Taking Over a Magento Project: Why a Technical Check Comes First
AI generated
AUDIT
2026
Guide for agencies
Take over a Magento project
Why a technical check comes first

A client switches to your agency and brings a finished shop. Anyone who wants to take over a Magento project should know the condition of the shop before making an offer. This guide shows what a technical check examines and how the result feeds into your quote.

9 min readFor agenciesTechnical check in six areas

1. The risk if you take over a Magento project without looking inside

A client calls: the previous agency is no longer reachable, the shop runs but nobody maintains it. Whether you should take over the Magento project seems like a commercial question at first glance. In fact it is a technical one. A shop that has not received security patches for two years has a completely different maintenance effort than one that was looked after properly.

The problem: you cannot see this from outside. The home page loads, the checkout works, the client is satisfied. But whoever wants to take over a Magento project also takes over the legacy: outdated versions, core changes, modules without support and credentials in unknown hands. A fixed-price quote without a check then becomes a risk to your margin.

That is why a technical check comes first in every takeover. It takes a few hours and prevents unpaid clean-up work later. How to involve an external partner is described in the guide Agency without a Magento team.

2. Six areas a technical check covers

To take over a Magento project you need an inventory in six areas. The table below shows what is examined and why it matters for your quote.

AreaWhat is examinedWhy it matters
Version and patchesMagento version, PHP version, applied security patchesDetermines upgrade effort and security risk
ExtensionsNumber, vendor, update status, licensesOutdated modules block upgrades
Custom codeCore changes, plugins, observers, testsShows maintainability and hidden risks
FrontendTheme, Hyvä or Luma, performance, accessibilityDetermines load time and rebuild effort
OperationsHosting, cache, search index, cron jobs, backupsDecides stability in daily use
Access and documentationRepository, server, admin, integrations, docsWithout access no takeover

The result is a short report with a traffic-light status per area and an effort estimate for fixing the findings. More on the audit procedure is on the page about the code audit.

The extensions area is especially revealing. Every third-party module is a piece of foreign code that has to follow along with updates. Check whether a module is still maintained, whether it is released for the current Magento version and whether it duplicates functions. The number of extensions can often be reduced, which improves maintenance and load time. The license question belongs here too: many commercial modules are tied to a domain or account that still belongs to the former provider.

3. The process: four steps from suspicion to decision

So that you can take over a Magento project without getting lost, a process in four steps has proven itself. The first step is clarifying access: without read access to the repository or server there is no reliable finding. The second step is the inventory along the six areas. The third step is the assessment, separated into immediate measures, medium-term tasks and things that can stay as they are.

The fourth step is the quote. Only now do you calculate what it costs to take over a Magento project and which maintenance contract you offer. Note which functions of the shop are critical for revenue, such as checkout, payment methods and shipping calculation, and test them first after the takeover. Plan immediate measures separately from ongoing operation so the client sees that legacy issues are not part of the monthly flat fee. How to calculate the quote is in the guide Calculating a Magento quote.

4. Warning signs when you take over a Magento project

Some findings should not be accepted silently. If you take over a Magento project and find one of these signals, it belongs explicitly in quote and contract.

Findings you should put in writing

Missing security patches, changes directly in the Magento core, modules without active development, missing backups and unknown admin accounts. Put in writing before you start the condition in which you take over the shop so that later problems are not attributed to you. Take legal advice in individual cases.

Unknown admin accounts are especially delicate. Whoever wants to take over a Magento project should first review all users, block old accounts and renew passwords. A look into the database for conspicuous entries also belongs here, such as unknown scripts in CMS blocks, which can indicate manipulation.

5. Checklist: seven points before you take over a Magento project

Seven points before you say yes

  • ✓Do you have read access to repository, server and admin?
  • ✓Do you know the Magento and PHP version and the state of security patches?
  • ✓Is the list of extensions with versions and licenses complete?
  • ✓Has it been checked whether core files were changed?
  • ✓Are there working, tested backups?
  • ✓Are old admin and server accounts blocked and passwords renewed?
  • ✓Have you documented the takeover condition in writing?

If you take over a Magento project and more than two of these points are open, you should give the quote only after the check.

6. The check with an external partner: who does what?

If nobody in your agency can judge Magento code, the technical check is an ideal first task for an external partner. The effort is limited, the result is a report, and the cooperation can be tested without risk. You get a professional assessment without awarding a project right away.

Clarify who passes the report on to the client. It is usual for the agency to pass it on in its own words and under its own name. The partner delivers the technical substance, you provide the interpretation and the quote. Also agree that findings about security vulnerabilities are reported immediately and not only in the report, so that you can react quickly in case of acute danger. How such a partner should work is described in the guide Magento white-label partner.

7. Common misconceptions when you take over a Magento project

The first misconception when you take over a Magento project: if the shop runs, it is fine. A running shop can still be operated on a version that no longer receives security updates. The second misconception: the previous agency documented everything. In practice documentation is often missing, and some knowledge sits in only one head.

The third misconception: a fixed price protects against surprises. The opposite is often true when the condition of the shop is unknown. More sensible is a fixed price for the check and a quote that afterwards rests on documented findings. Anyone who wants to take over a Magento project this way saves dispute, time and money.

8. How we support agencies with takeovers

We are a web agency in which fixed freelancers work together, all remotely from home offices. If you want to take over a Magento project, we carry out the technical check for you in the background, deliver a report with traffic-light status and estimate the effort. The hourly rate is 30 euros net, and there is no minimum order.

If you wish, we also take over maintenance and the fixing of findings afterwards, under your name and without contact to your client. You find the maintenance packages under maintenance packages, the cooperation is described on the page White label for agencies, and requests go through Partnership and cooperation. This article is general orientation and not legal advice.

9. Summary

Whoever wants to take over a Magento project starts with a technical check. It shows version, extensions, code, frontend, operations and access and is the basis for a reliable quote.

Take over a Magento project, the key points at a glance

Check first

Examine six areas before a quote is written

Process

Clarify access, take inventory, assess, then calculate

Safeguards

Document the takeover condition in writing, show legacy issues separately

Partner

An external check is a low-risk first task

Note: This article offers general information and does not replace legal advice in individual cases.

10. FAQ: take over a Magento project

1How long does a technical check take?
That depends on size and condition of the shop. For a mid-sized shop it is usually a few working days once access is available.
2What does a technical check cost?
We charge 30 euros net per hour and estimate the effort in writing beforehand. All prices are on the pricing page.
3What do I need from the client?
Read access to repository or server, an admin account and any existing documentation.
4Can I pass the report on to my client?
Yes. With us the report belongs to you. Many agencies pass it on in their own words and under their own name.
5What if the shop is very old?
The check then shows whether an upgrade or a migration makes more sense. More on the migration page.
6Do I have to fix core changes immediately?
Not always immediately, but they belong in the planning because they make upgrades harder.
7How do I handle unknown admin accounts?
Review, block and renew passwords. If anything looks suspicious, also check files and CMS content for manipulation.
8Should I offer a fixed price?
Only after the check. Before that, a fixed price for the check itself makes more sense than for the whole project.
9Who does maintenance after the takeover?
You settle that in the quote. We offer maintenance packages that you can resell.
10How do I start?
With a request through Partnership and cooperation. We reply within 24 hours on working days.