Next.js 15 · Clerk · Drizzle · Postgres RLS

Ship your SaaS on day one.

A production-ready starter with auth, multi-tenancy, and Row-Level Security already solved, so you build the product, not the plumbing.

One payment. Lifetime updates. The product you build is yours.

RLS isolation
Proven by an automated test suite, not a policy paragraph.
88 tests
Unit, integration, tenant-isolation, and e2e suites, green in CI.
13 migrations
Hand-authored SQL with roles, FORCE RLS, and audit trails.
1 command
pnpm setup from clone to running locally.
What's in the box

Everything a B2B SaaS needs before it needs anything else.

No “coming soon” sections. Every feature below ships in the repo today, wired end to end, with the tests to prove it.

Multi-tenant by default

Every user gets an organization on signup. Data is isolated per tenant with Postgres Row-Level Security; pnpm test:rls proves one tenant can't read another.

Auth & MFA solved

Email, Google, GitHub, and MFA via Clerk, synced to your database through signed webhooks, deletes included.

Teams & RBAC

Owner / admin / member roles enforced on the server, a members UI, and native team invites, wired end to end.

Billing that flips on

Plans, usage metering, and quotas work today in manual mode. Add Stripe keys and Checkout, the customer portal, and webhook plan changes go live with no code changes.

Files & storage

Uploads with per-plan byte quotas on local disk, or any S3-compatible provider with presigned URLs. Same code, env-selected.

Jobs & webhooks

A Postgres-backed queue with backoff and dead-letter, plus outbound webhooks with HMAC signatures and an SSRF egress guard.

API keys & audit

SHA-256-hashed API keys with a worked key-authenticated endpoint, an append-only audit log, and GDPR data export.

Platform admin

A cross-tenant admin panel with a suspension kill switch, disabled by default, unlocked by an env allowlist, audited on every read.

Production hygiene

Zod-validated env, structured logs, rate limiting, Sentry-ready error tracking, nonce-based strict CSP, a non-root Dockerfile, and CI.

Evaluate before you pay

The demo is the product, running.

No screenshots, no sales call. The full kit is deployed at demo.saas-shell.com: sign up and try to break the tenant isolation. Demo accounts and data may be wiped at any time.

Open the live demo
  1. 1Sign up: an organization is created for you automatically.
  2. 2Load sample data with one click on the items page (demo mode only).
  3. 3Invite a teammate and watch roles gate what they can do.
  4. 4Create a second org and confirm it can't see the first one's data. That's RLS doing its job.
  5. 5Poke the settings: API keys, audit log, usage & limits, files, webhooks, export.
After purchase

Three commands to localhost.

Buy, get invited to the private GitHub repo, and you're running before your coffee cools.

$ git clone git@github.com:fury1225/saas-shell.git $ cd saas-shell && pnpm setup # deps → database → migrations ✓ tenant isolation verified — tests/db/tenant-isolation.test.ts $ pnpm dev ▲ ready on http://localhost:3000 

Needs Node 20+ and Docker (for the local Postgres). Neon, Vercel, and any S3 provider slot in with env vars.

How it works

From checkout to clone in minutes.

01

Pay once via Polar

$99, one time. Polar acts as merchant of record, so tax receipts are handled and no account gymnastics.

02

Get repo access

You're invited to the private GitHub repository: full source, migrations, tests, docs, and CI. The same repo the demo deploys from.

03

Clone and ship

Rename it, deploy to Vercel or Docker, and start on your product's actual features. Pull updates whenever you want them. Forever.

Pricing

One price. No subscription.

You pay once, you get everything, you keep getting updates. That's the whole model.

$99one time
Perpetual commercial license
for one developer or your whole company team
  • Full source code: every feature on this page, private GitHub repo access
  • Unlimited end products: ship as many commercial apps as you want
  • Lifetime updates: every future version, no upgrade pricing
  • Setup & extension guides: SETUP.md plus billing, jobs, storage, and webhooks cookbooks
  • Your code stays yours: the license claims nothing you build on top
Buy SaaS-Shell · $99

Checkout by Polar (merchant of record). Delivered as source code, so sales are final except where required by law. Questions? Ask before you buy.

FAQ

Asked before buying.

Is this a subscription?

No. $99 once, lifetime updates included. There is no Pro tier, no seat math, no renewal email. The license is perpetual.

What exactly do I get after paying?

Access to the private GitHub repository: the complete Next.js 15 app, all 13 database migrations, the test suites, CI, the Dockerfile, SETUP.md, and the extension guides under docs/. Clone it and it's yours to build on.

Do I need Stripe or Resend accounts to use it?

No. With placeholder keys, billing runs in manual mode (owners switch plans in-app) and emails are logged instead of sent. Add real keys when you're ready and Checkout, the customer portal, and transactional email activate without code changes.

Can I use it for client work or multiple products?

Yes. The license covers unlimited end products. One license covers one individual developer, or the employees and contractors of the company that bought it. What you can't do is resell or redistribute the source itself, publicly or as a competing starter kit.

What's the stack?

Next.js 15 App Router, strict TypeScript, Clerk for auth, Drizzle ORM on Postgres (Neon-friendly) with Row-Level Security, Tailwind + shadcn/ui, Vitest and Playwright, Docker. Node 20+.

How do updates work?

The product is the repo, so updates are git: pull upstream, review the CHANGELOG, merge. Every future version is included in your one payment for as long as the product is maintained.

Who is this not for?

If you want no-code, a different framework, or a hosted service that runs everything for you, this isn't it. SaaS-Shell is for developers who want to own their stack and skip the first month of plumbing, not skip development.

Stop rebuilding the plumbing.

Auth, tenants, RLS, billing, jobs, webhooks: solved, tested, and documented. Your first sprint should be your product.