Independent web consultancy
Find out what’s actually wrong.
Security, UX, performance, and the bugs your team has already lost a fortnight to. Fixed scope, fixed price, written down.
Start at £5.
Three automated reviews, no human in any of them, and no call to book. The first lands in your inbox within minutes, and every report says on its first line exactly what it is.
Automated Scan
£5
Minutes
A machine-generated report on the handful of things a machine can check without guessing. No human reads it — which is exactly why it costs £5 and arrives in minutes.
Automated Review
£20
Scan in minutes, the rest within one working day
The scan, plus an automated read of the pages a visitor actually lands on. Still no human — a machine finds the obvious things fast and tells you which to fix first.
Automated Deep Review
£50
Scan in minutes, the rest within one working day
The review, run across the whole public site rather than the front door — every page, and the flows that matter: signing in, checking out, sending a form. No human reads it, which is what keeps it at this price.
Every finding ranked, reproducible, and in writing.
Not a scored checklist, and not a scan you could have run yourself — a document your engineers work through and close out.
Four things, done properly.
I’d rather be genuinely useful in a narrow band than adequate across everything.
Security
Auth, injection, dependencies, and the way secrets move through your stack.
Every finding reproducible, ranked by what an attacker actually reaches.
UX & UI
The flows that decide whether people finish or leave.
Heuristic review, WCAG 2.2 AA, and a fix list sequenced by effort against impact.
Performance
Why it's slow. In specifics, with the offenders named.
Field and lab data, the render path, the payload, and the queries behind them.
Hard bugs
The intermittent one nobody on your team can reproduce.
Root cause written up in full, plus a minimal reproduction you keep forever.
For when it needs a person.
Fixed price, paid up front, booked into the schedule the moment it clears.
Fixed scope
Security Audit
£1,800
A full pass over your application's attack surface — authentication, authorisation, injection, dependencies, headers, and the way secrets move through your stack.
- Written report, findings ranked by exploitability and blast radius
- Proof-of-concept for anything I claim is exploitable
- Concrete remediation for each finding, not just a CVE number
- A 60-minute walkthrough call with your engineers
Monthly retainer
Plus Retainer
£1,500/month
Everything in Essential, with hands on keyboard. For teams shipping continuously who want a second pair of eyes that can also fix things.
- Up to 20 hours a month, including implementation
- Priority response within one working day
- A quarterly security and performance re-audit at no extra cost
- Direct access over your team's own channel
No surprises, at any point.
- 01
A short call
Thirty minutes, free. I tell you honestly whether I'm the right person.
- 02
A fixed quote
Written scope, fixed price, fixed date. No hourly meter.
- 03
The work
You see findings as I find them, not in one dump at the end.
- 04
The handover
A report your engineers can act on without me, and a call to walk it through.
Who you’re dealing with.
I’m Kay Metodiev, and I do the work — all of it. There are no account managers, no juniors working under a senior’s name, and nothing is outsourced. The person you email is the person who reads your code.
Kay Konsulting Limited is the company I trade through, registered in England and Wales. It is the party you contract with and the name on the invoice, which is why the terms and the NDA are written in its voice rather than mine.
The automated tiers are the exception, and they say so on their first line. Everything else is read by a person, written down, and delivered on a fixed price and a fixed date.
- Company
- Kay Konsulting Limited
- Company number
- 17445525
- Registered office
- 66 Paul Street, London EC2A 4NA
- On paper
- Terms of business · Mutual NDA
Not sure which one you need?
That’s usually a scoping problem rather than a technical one. Tell me what’s happening and I’ll tell you what would actually help — including when the answer is nothing I sell.