Multi-Tenant SaaS Boilerplate

saasprokit offers a production-grade, multi-tenant SaaS boilerplate built on Next.js 16, designed for serious B2B applications. This comprehensive starter kit provides a robust foundation with Better Auth, organization management, role-based access control (RBAC), and Stripe billing, all pre-wired and thoroughly tested. It leverages the Next.js App Router and Prisma, supporting three distinct deploy targets: Cloudflare Workers, Vercel, and Docker/AWS, ensuring flexibility and scalability for your projects.

The kit is engineered to accelerate development by providing a complete, ready-to-use codebase. It includes 10 shared packages covering essential functionalities like authentication, database interactions, email services, a design system, internationalization (i18n), storage, and logging. With 28 pre-built app routes for dashboards, organizations, user accounts, admin panels, and all authentication flows, developers can focus on core product features rather than boilerplate setup. The codebase is rigorously tested with over 190 unit tests using Vitest for auth, billing, and data access, complemented by 25 Playwright suites for end-to-end testing.

Key features include:

Multi-tenant Organizations and Personal Accounts

• Org-scoped subscriptions: Each organization has its own Stripe customer, enabling granular subscription management and seat limits.
• Role-based access control (RBAC): Implements owner, admin, and member roles with route-level guards to secure access.
• Seamless invite flows: Features email confirmation and intelligent seat handling for inviting new members.
• Edge-validated slug-based URLs: Ensures robust and secure routing for multi-tenant environments.

Comprehensive Authentication Flows

• Email + password: Includes full verification and recovery flows.
• Magic link sign-in: Offers a convenient, passwordless login option with one-time code fallback.
• OAuth integrations: Out-of-the-box support for Google and GitHub authentication.
• TOTP 2FA: Enhances security with Time-based One-Time Password two-factor authentication, complete with backup codes and recovery options.

Integrated Stripe Subscription Billing

• Per-organization billing: Manages subscriptions and seat limits at the organizational level.
• Self-serve customer portal: Allows users to manage their payment methods, view invoices, and handle cancellations directly.
• Idempotent webhook handling: Ensures reliable and replay-safe processing of Stripe events.
• Configurable tiered plans: Easily define and manage different subscription tiers from a single configuration file.

Production-Ready Security

• Per-request CSP nonces: Content Security Policy nonces are dynamically set by edge middleware for enhanced protection against XSS attacks.
• Rate-limited sign-in attempts: Deters brute-force attacks by limiting login attempts.
• Audit-ready event tracking: Comprehensive session and account event tracking for security audits.
• Strict type and data validation: Utilizes TypeScript and Zod for rigorous validation at every application boundary, minimizing errors and vulnerabilities.

The kit is available for a one-time payment of $200, granting lifetime updates and full source code access. It supports unlimited projects and allows your entire team to work on it, including for client and agency projects. saasprokit also offers free setup and deployment assistance via Discord, ensuring a smooth start. From checkout, you receive a GitHub invitation to the private repository, allowing you to clone and run the application locally in under five minutes.