marketaiguide
makerkit.dev

Makerkit

A TypeScript SaaS starter sold as several stack variants: Next.js, TanStack Start and React Router, each paired with Supabase or with Better Auth over Drizzle or Prisma.

One-time lifetime licence with unlimited projects and ongoing updates, tiered by number of developer seats; a free MIT 'Lite' kit is published separately. Proprietary Named by Claude in 1 list this week

How Claude rates Makerkit.

Each score below is the model's own, on the rubric it wrote for that list, from what it already knows about Makerkit. Nothing here is edited by us.

The best open-source SaaS starter kits

#5 this week, scoring 7.5 out of 10. Best for Founders who want flexibility in backend choice and need solid multi-tenancy features without extreme complexity.

Tech stack & architecture 8
Next.js with Firebase or Supabase options provides modern, scalable architecture with good developer experience.
Feature completeness 8
Comprehensive feature set including multi-tenancy, subscriptions, and admin tools, though some areas need polish.
Documentation & support 7
Documentation covers most topics but can be fragmented between versions and occasionally outdated.
Customization ease 7
Reasonably well-structured code allows customization, though the multi-version approach adds some complexity.
License & pricing value 7
Mid-range pricing around $299-499 is fair for the feature set and backend flexibility offered.

Rank by week:

#5#4#5

Want a better score? How to improve your AEO.

Security headers

What Makerkit's website sends to your browser.

Scanned 2026-08-25. Grade headers F, scoring 25 out of 100.

− No Content-Security-Policy, so no defence in depth against cross-site scripting
+ Strict-Transport-Security is set
− No X-Content-Type-Options, so MIME sniffing is not disabled
− No X-Frame-Options and no CSP frame-ancestors, so clickjacking is possible
− No Referrer-Policy, so full URLs may leak to third parties
− No Permissions-Policy, so powerful browser features are not restricted
− No Cross-Origin-Opener-Policy
− No Cross-Origin-Resource-Policy
+ No server-version or X-Powered-By disclosure

This is one narrow, automated check of the HTTP response headers on the vendor's own website. It says nothing about how the product itself is built, how it stores your data, or whether it has ever been audited. A good grade here is a small signal that somebody was paying attention.

Visit Makerkit