Skip to content
Top Notchh.
Est. Jan 2025 — Independent — India

Two Products Shipping.

An independent software company. A security-evidence layer for AI-built code. A Shopify-native bundle builder. Every product from a repeated operational pain — never a menu, never a retainer.

See what shipsJournal
Software productsNot decksTwo in productionIndependentShipping from IndiaEst. Jan 2025No services menuNo retainerThe products are the pitchSoftware productsNot decksTwo in productionIndependentShipping from IndiaEst. Jan 2025No services menuNo retainerThe products are the pitch

We don't sell hours.
We ship products.
They are the pitch.

Two
Products
In Prod.

01

Verglos

A security-evidence layer for AI-built software. Scans a repo, grades AI-authored files separately, produces evidence you can hand a client, an auditor, or a procurement team.

Verglos.com — npm package — MCP surface

02

Wolfpack Bundle Builder, BYOB

A Shopify-native bundle builder. Merchants create configurable product bundles, full-page bundle experiences, and build-your-own-bundle flows without custom theme code.

Shopify App Store — Cart Transform — Merchant tooling

Verglos.

The security evidence layer for AI-built software.

Verglos scans repositories for the mistakes AI code specifically makes — wildcard CORS, Math.random for tokens, missing authorization, hallucinated packages — then turns the scan into evidence a team can review, share, or build into a handoff workflow.

  • AI-authored provenance

    Every file is scored as human, AI, or mixed so AI-authored risk can be reviewed separately instead of buried in a generic scan.

  • The AI-specific catalogue

    Detectors for common AI-era patterns: CORS wildcards, insecure RNG in tokens, auth without authz, mass assignment, hallucinated packages, verbose error handlers, and more.

  • Ten security domains

    Full attack surface for modern web + API: injection, auth, authz, cryptography, misconfig, supply chain, API, data exposure, runtime, monitoring — plus the agent surface (MCP, plaintext creds, over-permissioned tools).

npx verglosnpx verglos
Verglos scan report
v1.5.2

acme-corp / checkout-api

Scanned 2026-08-12 · commit 4a7b2c9

41/ 100
Below threshold

Critical

02

High

05

AI-authored

68%

Findings — top 5

  • AI-002

    Math.random() feeding a session token

    src/auth/session.ts:47

  • D4-001

    Exposed secret — Database URL committed

    .env.dev:12

  • AI-003

    IDOR — ownership check missing

    app/api/invoice/[id]/route.ts:22

  • D1-001

    SQL injection via string concat

    src/db/query.ts:104

  • D5-002

    Wildcard CORS with credentialed auth

    middleware.ts:8

Run yourself

$ npx verglos

Wolfpack Bundle Builder, BYOB.

Shopify-native bundle building for configurable product bundles.

Creates flexible bundle experiences for Shopify stores — full-page bundle builders, custom product bundles shoppers assemble themselves, and on-brand layouts that fit the merchant storefront.

  • Custom product bundles

    Let shoppers build their own bundles with flexible product selections and bundle choices.

  • Full-page bundle builders

    Launch dedicated bundle pages built for ad campaigns across Meta, Google, and TikTok.

  • Bundle pricing paths

    Documented support includes percentage, fixed amount, fixed bundle price, and Buy X Get Y checkout pricing paths.

Open on Shopify App Store
brand-store.myshopify.com / bundles / build-your-box

Build Your Box

Pick 3 — save 15%
Cleanser✓Cleanser
TonerToner
Serum✓Serum
MaskMask
Cream✓Cream
SPFSPF
3 of 3 selected
₹1,850₹1,572

Every product makes
the next one sharper.

A studio without memory is a services shop. We treat every product as raw material for the next one — the code, the workflow, the customer conversations, the mistakes.

  1. Observe

    A repeated business problem in a real workflow. Not a demo, not a report.

  2. Build

    A focused product around the pain. Single user, specific workflow.

  3. Ship

    Into the field. Real users, real orders, real audits.

  4. Document

    Architecture, limits, honest claims, specific decisions become memory.

  5. Compound

    The next product inherits better code, infrastructure, judgment.

By the numbers.

Products shipping
02

Verglos · Wolfpack Bundle Builder, BYOB

Public repos scanned
300+

TS / JS calibration campaign

Owned
100%

No outside capital, no advisors

How we work.

Five principles we return to when a decision is hard. Written down so we can be reminded, argued with, or held to them.

  • 01

    Specific beats broad

    One user. One workflow. One clear pain. Every product answers a question a founder is actually being asked.

  • 02

    Useful beats impressive

    If a feature does not make the product easier to adopt, trust, or maintain, it does not ship.

  • 03

    Durable beats loud

    We do not chase design trends. We do not sell hype. We build software that keeps working after the launch week is over.

  • 04

    Memory over speed

    Every decision is documented so the next product starts sharper. A fast company without memory just repeats the same mistake.

  • 05

    Owned distribution

    The Journal, the products, the code, the customer conversations — the company owns every surface. No dependency on a platform that can turn off tomorrow.

Field notes.
Not SEO copy.

Read all →

Where to find us.

Every surface is public. Click any of these to see the actual thing — the code, the app listing, the writing. No demos to book.

Have a
repeated problem?

If you keep running into the same operational pain and it looks like software, tell us. If it's the shape of something we already build, we'll say so. If it isn't, we'll say that too.

Get in touchRead the Journal