You missed my point:
"If you think that its simply a case of not using your old employers code then you're naive".
A third-party code review would do little or nothing to prove whether Shred have "stolen" anything.
Suppose you and I both wrote our own authentication systems (the horror!) - I'm sure we'd create much the same functionality wise but our code would probably look vastly different.
The code base is not important here.