
NestStack
next-saas-starter
Next.js 16 + Stripe + Clerk boilerplate
Push any Docker image or generate one from a prompt. NestStack handles the deploy, the launch assets, and the marketplace. Bring any stack — Next.js, Python, Go, Rust, anything containerised.
How it works
Three steps. Nothing else to learn.
01 — Push
Push a Docker image with `neststack push`, upload from the dashboard, or generate an app from a prompt. Any stack, any language.
$ neststack push my-app:latest02 — Deploy
NestStack scans, sandboxes, and ships your image to a global edge runtime. You get a live URL with auto-SSL before your coffee cools.
✓ Deployed to https://magic-app.run.neststack.app03 — Ship
Generate branded launch assets in one click. Publish to the marketplace. Hand off to a customer with white-label. Or just let it run.
✓ OG image, logo, hero — generated and liveThe product
A dashboard that gets out of your way. Push an image, click deploy, watch the live URL come up. That's it.

AI asset studio
Click a button. Get a brand-coherent logo, hero, OG image, or empty-state illustration in seconds. No designer queue. No Figma file.

Logo
1024 × 1024 · SVG + PNG

OG image
1200 × 630

Hero illustration
3840 × 2160

Empty-state art
Per dashboard page

Marketplace banner
1600 × 900

Social launch graphics
IG / X / LinkedIn
Powered by Gemini Nano Banana · brand-aware prompts · 4 sizes per asset
Security
The same isolation guarantees we'd want for ourselves. No mocked checkmarks.
Every app runs in its own isolated Fly Machine. No shared kernel, no host mounts, no privileged containers.
Trivy scan on every image push. Critical CVEs block deploy. Override on Pro+ with audit trail.
Instance metadata endpoints blocked. Internal-only services unreachable. Per-tenant rate limits at the edge.
Filesystem read-only unless you opt in. Resource limits enforced (CPU, memory, disk).
Abuse detection runs continuously. Automatic suspension on crypto-miner / phishing signatures.
Every API mutation is logged with actor, action, target. Immutable archive after 30 days.
Pricing
No surprise infra bills. Metered overages only kick in past plan limits, never silently.
Kick the tyres. Ship a side project. No card.
For indie hackers shipping real apps.
Five seats, shared projects, role-based access.
White-label, SLA, SSO, dedicated infra.
Metered overages: £0.50 per AI asset above plan · egress overage £0.05 / GB · compute overage £0.02 / hour
Marketplace
Discover apps the community has already battle-tested. One click forks the image, your branding, your domain.

NestStack
Next.js 16 + Stripe + Clerk boilerplate

Community
RAG over your docs with FastAPI + Chroma

Community
Auto-mod bot in Go, deploys in 30s

Community
Markdown blog with built-in OG generation
Coming with launch — these are previews of the experience.
Join the waitlist and you'll get a Pro invite when we open early access. No spam, one email when it's time.