The same signals we use in the takeover checklist. The recommendation is written with reasons so it can be challenged — by you or by a second opinion.
SignalPoints to continuing on what existsPoints to a refactor or rebuild
Critical findingsFixable locally without touching the structureStem from the structure itself and recur in every component
DependenciesMaintained, or updatable incrementallyThe core relies on technology that is no longer updated
Cost of changeA small change stays small once the new team knows the codeEvery change touches many parts and requires retesting everything
Business needsThe product does what the business needs; improvements are missingThe business has changed and the product assumes a process that no longer exists

07 / Scope

What a rescue includes, and what is a separate project

This boundary is what prevents surprises on the invoice. The table describes the typical division; the exact scope is written in your proposal.

Type of workAssessmentRescue and stabilizationSeparate project
Access and asset auditIncluded — this is where it startsKept current throughout—
Written diagnosis and recommendationIncluded — the main deliverableUpdated as findings change—
Ownership transfer and credential rotationPlannedIncluded — before the first change—
Security and stability fixesListed and rankedIncluded — in the order set by the report—
Finishing unfinished scopeEstimatedIncluded when specified in the proposalLarger scope is priced and planned separately
New features—Not included — opened as a scope extensionYes — priced and planned separately
Ongoing maintenance and incident response—Basic monitoring set upA maintenance agreement with its own scope and response times
Architecture rewrite or technology replacementRecommended or not, with reasonsOnly if the report concludes there is no alternativeYes — with its own migration plan

What ongoing maintenance includes after a rescue, and how to budget for it, is covered in a separate guide.

What app maintenance includes and how to budget for it

08 / Risks

Risks we name up front

  • Production may not match the repository
    If the code running for users differs from the code you hold, that is the single most important finding of the takeover — and it can mean the first weeks go to recovery rather than features.
  • The previous vendor's contract
    If accounts or the code are registered to the previous vendor, the transition starts with ownership transfer, and sometimes that means invoking the contract. We document; your counsel advises.
  • Unknowns are documented, not assumed
    When the previous team is unavailable, questions that cannot be answered become listed risks with a mitigation, not guesses that surface later as incidents.
  • No timeline before the audit
    We do not quote a duration for a rescue before the access audit and clean build. What we do fix in advance is the order of stages and the conditions for moving between them.

09 / Why us

Why Onezero Labs

  • We build products ourselves
    The people who assess your codebase are the people who design, build and run systems in production. The diagnosis is written by engineers who would have to live with it.
  • Access first is a discipline, not a slogan
    No change to the code before ownership is yours and a clean build exists. It is slower in the first week and faster in every week after.
  • A document you can take elsewhere
    The assessment is yours whatever you decide next. If the honest recommendation is a rebuild, or a different partner, you hear it from us.
  • Led from Miami, in U.S. hours
    Decisions, scoping and reviews happen with leadership that works U.S. hours; one accountable team handles product, design, engineering, QA and DevOps.

10 / Do it yourself

Start with the checklist, even before you talk to us

The same asset table, pre-acceptance checks and staged transition plan we use, as a guide and a template you can fill in for your own product.

The full guide explains each stage: what to receive, what to verify before accepting responsibility, how to plan a staged transition, and how you know the handover is complete.

Moving to a new development vendor: what to receive, verify and hand over

FAQ

Frequently asked questions

Let's talk

Send us what you have.

Read-only access or a short description of what is stuck, and who holds which accounts as far as you know. We come back with what we would check first and what an assessment would cover — in writing.

Access first. Fixes second.