Foundations you don’t build twice.
The auth, tenancy and permission layers every product needs. Built once, properly, so you can start on what is yours.
Products
Complete, readable source you own outright. Small enough to read end to end before you trust it with anything.
Keystone
A multi-tenant B2B SaaS starter kit. Organizations, invites, and row-level
security enforced by the database itself, not just in app code.
$49one-time
Get Keystone →
Per-organization Stripe billing for Keystone. Subscriptions, plan gating, webhooks, wired into the org model.
Battle-tested Postgres row-level security patterns, each with a runnable proof that it holds.
Guides
Row-level security fails quietly. A policy that is subtly too permissive looks exactly like a correct one, right up until someone reads another tenant's data.
How these are built
A starter kit is a trust purchase. You are inheriting someone else's decisions about the parts hardest to verify.
Security at the boundary
Access rules live in the database, where a mistake in application code cannot route around them.
Small enough to audit
No framework on a framework. You can read the whole thing in an afternoon and know exactly what you shipped.
Proven, not asserted
Every security claim ships with a test that fails when the claim stops being true.
Honest about the edges
Every product lists what it does not do yet, on the pricing page, before you pay.
Start on the part that is actually yours.
One-time payment, full source, unlimited personal and commercial projects.