15-minute access tokens plus rotating 7-day refresh tokens in HttpOnly, Secure, SameSite cookies, TOTP MFA with hashed backup codes, bcrypt cost 12, lockout, rate limits on login and reset, SHA-256 single-use reset tokens, email verification and session listing/revocation.

Does Baseware work well with AI agents?

Yes. AGENTS.md is the mandatory build manual, the 5-layer architecture (Route to Controller to Service to Repository to Implementation) keeps logic in place, and conventions such as kebab-case, Conventional Commits and manual DI keep generated code consistent.

PlatusForge · Open-source foundations

Build the product. We forge the foundation.

PlatusForge ships production-grade, MIT-licensed foundations for developers. Start with Baseware — the open-source SaaS starter — or follow the next solutions coming off the anvil.

Start with Baseware Explore the forge

MIT licensed
Commercial use allowed
Built in public

baseware — zsh

# clone the public repo
$ git clone https://github.com/platusforge/baseware.git
$ cd baseware && cp .env.example .env
$ docker compose up --build
✓ web  → http://localhost:5173
✓ api  → http://localhost:3000/health
→ auth + orgs + stripe + admin live.
# MIT licensed. fork it, ship it, sell it.

01 solution live Baseware — production-ready

MIT every foundation fork it, ship it, sell it

$0 forever no seats, no license keys

100% public source issues, PRs and docs in the open

The platform

A forge for the foundations every product needs.

We build the parts that aren't your product — auth, billing, tenancy, deploys — as public, reusable foundations. Every solution is MIT, documented and designed to be forked.

Open source, always

Public code and a permissive license from commit one. No black boxes, no license keys, no permission needed.

Production-grade by default

The edge cases are already handled: MFA, rate limits, webhooks, tenancy, backups and rollbacks.

Forged in public

Issues, PRs, bilingual docs and an AGENTS.md in every repo — so humans and AI agents build in the same direction.

Explore the organization on GitHub: github.com/platusforge

Solutions

One platform. A growing shelf.

Baseware is the first foundation off the anvil. Every solution that follows keeps the same contract: public source, MIT license, production-grade defaults.

Live 01 / FLAGSHIP

SaaS starter

Baseware

The open-source SaaS foundation: secure auth, multi-tenant organizations, Stripe billing, admin, audit logs, Docker and CI/CD. Ready to fork.

Express 5React 19PostgreSQLMIT

Explore Baseware

In the forge 02

The next foundation

New solutions are being shaped in public. Follow the organization to see the next one land.

Follow on GitHub

Your call 03

What should we forge next?

Missing a foundation? Open an issue and help set the next priority.

Nominate a solution

Every solution: MIT · public source · EN + PT-BR docs · built to be forked.

The problem

Every new product starts with the same six boring weeks.

Login, password reset, invites, subscriptions, webhooks, emails, containers, CI… none of it is your product — but you can't sell without it. A forged foundation gives those weeks back.

Without a forged foundation

Weeks wiring auth + Stripe + webhooks
Improvised multi-tenancy that breaks at customer #2
Manual deploys, leaked secrets, blind rollbacks
Closed boilerplate you can't audit or fork

With PlatusForge

Clone, run Docker, ship your feature on day 1
Organizations, invites and RBAC ready for B2B
Stripe checkout, portal and dunning already wired
MIT: audit, modify, distribute and sell without asking

Solution 01 What is Baseware?

The SaaS foundation, already forged.

Baseware is an open-source, production-ready SaaS starter with Express 5, strict TypeScript, Prisma 7 and PostgreSQL 16 on the backend and React 19 + Vite 8 on the frontend. It includes HttpOnly-cookie auth with MFA, multi-tenant organizations with invites and RBAC, per-organization Stripe billing, admin panel, audit logs, API keys, Resend transactional email, Docker Compose, Traefik TLS, GitHub Actions CI/CD, Jest tests and docs in Portuguese and English. MIT licensed: no keys, no seats, no tiers.

Express 5TypeScript strictPrisma 7PostgreSQL 16Zod 4StripeResendReact 19Vite 8React Router 7DockerTraefik TLSGitHub ActionsJesti18n PT-BR/ENMIT

Clone the repository Read the README

Hardened auth

Email/password + Google/GitHub OAuth, TOTP MFA, 15-min access + rotating 7-day refresh in HttpOnly cookies, bcrypt-12, lockout & rate limits.

Real B2B

Organizations, members, invites & RBAC as first-class citizens — not an improvised tenant column.

Stripe without hacks

Checkout + Customer Portal + verified, idempotent webhooks with dunning, per organization.

Admin, audit & API keys

Admin panel, audit trail & API keys ready for your enterprise plan.

Docker + real deploy

3 Compose files, multi-stage Dockerfiles, Nginx + Traefik TLS and push-to-deploy via Actions.

Built for AI agents

AGENTS.md + 5-layer open architecture: your AI ships features inside the pattern without breaking the rest.

baseware/ ├── server/src/ │ ├── routes → controllers → services │ ├── repositories → implementations │ ├── adapters (stripe, email, logger) │ └── cron, rate-limit, helmet, mfa ├── web/src/ │ ├── pages, dashboard, components │ └── i18n (pt-BR + en) ├── docs/en + docs/pt-BR ├── AGENTS.md ← manual da IA ├── docker-compose ×3 + CI └── LICENSE.md ← MIT

Architecture contract

Open architecture, zero lock-in

Strict 5-layer chain, manual DI, kebab-case filenames and Conventional Commits. Public code, MIT license and bilingual docs — any dev, human or AI, opens the repo and knows where everything lives.

Route → Controller → Service → Repository
Jest tests + security audit gate
Landing + pricing + FAQ + blog included
No license keys, seats or tiers

Honest comparison

Baseware vs. paid boilerplates

Paid kits cost $199–$349 and keep the source closed. Baseware ships the same B2B foundation under MIT — no price, no seats, no permission needed to fork.

Swipe to compare →

Criteria	Baseware	Paid boilerplates	From scratch
License and price	✓ MIT · $0	$199–$349	your time
Public source code	✓	—	✓
B2B multi-tenancy (orgs, invites, RBAC)	✓	partial / top tier	build it
Per-org Stripe billing + dunning	✓	partial	build it
Audit logs + API keys	✓	partial	build it
Ready Docker + TLS + CI	✓	partial	build it
AI-agent manual (AGENTS.md)	✓	rare	—
PT-BR docs	✓	rare	—
Fork, modify and redistribute	✓ MIT	—	n/a

Simplified comparison (Oct 2026). Features and pricing of paid kits vary by product; check each vendor's docs.

From git clone to deploy

Start in 3 steps

No signup, no checkout, no invite: the source is public.

Step 01

Clone the repository

Public and MIT. Run git clone https://github.com/platusforge/baseware.git and you're in.

Step 02

Configure and boot

Copy .env.example, set JWT_SECRET and DB_PASSWORD, then run docker compose up --build.

Step 03

Ship and own it

Fork, customize and sell. The MIT license allows commercial use and redistribution; keep the copyright notice.

Open source · MIT

Free forever. Yours to fork.

No license keys, seats or per-project tiers. Baseware is MIT: use it commercially, modify it, distribute it and sell it. Keep the copyright notice and license in copies of the source.

Commercial use Modify and distribute Proprietary product Copyright notice

Clone the repository Star on GitHub

MIT · Commercial use allowed · No warranty

LicenseMIT

$0 forever

No seats, tiers or keys.

Use commercially
Modify and redistribute
Keep your product proprietary
Keep the copyright notice

Shape the platform. Report bugs, send PRs with docs and tests, or sponsor maintenance. New solutions are on the way.

Contribute on GitHub

FAQ

Questions every dev asks before forking

Straight answers, no legalese.

Is Baseware really free?

Yes. Baseware is MIT licensed, with no paid tier, no seats and no license keys. You can use, modify, distribute and sell products built on it.

Is Baseware the only PlatusForge solution?

No. Baseware is solution 01 — the first foundation. More open-source solutions are being forged in public; the organization page is where they land.

Can I use it commercially and in client projects?

Yes. The MIT license allows commercial use, modification, distribution and resale. Keep the copyright notice and license text in copies of the source.

Do I have to open-source my app?

No. The MIT license does not require derivative works to be open source. You can keep your product proprietary.

What's the exact stack?

Backend: Express 5, strict TypeScript, Prisma 7, PostgreSQL 16, Zod 4, Winston, Stripe and Resend. Frontend: React 19, Vite 8, React Router 7, CSS Modules and PT-BR/EN i18n. Infra: Node 24, Docker Compose, Nginx, Traefik TLS and GitHub Actions.

How is auth secured?

15-minute access + rotating 7-day refresh in HttpOnly, Secure, SameSite cookies (nothing in localStorage), TOTP MFA with SHA-256 backup codes, bcrypt cost 12, generic anti-enumeration messages, lockout, rate limits on login/reset, reset tokens with SHA-256 hash, single use, 1h expiry, email verification and session listing/revocation.

Does it work well with AI agents (Cursor, Copilot, Codex)?

It was made for that. AGENTS.md is the mandatory build manual, the 5-layer architecture (Route → Controller → Service → Repository → Implementation) stops the AI from scattering logic, and conventions (kebab-case, Conventional Commits, manual DI) keep generated code consistent.

How do I contribute to Baseware?

Open an issue or send a pull request on GitHub. Read AGENTS.md before generating features and keep the English and PT-BR docs in sync.

Where can I get support?

Use GitHub Issues for bugs and feature requests. Baseware is community-supported, and you can sponsor ongoing maintenance through GitHub Sponsors.

The forge is open

Build on what's already forged.

Start with Baseware today. Follow PlatusForge to catch the next solution when it lands.

Star Baseware Follow PlatusForge