Product Studio
Alongside my security work, I build commercial SaaS products that solve practical business problems. Building real products keeps my security thinking grounded in the realities engineering teams face — architecture, authentication, APIs, third-party integrations, deployment, cost, usability, reliability and security trade-offs.
Commercial ProductPre-launch / Production-readiness
QuickHalo
Independent, commercial SaaS product for service businesses, automating customer retention and recurring-service engagement: automated service reminders, customer follow-up, appointment/booking flows, recurring-customer engagement, and AI-assisted customer interactions. Amalachukwu is the primary product builder and owner. The product spans multiple application surfaces in a single monorepo/workspace architecture: a marketing/onboarding site, a customer application/dashboard, an admin surface, a booking flow, an embeddable widget, and an API.
Currently at production-readiness / pre-launch stage -- built and hardened as a real product, not yet claiming an established customer base.
Product-security work, approached from both the builder and AppSec sides: replacing demo/fake auth with real authentication (Supabase Authentication) including email verification and a secure sign-in/session flow; tenant/membership boundaries and role-based access control built on the principle of least privilege, enforced at the database layer with row-level/data-access controls rather than only in application code; removal of insecure client-side/admin shortcuts left over from earlier prototyping; secure environment-variable and secret handling, including application encryption-key handling; Stripe webhook signature verification; audit logging and structured, redacted application logging; permission-gated administrative actions; authentication regression testing; canonical production-domain/session consistency; onboarding entitlement and billing/trial-state validation; health/readiness endpoints; and a production-readiness security review before launch.
Product in DevelopmentIn Development
AI Governance / Audit SaaS
A commercial platform intended to help organizations operationalize AI governance, with capability tiers described for small business (a plain-language assessment of AI-use safety plus the supporting documents), mid-market (AI inventory, risk assessments, policies, evidence, remediation), and enterprise (multi-team governance, approval workflows, control mapping, APIs, audit trails, RBAC, continuous monitoring). No customers, revenue, or production functionality are claimed -- this is stated explicitly as in development.
Additional products
Product in DevelopmentIN-DEVELOPMENT
IgboNest
Independent, mobile-first Igbo-language learning application in development, built with Expo, React Native, and TypeScript (Expo Router). Amalachukwu is the primary product owner and builder. Functionality includes authentication and onboarding, child/user profile separation where relevant, structured lesson flows, progression (XP, hearts, coins, streaks), learning worlds/missions, and a settings/profile area, all designed mobile-first.
Security design: secure authentication with email verification, profile/user separation, controlled data access, and secure-by-design account flows, built on a Supabase authentication/database/storage architecture with PostgreSQL migrations where applicable and backend/database access considerations designed in from the start rather than retrofitted.
Supporting technical examples
A small set of full-stack projects showing frontend/backend, APIs, authentication, databases, deployment, and AI-integration understanding -- secondary context for the products above, not the primary identity of this site. View the software examples.