Nythrex

Example project · Project rescue · Marketplace

Rescuing a stalled marketplace: from “two more weeks” to a launch date you can trust.

“RentRig” (a fictional company) is building a marketplace for renting construction equipment between businesses. Nine months after kick-off, the MVP was promised “in two weeks” for the fourth time, the lead developer had left the previous vendor, and the founders couldn’t deploy their own product. This is how we would take it over.

By Nythrex EngineeringUpdated 3 min read

Illustrative scenario. This is an illustrative scenario that shows how Nythrex approaches this type of project. It is not a specific client case study: names, figures and timelines are examples.

Secure assets

Repo · cloud · domains · keys

1

Audit

Code · infra · backlog

2

Re-scope MVP

Cut · keep · later

1

Stabilise

CI/CD · tests · secrets

3

Finish MVP

Payments · booking · admin

6

Launch

Staged rollout

1
0612 weeks
Illustrative plan for the takeover. The first two weeks produce clarity, not features.

The situation

01Code in the vendor’s GitHub organisation

The founders had read access to a mirror, updated “when requested”.

02Production in the vendor’s cloud

Billed to the vendor and re-invoiced; the founders had no console access.

03No automated tests, no CI

Deployments were done by hand by the developer who had left.

04Secrets in the code

Payment-provider keys and database passwords committed to the repository.

05Payments half-built

Card payments worked in test mode; deposits, refunds and payouts to equipment owners didn’t exist yet.

06Scope creep without prices

Features had been added in calls, never estimated, and never removed.

Week one: secure, then look

  1. 1

    Ownership transfer

    Guided the founders through requesting the repository transfer, moving the cloud subscription to their company and taking control of the domain and payment-provider account — politely and in writing.

  2. 2

    Rotate everything

    New database passwords, API keys and payment-provider credentials, stored in a vault in the founders’ cloud account.

  3. 3

    Clean build

    Build and deploy from scratch into a new staging environment. Four undocumented manual steps were found and turned into a pipeline.

Audit findings

Illustrative audit summary.
AreaFindingSeverityRecommendation
ArchitectureSensible modular monolith; clear domain modelLowKeep
TestsNone; regressions frequentHighAdd tests around booking and payments first
SecuritySecrets in code; admin panel without 2FACriticalRotate, vault, 2FA — done in week one
PaymentsTest-mode charges only; no deposits, refunds or payoutsHighFinish with marketplace payment flows
InfrastructureManual deploys; no monitoringHighCI/CD, staging, alerts
ScopeFeatures added without estimates; MVP unclearHighRe-scope with the founders

Re-scoping the MVP

Moved to “later”

  • Dynamic pricing by season
  • In-app chat (email notifications instead)
  • Mobile apps (responsive web first)
  • Multi-currency

Kept for launch

  • Listing, search and availability calendar
  • Booking with deposit and damage policy
  • Payouts to equipment owners
  • Admin tools for disputes and refunds

Cutting scope is the fastest way to a date you can trust. Every item moved to “later” stayed in the backlog with an estimate, so the founders could bring it back knowingly. More on this in Your MVP is too big.

Delivery after the rescue

  • A demo of working software every two weeks, recorded for investors who couldn’t join.
  • A forecast with a range and its assumptions, updated weekly with reasons when it moved.
  • Every new idea turned into a change request with cost and schedule impact before any work started.
  • Documentation and runbooks written as part of each milestone, so the founders could hire their own team later.

Frequently asked questions

Want a second opinion on your project?

Tell us what you’re building and where you’re stuck. We’ll reply within one business day with the most practical next step — even if that step isn’t us.

Start a project