Why a technical check comes first
A client switches to your agency and brings a finished shop. Anyone who wants to take over a Magento project should know the condition of the shop before making an offer. This guide shows what a technical check examines and how the result feeds into your quote.
Table of contents
- 1. The risk if you take over a Magento project without looking inside
- 2. Six areas a technical check covers
- 3. The process: four steps from suspicion to decision
- 4. Warning signs when you take over a Magento project
- 5. Checklist: seven points before you take over a Magento project
- 6. The check with an external partner: who does what?
- 7. Common misconceptions when you take over a Magento project
- 8. How we support agencies with takeovers
- 9. Summary
- 10. FAQ
1. The risk if you take over a Magento project without looking inside
A client calls: the previous agency is no longer reachable, the shop runs but nobody maintains it. Whether you should take over the Magento project seems like a commercial question at first glance. In fact it is a technical one. A shop that has not received security patches for two years has a completely different maintenance effort than one that was looked after properly.
The problem: you cannot see this from outside. The home page loads, the checkout works, the client is satisfied. But whoever wants to take over a Magento project also takes over the legacy: outdated versions, core changes, modules without support and credentials in unknown hands. A fixed-price quote without a check then becomes a risk to your margin.
That is why a technical check comes first in every takeover. It takes a few hours and prevents unpaid clean-up work later. How to involve an external partner is described in the guide Agency without a Magento team.
2. Six areas a technical check covers
To take over a Magento project you need an inventory in six areas. The table below shows what is examined and why it matters for your quote.
| Area | What is examined | Why it matters |
|---|---|---|
| Version and patches | Magento version, PHP version, applied security patches | Determines upgrade effort and security risk |
| Extensions | Number, vendor, update status, licenses | Outdated modules block upgrades |
| Custom code | Core changes, plugins, observers, tests | Shows maintainability and hidden risks |
| Frontend | Theme, Hyvä or Luma, performance, accessibility | Determines load time and rebuild effort |
| Operations | Hosting, cache, search index, cron jobs, backups | Decides stability in daily use |
| Access and documentation | Repository, server, admin, integrations, docs | Without access no takeover |
The result is a short report with a traffic-light status per area and an effort estimate for fixing the findings. More on the audit procedure is on the page about the code audit.
The extensions area is especially revealing. Every third-party module is a piece of foreign code that has to follow along with updates. Check whether a module is still maintained, whether it is released for the current Magento version and whether it duplicates functions. The number of extensions can often be reduced, which improves maintenance and load time. The license question belongs here too: many commercial modules are tied to a domain or account that still belongs to the former provider.
3. The process: four steps from suspicion to decision
So that you can take over a Magento project without getting lost, a process in four steps has proven itself. The first step is clarifying access: without read access to the repository or server there is no reliable finding. The second step is the inventory along the six areas. The third step is the assessment, separated into immediate measures, medium-term tasks and things that can stay as they are.
The fourth step is the quote. Only now do you calculate what it costs to take over a Magento project and which maintenance contract you offer. Note which functions of the shop are critical for revenue, such as checkout, payment methods and shipping calculation, and test them first after the takeover. Plan immediate measures separately from ongoing operation so the client sees that legacy issues are not part of the monthly flat fee. How to calculate the quote is in the guide Calculating a Magento quote.
4. Warning signs when you take over a Magento project
Some findings should not be accepted silently. If you take over a Magento project and find one of these signals, it belongs explicitly in quote and contract.
Findings you should put in writing
Missing security patches, changes directly in the Magento core, modules without active development, missing backups and unknown admin accounts. Put in writing before you start the condition in which you take over the shop so that later problems are not attributed to you. Take legal advice in individual cases.
Unknown admin accounts are especially delicate. Whoever wants to take over a Magento project should first review all users, block old accounts and renew passwords. A look into the database for conspicuous entries also belongs here, such as unknown scripts in CMS blocks, which can indicate manipulation.
5. Checklist: seven points before you take over a Magento project
Seven points before you say yes
- ✓Do you have read access to repository, server and admin?
- ✓Do you know the Magento and PHP version and the state of security patches?
- ✓Is the list of extensions with versions and licenses complete?
- ✓Has it been checked whether core files were changed?
- ✓Are there working, tested backups?
- ✓Are old admin and server accounts blocked and passwords renewed?
- ✓Have you documented the takeover condition in writing?
If you take over a Magento project and more than two of these points are open, you should give the quote only after the check.
6. The check with an external partner: who does what?
If nobody in your agency can judge Magento code, the technical check is an ideal first task for an external partner. The effort is limited, the result is a report, and the cooperation can be tested without risk. You get a professional assessment without awarding a project right away.
Clarify who passes the report on to the client. It is usual for the agency to pass it on in its own words and under its own name. The partner delivers the technical substance, you provide the interpretation and the quote. Also agree that findings about security vulnerabilities are reported immediately and not only in the report, so that you can react quickly in case of acute danger. How such a partner should work is described in the guide Magento white-label partner.
7. Common misconceptions when you take over a Magento project
The first misconception when you take over a Magento project: if the shop runs, it is fine. A running shop can still be operated on a version that no longer receives security updates. The second misconception: the previous agency documented everything. In practice documentation is often missing, and some knowledge sits in only one head.
The third misconception: a fixed price protects against surprises. The opposite is often true when the condition of the shop is unknown. More sensible is a fixed price for the check and a quote that afterwards rests on documented findings. Anyone who wants to take over a Magento project this way saves dispute, time and money.
8. How we support agencies with takeovers
We are a web agency in which fixed freelancers work together, all remotely from home offices. If you want to take over a Magento project, we carry out the technical check for you in the background, deliver a report with traffic-light status and estimate the effort. The hourly rate is 30 euros net, and there is no minimum order.
If you wish, we also take over maintenance and the fixing of findings afterwards, under your name and without contact to your client. You find the maintenance packages under maintenance packages, the cooperation is described on the page White label for agencies, and requests go through Partnership and cooperation. This article is general orientation and not legal advice.
9. Summary
Whoever wants to take over a Magento project starts with a technical check. It shows version, extensions, code, frontend, operations and access and is the basis for a reliable quote.
Take over a Magento project, the key points at a glance
Check first
Examine six areas before a quote is written
Process
Clarify access, take inventory, assess, then calculate
Safeguards
Document the takeover condition in writing, show legacy issues separately
Partner
An external check is a low-risk first task
Note: This article offers general information and does not replace legal advice in individual cases.