H S B R .
AI booting
tokenizeembedretrievereasonrespond
HSBR APP Software · SaaS · AI v2026.07
Now booking — Q3 2026 2 slots open Avg reply < 1 working day HSBR Innovations LLP · India · Canada v2026.04 · Refreshed today Now booking — Q3 2026 2 slots open Avg reply < 1 working day HSBR Innovations LLP · India · Canada v2026.04 · Refreshed today
HSBR Innovations HSBR Innovations
Sign in Get started
Theme
contact@hsbr.online +91 8606 60 60 65 WhatsApp us HSBR Innovations LLP · Mampad, Kerala
Studio/HSK Stack. Our SaaS foundation
  • Powered products 6 in production
  • Battle-tested since 2023
  • Time saved ~6 weeks per build
  • License Used on every HSBR engagement

HSK Stack. Our SaaS foundation

A battery-included foundation. Auth, billing, multi-tenancy, RBAC, audit logs, background workers and a polished admin panel — pre-wired, opinionated, production-tested across six of our own products.

In the box

What HSK
ships with.

Sixteen capabilities you'd otherwise build, integrate, debug and document yourself. Every one is opt-in, every one is documented, every one is in production at HSBR.

Auth & SSO

Email + password, magic links, Google / Microsoft / GitHub OAuth, SAML SSO, TOTP & WebAuthn 2FA.

Core
Multi-tenancy

Row-level by default. Schema or domain isolation when you outgrow it. Tenant-scoped queues + cache.

Core
RBAC & gates

Roles, abilities, team membership, granular policy gates with inheritance.

Core
Billing

Stripe + Razorpay + Paddle. Plans, seats, metered, trials, dunning, customer portal.

Core
Audit log

Every model change, every actor, every IP. Diffable, exportable, GDPR-compliant.

Core
Feature flags

Per-tenant, per-user, percentage rollouts. Local overrides for dev. UI in admin.

Core
Queues & jobs

Horizon-backed. Retry policies, rate limits, named queues per workload class.

Core
Admin panel

Filament-based. CRUD, search, filters, bulk actions, impersonate, soft-delete UI.

Core
Transactional email

Postmark / SES adapters, signed unsubscribe, MJML templates, preview UI.

Core
Webhooks

Inbound & outbound. Signatures, replay protection, retry queue, dead-letter handler.

Core
API gateway

OpenAPI-first. Token + OAuth2 client creds, rate-limit tiers, scoped abilities.

Core
Notifications

In-app inbox, email, push, SMS — same API, per-user preferences, digest support.

Core
Observability

Sentry, OpenTelemetry, structured logs, request IDs, slow-query inspector.

Add-on
File storage

S3 / R2 adapters, image variants on-demand, signed URLs, virus scan hook.

Core
Search

Meilisearch / Typesense scout drivers, per-tenant indexes, async indexing.

Add-on
Compliance

GDPR delete & export, data retention, encrypted at rest, redaction policies.

Add-on
Under the hood

Opinionated.
Not magical.

  1. /01

    Modular monolith, not microservices.

    One repo, one deploy, one database. Modules are PHP namespaces, not network boundaries — you only pay the distributed-systems tax when scale earns it.

    Architecture
  2. /02

    Action classes over fat controllers.

    Every business operation is an invokable Action. Easy to test, easy to queue, easy to call from a controller, command or job.

    Pattern
  3. /03

    Livewire-first UI, Vue when you need it.

    Server-rendered, reactive components for 90% of the admin and tenant UI. Vue islands for richer surfaces — same backend.

    Frontend
  4. /04

    Queue everything that isn't a render.

    Email, webhooks, exports, reports, even some lookups. Horizon dashboards, retry policies, rate limits — all wired.

    Infra
  5. /05

    Tests that match the shape of the code.

    Pest unit tests at the Action layer, browser tests for the critical user flows. CI fails fast on the things that matter.

    Testing
  6. /06

    Observability is not optional.

    Every Action logs structured events, every request carries a trace ID, every slow query gets logged. You'll know what broke before the user calls.

    Operations

Got a SaaS idea? Let's start it on HSK.

WhatsApp · +91 8606 60 60 65