Build Your SaaS in Days, Not Months
Blazor Blueprint - Professional Blazor Server SaaS starter template with enterprise-grade features. Launch faster with .NET 10, Clean Architecture, and production-ready code.
🔓 Source-available on GitHub • Free under £100k/yr revenue • Commercial licence from £499 (excl. VAT) above that
What is Blazor Blueprint?
Professional SaaS starter template with enterprise-grade features
Blazor Blueprint is a starter template you run and extend—not a hosted product. It eliminates months of development time by giving you enterprise-grade features, security, and scalability out of the box. Built-in AI integrations with OpenAI, OpenRouter, Ollama, and n8n workflows enable powerful AI-powered features and intelligent automation.
Key Features
Production-ready features that accelerate your SaaS development
Core Platform & Architecture
.NET 10
Latest .NET platform with enhanced performance, new language features, improved runtime capabilities, and cutting-edge development tools.
Blazor Server
Real-time UI updates with server-side rendering, SignalR integration, and seamless user experience without page refreshes.
Multi-Tenant Architecture
Complete multi-tenant architecture with isolated data, custom domains, and tenant-specific configurations.
.NET Aspire Integration
Built with .NET Aspire for orchestrated development, service discovery, resilience patterns, and cloud-native deployment.
Clean Architecture
Built with Clean Architecture principles, Domain-Driven Design, and SOLID patterns for maintainable, scalable code.
Plugin Architecture
Extend functionality with custom plugins without modifying core code. Create modular plugins for navigation, routes, admin pages, and services while keeping core updates seamless and non-invasive.
API Integration Management
Centralized API integration system for managing external services and third-party connections. Built-in support for OpenAI, OpenRouter, Ollama, and n8n workflows with configurable AI models and workflow inputs.
.NET Worker Service
Scalable background processing using .NET Worker Service for handling push notifications, data cleanup, and AI-powered workflows. Queue-based processing on Redis streams for automatic scaling and high availability. Runs as a separate worker, or in-process in single-container Lite mode — one transport switch, same handlers either way.
User Interface & Experience
Modern UI/UX
Fluent UI components with responsive design, dark mode, and keyboard-accessible, ARIA-annotated controls throughout.
Progressive Web App
Full PWA support with app manifest, installable experience, and native app-like interface. Organisations on their own custom domain ship their own installable app with their own branding; organisations on the platform host install the operator's.
Advanced Theme Management
Dynamic theme switching with light/dark mode, user preference persistence, and site-level theme configuration.
Security & Authentication
ASP.NET Core Identity
Robust user authentication and authorization system with secure password management and user account lifecycle.
Two-Factor Authentication (2FA)
Enhanced security with TOTP-based two-factor authentication, QR code setup, and backup codes for account protection.
Passkey Authentication
Modern passwordless authentication using WebAuthn passkeys. Users can sign in securely with biometric authentication (fingerprint, face recognition) or PIN - faster, more secure, and resistant to phishing attacks.
External Login
Social OAuth integration with Facebook, Google, and Microsoft, so users can sign up in seconds with their preferred provider — no password required.
Enterprise SSO (OIDC)
Per-organisation single sign-on against any OpenID Connect provider — Entra ID, Okta, Auth0, Google Workspace, JumpCloud, and more. Each customer connects their own IdP so employees log in with their corporate identity.
Active Sessions & Security Activity
Users see every device signed in to their account — browser, IP, last active — and can sign out one or all of them. Alongside it, a personal security log: sign-ins, password and 2FA changes, recovery-code use, role changes. The account-security surface people expect from a real product, already built.
Brute-Force Protection
Configurable account lockout on repeated failures, plus a shared rate-limit store that counts across instances — so scaling out doesn't multiply the attempts an attacker gets.
Role-Based Access Control
Comprehensive permission system with user roles, claims-based authorization, and fine-grained access control.
User Management
Complete user lifecycle management with profiles, preferences, and data export.
Privacy & Legal Policies
Cookie consent management and configurable legal policies.
Communication & Notifications
SignalR Integration
Real-time communication with SignalR hubs, live updates, and seamless bi-directional messaging.
Email System
Multi-provider email system supporting SendGrid, SMTP, MailerSend, and Mailgun with templates.
Push Notifications
Browser push notifications with service worker integration, user permission management, and real-time delivery.
AI Integrations
Built-in support for OpenAI ChatGPT, OpenRouter, Ollama, and n8n workflow automation. OpenRouter and Ollama are OpenAI-compatible, so you can point the whole AI surface at a model you host yourself and never call an external API.
SMS
Outbound SMS through Twilio, with per-organisation sender credentials, STOP-keyword opt-out handling scoped per sender, and delivery-status callbacks routed back to the sending tenant.
Inbound Email
Receive and process email per organisation via Mailgun, with each org routed by its own unguessable address — no shared mailbox to spoof your way into.
Webhooks, In & Out
One signature-verified, rate-limited inbound endpoint with per-provider handlers, plus outbound subscriptions with HMAC-signed deliveries, retries and a recovery sweep. Fourteen event types fire out of the box — payments, mandates, membership changes and subscription billing — and your own code adds its own alongside them.
Payments & Billing
Take Payments
Stripe Checkout, GoCardless Direct Debit and PayPal Orders, behind one payment abstraction. Credentials are per-tenant, so each organisation's money lands in its own merchant account — the arrangement regulators expect.
SaaS Subscription Billing
Charge your own tenants for access — monthly, yearly, or a one-off year. Plan catalogue, trials, proration, dunning with retries, and entitlement gating on features, seats and premium apps. Off by default; switch it on when you're ready to sell.
PDF Rendering
Compose documents from templates or stamp values onto existing PDFs — wired into every host process, so it's available anywhere without per-host setup.
Administration & SEO
Two Admin Consoles
An organisation console for members, roles, branding, billing and per-org settings — and a separate platform console for the operator: every organisation, platform-wide users, integrations, plugin policy, storage and a live infrastructure monitor with health checks.
SEO & Sitemap
Built-in sitemap.xml and robots.txt generation with per-org configuration, canonical URLs, and metadata controls.
Data & Storage
Database Support
Pluggable data layer — MongoDB (default), PostgreSQL, or SQL Server — behind a single repository abstraction, with retry policies and paged query support.
Data Retention Management
Automated data cleanup and retention policies for notifications, email messages, and user data with configurable cleanup schedules.
File Storage
Per-organisation uploads across five backends — GridFS, Azure Blob, S3, PostgreSQL and SQL Server — behind one interface. The default follows your database, so nothing extra to deploy. Each file records where it was written, so switching backends never orphans old uploads.
Field-Level Encryption at Rest
Tag a property and it is encrypted in the database on every write and decrypted on read — API keys, OAuth secrets, TOTP seeds and personal data. Backed by a rotating, shared Data Protection key ring, on all three database backends.
Performance & Monitoring
Resilience Patterns
Polly-based retry policies with exponential backoff for database operations and authentication services, plus custom retry logic for AI and email services.
Caching
Redis-powered multi-layer caching with page output caching, API controller response caching, and SignalR backplane for optimal performance and scalability.
Monitoring & Observability
OpenTelemetry integration with distributed tracing, health checks, metrics collection, and runtime instrumentation for production monitoring.
DevOps & Deployment
Container Ready
Docker configuration with multi-stage builds, Docker Compose, and container orchestration support.
Automated Deployment
Multiple CI/CD pipeline options: Azure DevOps or GitHub Actions, pushing to the container registry of your choice (Docker Hub, Azure Container Registry, or GHCR) — one multi-stage pipeline that builds, tests, and deploys, with database migrations gated on success.
Microservice Example
Example application service demonstrating JWT authentication, client credentials flow, and secure API endpoints as a microservice pattern.
Licensing
One product, every feature — free until you're a real business
💼 Free — the complete source and every feature, free to use (including commercially) while your business is under £100k/year revenue. Free deployments keep a small "Powered by Blazor Blueprint" credit.
🏢 Commercial & Agency — once you pass £100k/year, a one-time commercial licence keeps you going. Same full product — no features are gated — and the credit comes off.
Everyone gets the complete source code — build and ship your own features on top.
Past £100k: Commercial £499 (1 dev, 1 project), Team £999 (up to 5 devs, 3 projects), or Agency £3,999 (unlimited devs + projects) — one-time and excluding VAT, with no recurring fees. Each paid tier also includes a year of updates, email support, and the right to drop the "Powered by" credit. See licensing →
Ready to Build Your SaaS?
Start building immediately - no credit card required
Get started in minutes. Download the full product and start building your SaaS application today — free to use, including commercially, while you're under £100k/year. Past £100k, a one-time commercial licence (from £499, excl. VAT) applies.
🔓 Source-available on GitHub • Free under £100k/yr revenue • Commercial licence from £499 (excl. VAT) above that • No recurring fees