01
Reset tickets are silent burn
Every password reset costs support time and some users never come back. Passkeys turn the loop into one device prompt.
WebAuthn for small SaaS
Add passkeys to your SaaS in 48 hours
Ship passwordless login with a DIY template ($49) or book a fixed-fee install ($299). Recovery codes, browser matrix, and a PR you can merge.
Checkout opens soon via Creem. Nothing is charged yet.
Why now
02
Phishing-resistant by design
WebAuthn binds each credential to your RP ID, so a look-alike domain cannot use it. Stolen passwords stop being the default way in.
03
OS-level UX users already know
iOS, Android, Windows and macOS already prompt for Face ID, fingerprint, PIN or a security key. Your users have seen it before.
30-second walkthrough
Click through the three screens the template ships: sign up, save a passkey, manage keys.
demo.passgate.local / sign-up
Create your account
ana@acme.dev
No password to choose, store or reset.
Save a passkey for demo.passgate.local?
Your device asks for Face ID, fingerprint or screen lock. The private key never leaves it.
Passkeys
MacBook Pro · Touch IDCreated today · last used 2 min ago
RevokeiPhone · iCloud KeychainSynced passkey · last used yesterday
RevokeSimulated screens. This page makes no real WebAuthn call.
In scope / out of scope
In
- WebAuthn register, login, list, revoke
- Recovery codes + storage guidance
- Next.js example or Supabase migration path
- CHECKLIST (30) + TEST_PLAN browser matrix
- Install: PR + 5–8 min walkthrough + 7-day email support
Out
- Payments / billing integration
- Enterprise SAML / multi-tenant SSO
- Native iOS / Android SDKs
- Full security audit or pentest
- Multi-region RP / custom IdP federation
Pricing
Fixed fees. Scope written into the order. Not a security audit.
Template
$49
DIY ZIP + checklist + test plan
- nextjs-webauthn runnable example
- supabase-migration steps
- CHECKLIST.md (30 items)
- TEST_PLAN.md + commercial LICENSE
Install
$299
Done-for-you on one web app · 48h
- PR: register / login / list / revoke + recovery
- DELIVERY.md (RP ID, CORS, prod)
- Walkthrough video 5–8 min
- 7-day email support
Install + notes
$499
Install plus threat-model notes & test record
- Everything in Install
- Threat-model notes for your stack
- Executed TEST_PLAN record
- Priority scheduling
Stacks we ship against
Next.js
SimpleWebAuthn
Supabase Auth path
Custom JWT session
Clerk decision notes
Clerk users get a decision note (keep vs migrate). We do not reverse-engineer Clerk.
FAQ
Is this a security audit?
No. PassGate is implementation help and a template. It does not certify your product. Responsibility boundaries are written into the order.
What if my repo access is delayed?
The 48h clock starts when we have agreed access and a signed-off stack questionnaire. Waiting time is marked on the ticket.
Do you handle Safari autofill quirks?
Yes, within the web browser matrix in TEST_PLAN. Native app SDKs are out of scope.
Can I upgrade from template to install?
Yes. Template buyers can book an install. The $49 is not deducted unless a promotion says so.
Refunds?
Template: digital goods, refunded only if the ZIP fails to download within 24h and we cannot fix it. Install: if we miss the 48h window for reasons on our side, 50% of the install fee is refunded.
Disclaimer
PassGate does not provide a security audit, penetration test or compliance certification (SOC 2, ISO, etc.). You remain responsible for production configuration, RP ID, secret handling and release decisions. Each order documents what is in and out of scope.
Ready when checkout opens
See every file in the template pack, or leave your email there. It stays in your browser until checkout opens.