I found the Founder’s Checklist in a thread far above here, and is there an equivalent for the infrastructure side of things to support production? As soon as any code is running for your SaaS, you’re probably going to want to start thinking about metrics, paging, collecting logs, building dashboards, payment/subscription provider integration, etc., and I’m curious if there’s a collection of “here’s everything we had to build/buy and some totally reasonable choices in those areas”.

Hey everyone! Has anyone built a wallet like system for payments for their web app where the customer makes a payment only once and the amount sits in their account until they use it or invest it? Is it just using stripe/razorpay to make a one-time payment and keeping our own ledger in a database? similar to Google Voice credits, Google Ads (in India) or Robinhood.

Hello everyone! At BoxyHQ we are sharing (absolutely free) a new building block to help SaaS products be enterprise-ready, it's the turn of our open source Directory Sync - plug and play. Besides SSO and directory sync, it would be great to know what else are enterprise customers asking for. Please share any insights that you may have since it will help us shape things and most importantly help the ecosystem raise its security standards. Thank you!

Hey, we just sent everyone the latest Hacking SaaS newsletter, with crowdsourced advice on how to pick a DB, how to design a schema for billing, how to set up a bug bounty program and the cutting edge DBOS (via @Felix GV). https://hackingsaas.substack.com/p/how-to-choose-a-database?sd=pf

Hello SaaS developers 🙂 We (Nile Platform, https://www.thenile.dev/) are looking for developers who are willing to try our quickstart and/or examples and give us feedback. DM me if interested and I'll send you pointers. Thank you in advance ❤️

Hi everyone! Rhea here!👋 I'm a growth marketer in Wizly ✨- a curated community of experts offering insights, micro-learning sessions, and 1:1 support to confidently move forward in your work. If you have questions related to product management, marketing, talent acquisition and more.. feel free to send me a direct message! 💬 Also would love to get connected with the awesome peeps here: https://www.linkedin.com/in/rhea-mae-reanoga-908292137/

👋 Hi everyone! What are your thoughts of multi-channel GTM and Usage Based Pricing (UBP) for SaaS? Would love to hear your thoughts. As a side note, we’re beta testing our platform, which lets you sell easily on multi-cloud marketplaces: AWS, GCP, Azure, Salesforce, Snowflake, etc. We do that by managing product listings, offers, contracts, metering & billing across all marketplaces, all in one platform. Let me know if you’d like to try it out

Hi everyone, excited to be here. I'm Johana, Growth Manager at Mavity. We help startups build on-demand creative teams in the fraction of the cost of a traditional agency. We work with top creatives and offer a project manager so we can assure a top project quality. At the moment we are working with some SaaS companies with pitch decks, branding, content creation, product animations, maketing collateral and more. More than happy to be here and help anyone who needs it. 😀

Every SaaS product has some user/account/agent related configuration. We typically need to provide CRUD operations on those configs, let the admins/users update the configs from the UI and send that config through the control plane in some cases to the data plane. We are going to implement one such service right now and this will be the 4th time i'm implementing such service 🙂 If this resonates with you and have seen/implemented such config service, I'd love to brainstorm and share your learnings. To start with, have you see any OSS OOB implementations for such pattern? Thoughts?

I am seeing people started getting together in person again, and I'm wondering if there's any interest from this community. Can you respond with +1 to this message if you would be interested in attending the first ever SaaS Developer In-Person Meetup somewhere around Mountain View, CA? We'll figure out a good day/time and discussion topics, but for now just upvote if the general idea and location work for you.

New SaaS Developer video: Access control for SaaS is a vast and complex space. @dan norwood will be our expert guide and take us from first steps all the way to advanced scenarios. We start with overview of the popular approaches, match them with customer requirements, learned how to integrate access control in existing architectures and then explore how a good product design can take access control from "must have" to a delightful customer experience. (small plug: Nile, the company that @dan norwood, @Ram and myself founded, is building a control plane for Infra SaaS. Access control built-in. Check us out: https://thenile.dev)

For those who may want to check it out, the Venice code repository is now public on GitHub: https://github.com/linkedin/venice

Blog post coming out tomorrow (Monday). Video of the Strange Loop talk sometime in the next week+.

What do you guys use for your business analytics? We want to start gathering information and events and have non-techie users generate reports out of them. Im thinking somewhere along the lines of mixpanel for example. But mixpanel only has a concept of

user

and

events

. I want more data types than just

user

🙂 Any recommendations? 🙂

Have you used or know any Infra SaaS with a great end-user facing o11y (metrics, events, traces, visualizations, ...) story?

Was just chatting with @Gwen Shapira about one of the Twitch shows AWS SaaS Factory runs - Building SaaS on AWS. We have 25 episodes recorded to date. Some are technical topics on specific SaaS techniques (EKS, IoT, Istio) or SaaS-friendly services (CloudZero, Stripe), others feature SaaS companies (Dremio, FaunaDB) diving into how they build their SaaS solutions on AWS. Anyway, thought it might be useful to some of the builders on here...

Hey Guys! New in the SaaS business world, and would like to get some ideas/recomendations on how to calculate ROI and Time to First Value. Do you draw a user journey with the milestones and how % of product adoption is needed to ensure better return/value?

Startup Programs Has anybody tried applying to both Google Startup Program and Microsoft Startup Program? 🙂 Can you only apply to one? any drawback to applying to both? any other experience you want to share? 😄

I just interviewed @Buchi Reddy Busi Reddy and we discussed API security. It was a good discussion. He promised to share here any OSS tools for validating infrastructure security. I promised to share all the discussions on Hacker News about JWT being insecure. Context: Buchi and myself agreed that JWT can be secure if used correctly, and discussed some best practices for this. In fact, this is the main take away from all of the discussions below too. But there is just a lot of FUD going around. So I am sharing these links in the interests of having everyone educate themselves. JWT tokens are the de-facto way machine-to-machine authentication works today, and are extremely popular for browser-based session cookies too. It isn't about whether or not you will use them (everyone does and you'll have no choice), it is about how to use them. https://news.ycombinator.com/item?id=33018135 <- from this week (!) https://news.ycombinator.com/item?id=21783303 <- has lot more links in the first comment https://news.ycombinator.com/item?id=18804875 <- this has comments from tptacek, which are the most frequently cited objections to JWT (but also the least balanced, IMO) https://news.ycombinator.com/item?id=27136539 https://news.ycombinator.com/item?id=24346317 <- A bit funny, it has been 249 days since the last JWT vulnerability... About the same as Log4J? Lots more: https://hn.algolia.com/?dateRange=all&amp;page=0&amp;prefix=false&amp;query=jwt&amp;sort=byPopularity&amp;type=story And more on Macaroons, which try to replace JWT in some contexts. So far, not very successfully: https://hackingdistributed.com/2014/05/16/macaroons-are-better-than-cookies/ <- The blog is by Emin Gün Sirer, one of the most respected distributed crypto researchers.

@Gwen Shapira Here is the Project I was mentioning, which trims the docker image to cut down unnecessary libraries/code and helps reduce the attack surface and makes it secure. This is OSS. https://github.com/docker-slim/docker-slim

This one as well good project in this regard. https://github.com/GoogleContainerTools/distroless

Hey folks, Which annual SaaS events are must-visit for you? We are working on a no-code mobile app builder SaaS product. We would like to network globally. Which events are tailored for this? Best regards

BTW, the next episode of Building SaaS on AWS (on the AWS Twitch Channel), will be a SaaS Panel including our own @Gwen Shapira, and Co-Founder and CEO of Solvo - Shira Shamban (and a few AWS folks like me). AND we are looking for questions from the community 👀! If you've got any put them in the survey here ℹ️, or join us live and ask away!

^^^ Please share your questions 🙏 No question is too newbie and while some question may be too hard - I always welcome a challenge.

Oh, and definitely mark your calendars for the Twitch. It will be 🔥

If you haven't yet, check out @Buchi Reddy Busi Reddy interview on our community channel. We talked about bad things that can happen to good public APIs and the shifting-left of the application security field. If you haven't hired your first security engineers yet, this episode is a must-watch:

awesome this is great

and this week's Hacking SaaS should be in all your mailboxes. But just in case: https://hackingsaas.substack.com/p/hacking-saas-7-mostly-platforms?sd=pf

btw, the newsletter now has 1499 readers. Here's what the growth looks like 📈 :

@lalitkale shared this on LinkedIn and I thought it is a great summary of HA/DR options: https://aws.amazon.com/blogs/architecture/understand-resiliency-patterns-and-trade-offs-to-architect-efficiently-in-the-cloud/