Management and further development

Software you did not build. In good hands.

A system you lean on every day, built by someone else. The supplier is gone, or no longer the right one, or the developer who knew it has left. We take it over: first understand what runs, then keep it stable and safe, then develop it further. Nothing has to be replaced first.

01 · When you need this

Six situations we see every year.

SUPPLIERYour supplier stops, is sold, raises the price every year, or the relationship is no longer working.
ONE PERSONThe system lives in the head of one developer, and that developer is leaving or has left.
INHERITEDA merger or takeover brought systems with it that nobody in your organisation knows.
YEARS TO GOThe old system has to keep running for years while a replacement is built, and it has to stay safe meanwhile.
AUDITAn audit, a security questionnaire or a NIS2 check asks who manages this system and how. Today the answer is a shrug.
NO BUDGET YETReplacing it is for next year or the year after. Until then it has to work, every day.
02 · How we take over

Five steps. Then it is ours to keep running.

The first three steps are the same as on the legacy page. They end in a handover file. Nobody manages what nobody understands.

  1. STEP 1What is there? Source code, build pipeline, configuration, database, contracts, licences, access. We check what is complete and what is missing, and whether the system can be built and tested at our end. You know up front what still has to come from the previous supplier.Readiness report
  2. STEP 2What does it do? Size, complexity, technical debt and security posture, and a map of the system: which parts call each other, where the data comes from, which jobs run at night.Map of the system
  3. STEP 3Which rules are in it? The calculations, conditions and status changes, written down in plain language with their place in the code. Your people check them. From now on there is documentation that is right.Rules, with source
  4. STEP 4Make it safer A security scan of the running system: known vulnerabilities, outdated packages, secrets in the code, injection. Ranked findings and a fix for each, which you approve before it goes in. Passwords and keys are rotated on day one.Ranked findings
  5. STEP 5Handover and management The handover file (architecture, dependencies, rules with source, findings) becomes the basis of the management agreement: what we monitor, how fast we respond, what a change costs, how we report. Then we run it.Management agreement
03 · What management means here

Keeping it running is a job, not a phone number.

Management at Enigmatry is the same team that builds. The people who answer the phone can also change the code.

MONITORINGWe watch the system, the jobs and the integrations. A failure is seen by us before it is seen by your users, and you hear what we did about it.
INCIDENTSAgreed response times, one place to report, and after every incident a short write-up: what happened, why, and what changes so it does not happen again.
UPDATESSecurity updates, framework and package updates, certificates, operating system patches. Planned, tested on a copy first, and rolled back if they break something.
ENVIRONMENTSDevelopment, test, acceptance and production strictly separated. Our developers never work with production data. Infrastructure is described in code, so an environment can be rebuilt.
CHANGESSmall changes and bug fixes from a backlog you own, in releases you approve. Every change goes through the same tests and checks as our own code.
REPORTINGA monthly report: incidents, changes, open findings, what is due. Readable by a manager, detailed enough for an auditor.
04 · Further development

From keeping it running to making it grow.

Most systems we take over do not need to be replaced. They need someone who dares to change them again. Once the map and the rules exist, a change is no longer a gamble: we know what it touches, and the tests that record today’s behaviour have to pass.

So further development starts small: the screen everyone hates, the integration that breaks every month, the report that is assembled by hand. One piece at a time, with the map and the rules updated at every release.

And when the system reaches its limits, the modernisation plan is the next step, with the same team, from the same documentation. Management and modernisation are not two suppliers here.

05 · The handover

We have been on both sides of a handover.

Incoming and outgoing. Most handovers go better once someone technical is in the room on your side. That is what we are for in the first weeks.

When the supplier cooperates.

We ask for the code, the pipelines, the configuration, the documentation that exists, and a few knowledge sessions. We write the handover file together, and the old supplier signs off that nothing is missing.

When the supplier does not.

We start from what you hold yourself: the running application, an export of the database, the contracts. We record the behaviour from the outside and build the knowledge back up from there. It takes longer, and we say which parts stay uncertain.

Day one.

All passwords, keys and certificates are replaced, access is on named people only, and the previous supplier’s access is closed. Whatever else is still open, this is done on day one.

06 · What we need from you

Six things, before the first week.

The full list comes with the intake. Never production data.

SOURCEThe complete source code, including shared libraries, or confirmation that it is with the supplier.
BUILD AND DEPLOYHow the system is built and put live today: pipelines, scripts, server configuration, scheduled tasks.
DATABASEDatabase schemas, stored procedures and views, and where the backups are.
CONTRACTSLicences, hosting contracts, certificates and their expiry dates, and who is on the access list today.
HISTORYOpen incidents, known workarounds, and earlier attempts to change or replace the system.
A PERSONSomeone on your side who knows what the system is for and can check the rules we find.
07 · What you get

A system that is yours again.

HANDOVER FILEArchitecture, dependencies, rules with their source, security findings. The document the next audit asks for, and the one a future supplier would need.
AGREEMENTA management agreement with a fixed fee in the proposal, agreed response times, and a backlog that is yours.
A SAFER SYSTEMThe findings from the scan fixed in order of risk, every fix approved by you, secrets rotated, access on name.
A MONTHLY REPORTIncidents, changes, open findings and what is due, every month, in the same format.
ROOM TO CHANGEChanges that no longer feel like a gamble, because the map, the rules and the tests exist.
AN EXITCode, pipelines, documentation and data stay yours. If you leave us, the handover file goes with you. That is written into the agreement from day one.
08 · Safety

Your system, your data, our certificate.

ISO 27001We are ISO 27001 certified. The security page says where your code is processed and what we may and may not do with it.
NO PRODUCTION DATAOur developers do not work with production data. Development, test, acceptance and production have been strictly separated with us for years.
ACCESSAccess to your systems is on named people, logged, and reviewed. Nobody who does not work on your system can get in.
SECRETSPasswords and keys we find in the code are masked in reports and replaced in the system.
PLATFORMOur platform is .NET and Microsoft. Older .NET versions, WebForms and classic ASP we take over. For other stacks we say in the first conversation whether we are the right party.
SINCE 2006Twenty years of keeping other people’s systems running, from Rotterdam, Belgrade and Novi Sad. The team that takes over is still here next year.
09 · Questions we get

Four questions before anyone signs.

Do we have to migrate first?

No. Taking over and keeping it running comes first. Whether and when to modernise is a separate decision, and the handover file is exactly what you need to make it.

How long does a takeover take?

That depends on what is there. After step one we tell you: what is complete, what is missing, and how long the rest takes. We do not promise a date before we have seen the system.

What does it cost?

The takeover (steps one to five) is a proposal with a fixed price. Management is a fixed fee per month in the same proposal, based on what the handover file shows. Changes come from the backlog, each with its own estimate.

What if we want to leave later?

Then you take the code, the pipelines, the documentation and the data with you, and we do the handover the way we would want to receive one. That is in the agreement from day one, because we have been on the other side of it.

Start with one system

Tell us which system keeps you awake.

What it runs on, who built it, who still understands it, and what the contract with the current supplier says. In one conversation you hear whether we are the right party and what the first step would be.

Taking over and keeping it running, since 2006