I've built 4 SaaS products from scratch. Every single time, I spent the first 2-3 months on infrastructure before writing a single line of product code.
Let me break down exactly where that time goes — and what it actually costs.
The Setup Tax: What Nobody Tells First-Time Founders
When you start a SaaS, you don't start building your product. You start building:
- Authentication
- Payment processing
- Email system
- Admin dashboard
- Multi-tenancy
- Deployment pipeline
- Security hardening
None of these are your product. But you can't ship without them.
The Real Hours Breakdown
| Component | Time (Hours) | What's Involved |
|---|---|---|
| Authentication | 40-80 | Email/password, OAuth, magic links, 2FA, JWT refresh rotation, email verification, account lockout, password reset |
| Stripe Integration | 20-40 | Subscriptions, webhooks (the edge cases alone take weeks), customer portal, invoices, payment retry, usage billing |
| Multi-Tenancy | 30-50 | Org model, role system (RBAC), team invitations, data isolation, org switching |
| Admin Dashboard | 20-30 | User management, revenue stats, audit logs, search, pagination |
| Email System | 10-20 | Template design, transactional emails (welcome, reset, invitation, invoice), retry logic |
| Deployment | 20-40 | Docker setup, CI/CD pipeline, infrastructure-as-code, SSL, domains |
| Security | 15-25 | Rate limiting, CORS, CSP headers, API key management, audit logging, GDPR |
| Total | 155-285 hours |
At $50-$100/hour (freelance or opportunity cost), that's $7,750-$28,500 in developer time.
And that's an optimistic estimate. I'm not counting:
- Debugging Stripe webhook edge cases at 2 AM
- The auth vulnerability you discover 3 months in
- Rewriting your tenant isolation after a data leak scare
- The deployment pipeline that works locally but breaks in production
The Math Speaks for Itself
"But I'll Learn More by Building It Myself"
Yes. And you'll also:
- Spend 3 months before your first user
- Burn through motivation on solved problems
- Ship auth with security holes you don't know about yet
- Build a worse version of what already exists
Learning is valuable. But if your goal is to ship a product, every hour on boilerplate is an hour not spent on the thing that makes your SaaS unique.
"But Boilerplates Are Hard to Customize"
This is the one legitimate concern. Bad boilerplates are:
- Over-abstracted (10 layers to change a button)
- Poorly documented
- Abandoned after launch
- Built as npm packages you can't modify
Good boilerplates give you full source code — you own it, you modify it, you delete what you don't need.
What a Good SaaS Starter Actually Saves You
When I finally packaged my boilerplate into Cloudrix, I made sure it included everything I'd been rebuilding:
Auth that's actually complete:
- Email/password + Google OAuth + magic links + 2FA (TOTP with backup codes)
- JWT with refresh token rotation
- Account lockout after failed attempts
- Email verification flow
Stripe that handles the edge cases:
- Subscriptions, one-time payments, usage-based billing
- Customer portal, webhook handling, invoice management
- Payment retry logic — the stuff that takes weeks to get right
Multi-tenancy that doesn't leak data:
- 4 RBAC roles (Owner, Admin, Member, Viewer)
- Automatic tenant isolation at the repository level
- Developers cannot accidentally query another tenant's data
Enterprise security you'd skip "for now" and never add:
- Rate limiting (3 tiers)
- HMAC request signing
- API key management (generate, rotate, revoke)
- Audit logging with 20+ action types
- GDPR data export + deletion
Deployment you don't have to figure out:
- Docker Compose for local dev
- Terraform for AWS (ECS, RDS, ElastiCache, S3, CloudFront)
- GitHub Actions CI/CD with approval gates
The Numbers
| Metric | Cloudrix |
|---|---|
| Source files | 130+ |
| Test files | 55+ |
| API endpoints | 50+ |
| TypeORM entities | 8 |
| Email templates | 7 |
| RBAC roles | 4 |
| Audit actions | 20+ |
The Market Gap
The SaaS boilerplate market is dominated by Next.js: ShipFast ($169), Supastarter ($299), MakerKit ($249).
Cloudrix is built on NestJS 11 + Angular 21 — the only production-grade option for teams that prefer enterprise-grade TypeScript architecture.
Pricing
- Free: MIT-licensed lite version on GitHub
- Starter: $149 — auth, Stripe, email, admin dashboard
- Pro: $249 — + multi-tenancy, Docker, BullMQ, webhooks
- Enterprise: $399 — + AWS Terraform, CI/CD, GDPR, Sentry
One-time purchase. Lifetime updates. 14-day refund guarantee.
Live demo: demo.cloudrix.io
If you're about to start a SaaS and you're budgeting 3 months for infrastructure — don't. Spend that time on the features your users actually want.
What's the most time you've wasted rebuilding boilerplate? I'd love to hear your horror stories in the comments.
Top comments (0)