The first month looks deceptively quiet from the outside. A fractional CTO who starts making big changes in week one is almost certainly making the wrong ones.
Week one is an audit, but not the kind that produces a 40-page report nobody reads. It is closer to an experienced mechanic listening to the engine. They review the codebase, not to judge the engineers who wrote it, but to understand the decisions that led here. They map the infrastructure, look at deployment processes, check security basics, and sit in on how the team actually works together.
The most valuable thing that happens in the first two weeks is not technical at all. It is the conversations. Short, direct talks with every engineer, the product lead, and the founder. "What slows you down? What are you worried about? What would you fix if you had a week with no other obligations?" The answers almost always point to the real problems, which are rarely the ones leadership identified in the brief.
By the end of week two, a good fractional CTO has a ranked list of issues. Not 30 items. Three to five things that are actively hurting the business right now. Production stability. Security gaps that represent genuine risk. Process failures that have halved engineering velocity. The discipline is in what they choose not to fix yet.
Weeks three and four are about quick, visible stabilisation. If there is no production monitoring, it goes in. If deployments are manual and terrifying, they get a basic safety net. If there is an obvious security hole that could become a breach, it gets patched. These are not transformative changes. They are the equivalent of stopping the bleeding before you plan the surgery.
The team notices. Not because the fractional CTO announced anything, but because something that broke every Friday stopped breaking.