Production-ready Go SaaS source code with authentication, PostgreSQL, HTMX, and a CI-enforced 94% production coverage minimum. Choose the focused Starter foundation or the complete Professional edition.
No frameworks, no magic, no vendor lock-in. Just clean Go code you can read, understand, and ship.
JWT with refresh token rotation, OAuth (Google, GitHub), TOTP MFA with backup codes, and magic link passwordless login. All wired, all tested.
StarterCI enforces a 94% minimum across production code, with required PostgreSQL integration tests. Refactor with confidence.
StarterACID transactions, SQL migrations with golang-migrate, type-safe pgx v5. HTMX + DaisyUI frontend: no Node, no webpack, no build pipeline.
StarterSubscriptions, free trials, customer portal, and webhook handling with signature verification. The payment layer done correctly.
ProfessionalOrganizations, teams, and a 4-level role hierarchy (admin, member, viewer, guest). Invitation flow with transactional acceptance.
ProfessionalUser and org CRUD, system stats, and audit logs. Included and working. Saves 20+ hours of internal tooling work.
Professionalrs_ prefixed API keys with revocation. Outgoing webhooks with HMAC-SHA256 signatures, delivery logs, and retry.
Professional adds an in-memory background job queue with retry and a reusable local file-storage module. Transactional SMTP email is included in both editions.
ProfessionalOne command starts everything. Deployment guides for Docker, Fly.io, Railway, DigitalOcean, and AWS. Prometheus metrics included.
StarterHTTP Request │ ▼ ┌──────────────────────────────────────────────┐ │ Chi Router │ │ CORS → RateLimit → Logging → Auth │ └──────────────────┬───────────────────────────┘ │ ▼ ┌──────────────────┴───────────────────────────┐ │ Handlers │ │ auth · user · org · admin · apikey · webhook │ └──────────────────┬───────────────────────────┘ │ ▼ ┌──────────────────┴───────────────────────────┐ │ Services │ │ AuthService · OrgService · BillingService… │ └──────────────────┬───────────────────────────┘ │ ▼ ┌──────────────────┴───────────────────────────┐ │ Repository (PostgreSQL) │ │ UserRepo · OrgRepo · APIKeyRepo · … │ └──────────────────────────────────────────────┘
One-time payment. Perpetual use of your downloaded source, plus 12 months of updates.
The honest comparison against the free alternative.
| Feature | RigorStack | LastSaaS (free) |
|---|---|---|
| Database | PostgreSQL (ACID) | MongoDB |
| Test coverage | 94% minimum, CI enforced | Unknown |
| Frontend | HTMX (no build step) | React 19 SPA |
| Admin dashboard | Included | None |
| Multi-tenancy | Orgs + RBAC | None |
| Webhooks | HMAC signatures + logs | Basic |
| License | Commercial | MIT |
| Support | Responsive maintainer | Community |
Both editions are one-time purchases with complete source code for the features included.
RigorStack combines PostgreSQL, a server-rendered HTMX interface, tested authentication, and documented deployment foundations. Both editions permit commercial products you own; Professional additionally covers client work and includes the complete feature set.
No. The license is a one-time purchase and your right to use downloaded versions is perpetual. The purchase includes 12 months of update access; later updates may require an optional renewal. No product-interface attribution is required.
Yes. RigorStack ships with a server-rendered frontend using Go's html/template, HTMX for dynamic interactions, and Alpine.js + DaisyUI for styling. You get login, registration, dashboard, settings, API keys, and billing pages out of the box. The REST API is also there if you prefer a custom SPA.
Yes. The repository layer is behind interfaces, so everything is mockable without a real database. Implement the interfaces for MySQL, SQLite, or anything else.
Go 1.26 or later.
Own the source. Start from a CI-enforced 94% production coverage baseline. Ship on your terms.
Choose Your Edition →