Passwordless auth
One-time email sign-in links and JWT sessions — no passwords to store, reset, or leak. Sessions live in your own Postgres.
A single Go binary with passwordless auth, multi-tenant Postgres, security middleware, and one-command deploy already wired up. Clone it, point it at a database, and start testing your idea.
One-time email sign-in links and JWT sessions — no passwords to store, reset, or leak. Sessions live in your own Postgres.
Row-level security in Postgres enforces tenant isolation at the database, so application code never hand-filters as the only barrier.
Prometheus /metrics, structured slog logging, and a /health endpoint that reports the deployed commit.
CSP with per-request nonces, CSRF protection, rate limiting, and security headers ship in the middleware chain out of the box.
Green pushes to main deploy to Dokku automatically — build, smoke test, and a live deployed-commit check, every time.
Standard-library net/http, server-rendered gohtml + HTMX, pgx for Postgres. No SPA, no ORM, no build step.
Leave your email and we'll reach out when it's ready for your hypothesis.