v1.0.0 - ready for ship

Install custom ship
in a week

Full-stack SaaS boilerplate. Next.js · React · better-auth. Auth, billing, teams, email, jobs - every wire already run.

Clone & ship Dashboard

Auth & 2FA

Stripe billing

Teams & RBAC

shadcn UI kit

The stack

Built on what works

The pieces are picked, wired, and tested. Swap any of them, but you won't need to on day one.

Next.js 16 + App Router

Server Components, Server Actions, async params, route groups. The new model, used the right way.

Postgres + Prisma

Schema-first models, typed client, migrations checked in. Neon-ready for serverless deploys.

Turborepo + pnpm

Tuned task graph with remote cache. Apps and packages share types across the whole monorepo.

TypeScript end-to-end

Strict mode everywhere, Zod for boundaries, inferred types from Prisma to the form field.

shadcn/ui + Tailwind v4

Themeable primitives, dark mode, design tokens. Storybook included so designers can review live.

i18n + edge proxy

Locale-prefixed routes, message catalogs, CSP nonces. Production middleware patterns, not toys.

Multi-tenant

Orgs and personal accounts

Every user gets a personal workspace and can join any number of organizations. Billing, members, roles, and invites are scoped per-org — no leaks, no foot-guns.

Org-scoped subscriptions with one Stripe customer per org
Owner / admin / member roles with route-level guards
Invite flows with email confirmation and seat handling
Slug-based URLs validated at the proxy layer

Authentication

Auth flows you'll ever need

Better Auth handles cryptography, sessions, and account lifecycle. You just plug providers in. Email, magic links, OAuth, OTP, and 2FA — already tested end-to-end.

Email + password with verification and recovery flows
Magic link sign-in and one-time code fallback
Google and GitHub OAuth out of the box
TOTP-based 2FA with backup codes and recovery

Billing

Stripe, wired the right way

Subscriptions per organization, prorated upgrades, verified webhooks, customer portal for cards and invoices. Plans declared in one config, surfaced in pricing and checkout.

Per-org customer with subscription scoping and seat limits
Self-serve portal for cards, invoices, and cancellation
Idempotent webhook handling with replay-safe events
Tiered plans (free / pro / enterprise) in one config file

Hardened

Production security from day one

Edge protection, content security policy, rate limits, and audit trails. The hard parts of running a real product — already done, already tuned.

Per-request CSP nonces set by the edge proxy
Rate-limited sign-in attempts to deter brute force
Audit-ready session and account event tracking
Strict TypeScript and Zod validation at every boundary

Your price here

One source, three tiers. Start free, upgrade when you outgrow it.

MonthlyAnnualSave ~17%

Free

Perfect for getting started

Free

1 team member
100 MB storage
Basic features
Community support

Start free

Ready to ship your product?

Get the full kit and ship in a week, not a month.

Clone & ship

Orgs and personal accounts

Every user gets a personal workspace and can join any number of organizations. Billing, members, roles, and invites are scoped per-org — no leaks, no foot-guns.

Org-scoped subscriptions with one Stripe customer per org

Owner / admin / member roles with route-level guards

Invite flows with email confirmation and seat handling

Slug-based URLs validated at the proxy layer

Auth flows you'll ever need

Better Auth handles cryptography, sessions, and account lifecycle. You just plug providers in. Email, magic links, OAuth, OTP, and 2FA — already tested end-to-end.

Email + password with verification and recovery flows

Magic link sign-in and one-time code fallback

Google and GitHub OAuth out of the box

TOTP-based 2FA with backup codes and recovery

Stripe, wired the right way

Subscriptions per organization, prorated upgrades, verified webhooks, customer portal for cards and invoices. Plans declared in one config, surfaced in pricing and checkout.

Per-org customer with subscription scoping and seat limits

Self-serve portal for cards, invoices, and cancellation

Idempotent webhook handling with replay-safe events

Tiered plans (free / pro / enterprise) in one config file

Production security from day one

Edge protection, content security policy, rate limits, and audit trails. The hard parts of running a real product — already done, already tuned.

Per-request CSP nonces set by the edge proxy

Rate-limited sign-in attempts to deter brute force

Audit-ready session and account event tracking

Strict TypeScript and Zod validation at every boundary

Install custom ship in a week

Built on what works

Orgs and personal accounts

Auth flows you'll ever need

Stripe, wired the right way

Production security from day one

Your price here

Ready to ship your product?

Install custom ship in a week

Built on what works

Orgs and personal accounts

Auth flows you'll ever need

Stripe, wired the right way

Production security from day one

Your price here

Ready to ship your product?

Install custom ship
in a week

Install custom ship
in a week