Seven SaaS products. Two native apps. One £49 download.

That's the whole idea. Point your coding agent (Claude Code, Cursor, etc.) at AGENTS.md — it briefs the agent on the architecture, conventions and the exact prompts to run, then walks you through the .env, Stripe keys, email, and deploy. Because there's no framework or build step and the whole app is a few readable files, the agent holds all of it in context and rarely guesses. php scripts/doctor.php tells it (and you) exactly what's still missing before launch.

Yes — hardened against the OWASP basics: parameterised SQL throughout, signed Stripe webhooks, CSRF, rate limiting, session hardening and a security checklist. It's a starter, so you still own your legal pages, secrets and deploy, but the plumbing is real.

Three zones, each with the right chrome. Your marketing site keeps the clean top nav; the moment someone signs in they land in a polished left-sidebar member app — dashboard, billing, downloads, studio — with a desktop sidebar and a mobile drawer. /admin is its own separate sidebar app for you, and tool pages like the page builder get a sticky save toolbar up top. Access is tiered: signed-in users get the base app and you gate the rest behind a plan with one check, so free users are routed to pricing automatically.

Yes — every site type ships a real no-code page builder. Style each section band (background image, colour, dark mode, full-screen hero, scroll animations), drop in 25+ blocks — a hero with a background carousel, pricing tables, FAQ accordions, galleries with lightbox, testimonials, stats, video — reorder with arrow buttons, start from ready-made sections, and watch a live preview. It renders server-side and is sanitised on save. Spin up microsites and full client sites without touching code or a build step — here is a whole site built entirely in the CMS. Stand sites up for clients in bulk, each on its own cheap box, with the CMS overhead already handled.

Yes — a complete AI image studio is one of the seven site types: prompt a FLUX model on fal.ai, generate or edit images, spend credits. Renders land in your own private R2 bucket, served via presigned URLs. Stays off until you add your FAL_KEY — full detail is in the flagship section above.

Because it's a tax you don't need. Server-rendered PHP plus a little jQuery means no bundler, no hydration, no node_modules, and no supply-chain tree to babysit — pages render instantly and work before JavaScript loads. This is the choice, not a limitation.

Better than most hosted databases people pay monthly for. SQLite serves tens of thousands of reads per second from a single file, and in WAL mode reads never block writes. It comfortably powers sites doing 100k+ hits a day — indexes, WAL, and cron backups are already wired in. This is the production database.

Rename APP_NAME, swap the copy and plans, replace the legal pages — then restyle from .env alone: 20 accent palettes × 6 type pairings × 5 hero layouts plus light/dark, so two sites built from the same download don't look related. There's even a local-only design lab bar for clicking through the combinations. The repo ships AI-handoff docs so your agent can do most of it for you.

One Hetzner Cloud VPS runs the whole stack for under $10 a month — their smallest shared-vCPU plans start around $5. Login emails on Amazon SES run $0.10 per 1,000, so 10,000 passwordless logins a month is $1 — and there's no per-login cost at all if you use the built-in Apple or Google sign-in instead (Google's is free; Apple's just needs an Apple Developer account, $99/yr, you likely already have to ship an app). No per-seat platform bills.

One download with the full codebase, pre-built into seven ready-to-run site types. In the box:

• Seven site types: subscriptions & memberships, an AI image studio, digital downloads, credit/usage metering, an API product, a mobile app backend, and the full showcase
• Native iOS (SwiftUI) and Android (Jetpack Compose) apps in clients/, already wired to the mobile backend and RevenueCat
• A marketing site, a polished left-sidebar member app and a dedicated admin app in every type
• A built-in no-code CMS / page builder on every one
• The setup, Stripe, email, deploy and security guides, plus the AI-handoff docs

Copy the folder you want and ship. You get lifetime access to the version you buy.

Checkout is handled by Stripe — no account needed up front. The moment your payment clears we email a sign-in link and code to your Stripe email address. Click it and the download is waiting in your dashboard. You can link Apple or Google sign-in to the same account if you like.

One named person or legal entity. Build unlimited own and client projects, modify the starter, deploy commercially, and let employees, contractors and AI tools work on your licensed copy. You can hand over a finished deployed product, but you cannot redistribute Simple Stack itself as reusable boilerplate or a standalone source product; a client who needs an independent starter copy needs their own licence. Your branding, content, data and original code remain yours. Full terms are in the licence and on the Terms page.

You get the version you buy, and you can re-download it any time from your dashboard. We actively use this stack on our own sites and keep refining it — but future updates aren't guaranteed or part of the price. If we ship a meaningful update, buyers are emailed so you can grab it.

Yes — try the whole thing before you spend a penny: all seven site types run as fully interactive live demos, every screen, no card, no signup, so what you click is exactly what you get. Before Checkout you expressly request immediate supply and acknowledge that the 14-day change-of-mind cancellation right ends when supply begins. Your rights if the content is faulty, not as described or cannot be supplied are unaffected.

It's been extensively security-reviewed and hardened — parameterised SQL, signed webhooks, CSRF, rate limiting and session hardening — and we run it on our own production sites. No software can be guaranteed free from every defect or vulnerability, so you remain responsible for configuring, testing, securing and maintaining your deployment. The Terms explain the responsibilities and statutory protections in plain English.