VVerglos
npm v2.0.0-alpha.1stable v1.8.3JS/TS livelocal scanApache-2.0

The security layer for AI-generated code

Make AI-generated code safer to ship.

Verglos is a local-first security layer between code change and release: scan locally, decide with explicit policy, and prepare bounded evidence for handoff. The free local scanner is live today; the v2 track adds local Hunt verification and signed evidence as each path qualifies.

Read the 2.0.0 directionSee what's coming

$ npx verglos

scanned 1,247 files in 42s

report: verglos-report.html + verglos-report.json

verglos scan

critical / D4-004

credential-shaped value in source

high / AI-005

unresolved package name in lockfile

fix

move to env, rotate, pin dependency

0/ 100

Critical risk

AI-authored estimate41%
Evidence artifactlocal

2.0.0-alpha.1

latest npm

public qualification prerelease; stable scanner 1.8.3

10

coverage domains

explicit JS/TS detector map

0

source upload

scan runs on your machine

A1/A2

Hunt assurance

qualification-gated bounded paths

Why the market changed

Agentic AppSec is now table stakes.

ZeroPath, Corgea, Snyk Agent Fix, Cycode Maestro, XBOW, Semgrep AI Assistant, and Pixee all point at the same market shift: scanners are becoming triage-and-fix agents.

The shared pattern is cloud LLM triage plus PR fixes. That is useful, but it still asks the buyer to trust inferred severity and generated remediation.

Verglos takes a different lane: local sandbox proof, AI-authorship provenance, and signed evidence artifacts. It is built to prove what fired, show where agent-authored code concentrated risk, and package the result for handoff.

The Verglos flow

One release decision. Every proof point connected.

Verglos keeps source and scanning local, then connects its findings with evidence from Trivy, Docker/OCI, and the tools your team already runs. The result is a decision you can explain, not another isolated alert.

Hunt and signed records are shown with their declared assurance and qualification boundary.

01

Inspect

Scan your JS/TS code

Findings, provenance, score, and local reports.

02

Decide

Correlate + policy

Normalize evidence into pass, review, or block states.

03

Prove

Bounded verification

Approved local Hunt and portable records where qualified.

04

Monitor

Remember the decision

Hosted history, alerts, and team context remain qualification-gated.

Customer-controlled execution: code, approved fixtures, scans, and ordinary reports stay local.

Qualification boundary: Hunt proof and portable records disclose their assurance and limitations.

Optional hosted memory: history, monitoring, alerts, and team context remain plan- and qualification-gated.

SAST + SCA · 10 domains

Built from the bugs AI agents make cheap to create.

One CLI runs SAST (code-side detectors — secrets, injection, misconfig, AI patterns) and SCA (dependency CVEs, vendored libraries, slopsquat / typosquat) across ten explicit domains: injection, auth, access control, cryptography, misconfiguration, supply chain, API surface, data exposure, runtime, and monitoring.

Domain 01 of 10

Injection & input flaws

Critical

Every piece of user input is a weapon if it reaches a dangerous sink unsanitised. We trace source-to-sink across your codebase — SQL, NoSQL, command exec, XSS, SSTI, path traversal — and flag the concatenations, spreads, and eval calls that turn a request into a takeover.

SQL / NoSQL
Command exec
XSS (stored / reflected / DOM)
SSTI

sample finding

element.innerHTML = req.query.name

app/user/[id]/page.tsx:42

Three moats

Verglos is not trying to win the cloud triage race.

AI-authorship provenance

Every finding is annotated human / AI / mixed with commit-shape and agent-artifact evidence.

Cloud scanners can triage code, but they usually do not preserve authorship evidence as a first-class risk dimension.

Local-first

Scan runs 100% on the developer's machine today. Hunt is designed for local verification so source does not need to leave the machine.

Cloud LLM products inherit cloud cost and source-upload friction; Verglos keeps the security loop local.

Signed evidence artifact

The v2 attest track is designed around a portable JSON+HTML bundle signed with Ed25519; hosted signing and public verification remain qualification-gated.

A PR fix is not a client-portable evidence artifact. Studio is built around the handoff surface.

Evidence path

Enterprise thinking without pretending to be enterprise theater.

Verglos is designed to move from local findings to durable proof: CI enforcement, monitoring, signed attestations, verification URLs, SBOMs, and client-ready reports.

See the attestation ledger →Inspect public proof assets →Detector changelog →

01

Inspect

Run the local JS/TS scanner and keep findings, provenance, and ordinary reports beside your code.

02

Decide

policy-bound

Normalize evidence and apply explicit policy so pass, review, and block states stay explainable.

03

Prove

qualification-gated

Use approved bounded Hunt paths and portable records only where the declared runtime and evidence contract support them.

04

Monitor

hosted qualification

Carry qualified decisions into optional history, alerts, and team context without implying hosted coverage is live everywhere.

WHAT VERGLOS IS NOT

Not another autonomous pentester. Verglos verifies findings on code you own.

Not a cloud SAST. Verglos does not upload source to run an LLM triage pass.

Not a Vanta replacement. Verglos produces evidence artifacts, not the compliance program.

Not AI-powered as a headline claim. The scanner is deterministic; the hunt loop uses local synthesis and sandbox execution.

Why it matters

The invisible cost you're paying today.

Not the bugs Verglos finds — the ones you don't. Every AI-assisted stack carries a handful of buried failure modes that won't announce themselves. Here's what changes when you can see them.

₹2,809.43/mo · less than one hour of dev time

The developer

Know what changed before it ships.

Run the local scanner against the project you control, inspect findings and provenance, and keep the HTML/JSON result with the change.

The agency

Show the handoff boundary.

When Studio custody is qualified, send an approved redacted projection with its digest and limitations instead of exposing source or raw findings.

The founder

Keep release decisions explainable.

Policy and record surfaces are designed to preserve why a result was accepted, reviewed, or blocked; hosted history and monitoring remain qualification-gated.

The agent user

Put authority around agent actions.

The CLI and MCP contracts bind supported actions to explicit inputs, approvals, and bounded outputs; arbitrary model-generated shell is not accepted.

Language coverage

JavaScript and TypeScript first.

JS/TS is live today because that is where Verglos has real detector coverage, package analysis, and provenance signal. Other stacks stay on the request list until they are actually supported.

Live now

JavaScript and TypeScript first.

JavaScriptJS
TypeScriptTS

Covers Node.js, Next.js, React, Express, Fastify, and npm workspaces.

PythonGoRubyJavaPHPRustC# / .NETSwiftKotlin
Request your stack →

npm

Install in one command.

The package is the fastest path to value: no signup, no install ceremony, no source upload.

GitHub

Inspect the scanner.

Technical reviewers can inspect the CLI, detectors, packages, docs, release notes, and evidence docs.

Top Notchh

Backed by a product company.

Verglos is part of a focused product portfolio, not a one-off landing page or loose security script.

Plans

Free is the complete local scanner.

Run it as many times as you want locally. Paid tiers are for teams that need enforcement, monitoring, evidence, handoff, and readiness workflows around the scan.

Free plan

Unlimited local scans. Full findings. Full paths. Local HTML and JSON reports. No account required.

Live

Free

$0

For: Developers, founders, agencies

Use: OSS scanner, provenance, and MCP scan.

Unlimited local scans. No account, no source upload, no paywall for findings, paths, or line numbers.

Catalog terms

Billing
$0 · Live
Seats
1 seat
Applications
Not set in public catalog
Records
Not set in public catalog
Client workspaces
Not set in public catalog
Hosted retention
0 hosted days
Public verification requests
Not set in public catalog
Managed execution runs
Not set in public catalog
Overages
No overage schedule published
  • /Full SAST + SCA scan across 10 domains
  • /Security score /100
  • /All file paths + line numbers
  • /SAST: secrets, entropy, injection, misconfig, AI patterns
  • /SCA: dependency CVEs via OSV + vendored-library CVE cross-ref
  • /AI-authored code detection
  • /Slopsquat / hallucinated-package check
  • /Local HTML + JSON report
  • /Pre-commit hook
  • /MCP verglos_scan tool
  • /CI blocks on criticals
  • /Unlimited local use
Run from npm

Live

Pro

₹2,809.43/mo

For: Serious solo devs and small teams

Use: Hunt track, CI discipline, and agent guardrails.

For developers whose coding agent should verify high-signal findings before every commit with approved, bounded recipes. Hosted entitlement and final acceptance remain qualification-gated.

Catalog terms

Billing
₹2,809.43/mo or ₹28,094.3/yr · Live
Seats
2 seats
Applications
5 applications
Records
100 records/month
Client workspaces
Not set in public catalog
Hosted retention
90 hosted days
Public verification requests
Not set in public catalog
Managed execution runs
Not set in public catalog
Overages
No overage schedule published
  • /Everything in Free
  • /verglos hunt bounded A1/A2 path for Critical + High
  • /MCP verglos_hunt_finding (approval-limited)
  • /MCP verglos_hunt_report (approval-limited)
  • /MCP verglos_hunt_before_write (approval-limited)
  • /MCP verglos_hunt_explain_verdict (approval-limited)
  • /verglos fix — provenance-annotated PR diffs
  • /verglos ci --hunt path for verified criticals
  • /CI score thresholds
  • /Continuous CVE monitoring
  • /Offline-safe license (Ed25519 signed)
Start Pro

Validation

Team

Not purchasable

For: Growing engineering teams

Use: Shared policy and CI decision workflows.

The Team catalog tier is defined for the shared-policy surface and remains unavailable for new purchase while that hosted path is being qualified.

Catalog terms

Billing
Not purchasable · Validation
Seats
5 seats
Applications
25 applications
Records
500 records/month
Client workspaces
Not set in public catalog
Hosted retention
365 hosted days
Public verification requests
Not set in public catalog
Managed execution runs
Not set in public catalog
Overages
No overage schedule published
  • /Everything in Pro
  • /Shared organization policy
  • /Repository-bound CI decisions
  • /Team seats and application allowances
Discuss Team

Validation

Studio

Not purchasable

For: Agency owners and delivery leads

Use: Attestation, client handoff, and proof resale.

Agencies do not need another noisy scanner. They need signed evidence they can hand to clients.

Catalog terms

Billing
Not purchasable · Validation
Seats
10 seats
Applications
100 applications
Records
2,000 records/month
Client workspaces
20 client workspaces
Hosted retention
1,095 hosted days
Public verification requests
Not set in public catalog
Managed execution runs
Not set in public catalog
Overages
No overage schedule published
  • /Everything in Pro
  • /verglos hunt on Medium
  • /Portable evidence records — qualification-gated
  • /Public verify URL — qualification-gated
  • /White-label report — qualification-gated
  • /Firecracker sandbox adapter — qualification-gated
  • /Agency dashboard — qualification-gated
  • /MCP verglos_attest
Discuss Studio

Contact sales

Enterprise

Custom

For: Security-led organizations

Use: Enterprise controls around the evidence chain.

For teams that need organization-level administration, private verification infrastructure, and custom detector coverage.

Catalog terms

Billing
Custom · Contact sales
Seats
Contracted
Applications
Contracted
Records
Contracted
Client workspaces
Contracted
Hosted retention
Contracted
Public verification requests
Contracted
Managed execution runs
Contracted
Overages
No overage schedule published
  • /Everything in Studio
  • /SSO / SCIM
  • /Self-hosted verify chain
  • /Audit log
  • /Custom detector packs
Contact sales
Plan capability comparison
CapabilityFreeProTeamStudioEnterprise
verglos scan (all detectors)YesYesYesYesYes
Provenance layer + slopsquat + typosquatYesYesYesYesYes
Local HTML + JSON reportYesYesYesYesYes
MCP verglos_scan toolYesYesYesYesYes
verglos ci blocks on any criticalYesYesYesYesYes
Pre-commit hookYesYesYesYesYes
verglos secrets / deps / scoreYesYesYesYesYes
verglos hunt on Critical + HighNoQualification-gated A1/A2Qualification-gated A1/A2Qualification-gated A1/A2Qualification-gated A1/A2
verglos hunt on MediumNoNoNoQualification-gatedQualification-gated
MCP hunt toolsNoQualification-gated A1/A2Qualification-gated A1/A2Qualification-gated A1/A2Qualification-gated A1/A2
MCP verglos_hunt_before_writeNoQualification-gatedQualification-gatedQualification-gatedQualification-gated
verglos fix (provenance-annotated PR diffs)NoYesYesYesYes
verglos ci --huntNoQualification-gatedQualification-gatedQualification-gatedQualification-gated
CI score thresholdNoYesYesYesYes
Continuous CVE monitoringNoYesYesYesYes
verglos attest (Ed25519 signed bundle)NoNoNoQualification-gatedQualification-gated
Public verify URLNoNoNoQualification-gatedQualification-gated
White-label reportNoNoNoQualification-gatedQualification-gated
Firecracker sandbox adapterNoNoNoQualification-gatedQualification-gated
Agency dashboardNoNoNoQualification-gatedQualification-gated
SSO / SCIM · self-hosted verify · audit log · custom detectorsNoNoNoNoContact sales

Top Notchh operating stamp

Built by a product company, not a scanner content farm.

Top Notchh Solutions builds practical software products from real operational pain. Verglos is the security decision-layer product in that portfolio: specific, local-first, honest about maturity, and built to become infrastructure for AI-assisted delivery.

Founder-led product judgment
Reusable scanner infrastructure
Evidence before decoration

From the Journal

Research and product notes.

Original research from the Verglos scan campaign, positioning notes, and product decisions — published on the Top Notchh Journal.

Read the full Journal →

FAQ

Boundaries make the product stronger.

Is Verglos just another scanner?+

No. The scanner is the entry point. Verglos is built around evidence: AI-code risk signal, report artifacts, MCP guardrails, CI enforcement, and client-ready proof.

Does Verglos upload source code?+

The local scanner writes HTML and JSON reports beside your code. Networked flows are explicit: login, activation, monitoring registration, and future hosted evidence.

Which languages are supported today?+

JavaScript and TypeScript are live. Other language icons are request-list indicators, not shipped coverage.

Who is behind Verglos?+

Verglos is built by Top Notchh Solutions, an AI-native product company building practical software products from real operational problems.