Can you review code we did not write?

Yes. The majority of our code audit engagements are on Laravel applications built by other agencies, freelancers, or previous internal teams. We have no skin in the game beyond delivering an honest assessment, which makes our review more useful than asking the original team to assess their own work. NDAs are signed before any review, source code stays in your repository, and findings are delivered in a written report with a recommended action plan.