Case No. 0158·Investigation·1,700 words

ShipFast Sold Picks and Shovels to the Indie Hacker Gold Rush

A one-week build earned a quarter of a million dollars in five months. Two years later the same product was taking $3,537 a month

By the WebTribunal Team
• 7 min read
$1.27MAll-time revenue,
founder dashboard
$135KBest month
in 2024
$3,537Trailing 30 days,
August 2026
8,424Makers who have
bought it

Sourced from ShipFast, Marc Lou’s newsletter, Streakr, Indie Hackers & vendor listings

During a gold rush, the reliable money is in picks and shovels. Marc Lou found the software version of that trade.

Thousands of developers were trying to launch a SaaS product. Every one of them had to build the same unglamorous plumbing first: login, payments, transactional email, a database, the SEO scaffolding. Lou packaged that plumbing into a Next.js starter kit called ShipFast and sold it for a one-off fee.

It worked immediately. ShipFast took $6,000 in its first 48 hours, roughly $40,000 in its first month, and a quarter of a million dollars inside five months at what Lou described as 90% profit.

Then it stopped working. By August 2026, the same product was taking about $3,537 a month.

That arc, from viral launch to near-zero, is the actual story here. It shows what a one-time-payment product can do, what it cannot do, and what happens when the thing you sell is the foundation other people build on.

What ShipFast Actually Sells

$199 to $299

ShipFast is a codebase, not a service. A buyer gets a Next.js repository with authentication, Stripe and Lemon Squeezy payments, a database layer, transactional email and a set of UI components already wired together. Pricing on the product page runs from $199 for the Starter tier to $249 for All-in, with a $299 bundle that adds Lou's course, CodeFast. Every tier includes lifetime updates and unlimited projects.

The pitch is arithmetic. The site contrasts "22+ hours of headaches" wiring these pieces together by hand against a repository where the work is done, and it counts 8,424 makers using it.

What a developer is really buying is not code they could not write. It is the removal of a few dozen small decisions, each of which is boring, each of which is a place to get stuck, and none of which gets anyone closer to knowing whether their idea works.

The Launch Was Won Before It Started

August 2023 onward

Lou built the boilerplate in about a week in August 2023. The reason it sold was what he had built in the two years before that.

He had been shipping products in public and publishing the results, wins and failures alike. By his own account he had an audience of roughly 35,000 people and a personal site drawing 500 to 1,500 visitors a day without any ad spend. When ShipFast launched on Product Hunt in September 2023, it did not need to find an audience. It already had one, made almost entirely of the developers the product was for.

Self-Reported

From One Week of Building to a Quarter of a Million

Milestones as Lou has described them publicly. These are founder figures, not audited accounts.

August 2023
Built in a week
Packaged from the setup work he was repeating across his own products
First 48 hours
$6,000
Product Hunt launch, driven by an audience that already existed
First 30 days
~$40,000
Before any paid acquisition
Five months
~$250,000
At what Lou described as 90% profit, with 1,600-plus developers buying

Source: Lou's own newsletter and posts. The margin figure is his characterisation; no cost breakdown has been published.

The margin is the part worth pausing on. A boilerplate has almost no marginal cost. There is no infrastructure scaling with customers, no support burden proportional to seats, no per-user licence to pay upstream. Once written, every additional sale is close to pure margin, which is why 90% is plausible even if unverifiable.

One-Time Payments Have a Half-Life

~$135K to $3,537

ShipFast peaked at somewhere around $135,000 in a month during its strongest stretch in 2024. Accounts differ on the exact high point, partly because Lou runs several products and some figures cover his whole portfolio rather than ShipFast alone.

What is not ambiguous is the direction. Streakr, drawing on Lou's public revenue dashboard, recorded $3,537 in the trailing 30 days as of August 2026, against an all-time total of $1,267,263.

A Best Month Against a Recent Month

The same product, roughly two years apart. Cumulative revenue keeps rising; monthly revenue does not.

Best month, 2024~$135,000
30 days to Aug 2026$3,537

Sources: contemporaneous reporting of Lou's 2024 figures, and Streakr citing his public dashboard for 2026. Different reports give slightly different peak months.

Nothing went wrong, exactly. This is what one-time-payment products do.

A subscription business keeps last month's customers and adds to them. A one-off product starts from zero every month. ShipFast had a launch spike, then a long tail fed by its founder's audience, then decay as that audience saturated, the content aged, and the category filled with alternatives. The all-time counter kept climbing past $1.2 million because it can only climb. The monthly number told the real story.

Lou's own response was to move on rather than defend the position. By 2026 his revenue had shifted toward other products, including the analytics tool DataFast and TrustMRR. Selling picks and shovels works, but the rush eventually ends, and the seller has to find the next one.

Then Everyone Started Selling Shovels

19-plus competing kits

ShipFast's first advantage was arriving early in a category that barely existed. That advantage had a short shelf life, because a boilerplate is, by construction, one of the easiest products in software to copy. The whole point is that it is generic.

The Price Ladder in a Crowded Category

One-time or lifetime pricing for the better-known Next.js SaaS starters, as advertised in 2026.

Divjoy, from $149A visual stack picker that exports a working codebase, rather than a repository to clone.
ShipFast, from $199One-off payment, lifetime updates, unlimited projects.
SaaS Pegasus, from $249Django rather than Next.js, aimed at the Python side of the same problem.
Makerkit and Supastarter, from $299Positioned on multi-tenancy, several payment providers and framework choice. Makerkit's team tier reaches $599.

Prices as advertised by each vendor in 2026 and collected from comparison listings. Discounts are common, so list prices are not what every buyer pays.

Comparison sites now track 19 or more Next.js SaaS starter kits with authentication and billing preconfigured. The feature bar has risen with the supply: multi-tenancy, usage-based billing and AI scaffolding are expected in 2026 where Stripe plus login was enough to charge $200 in 2024.

In that market, being first stops mattering and being trusted starts mattering. Which is what made the next part costly.

Selling Foundations Means Inheriting Responsibility

October 2024

In October 2024, a developer posting as Simon raised server-side validation problems in ShipFast. Within days another had described getting past the paywall in under five minutes, and reports of exposed user data followed. Indie Hackers covered the escalation as it spread across developer social media.

Lou's first public response, three days later, was not an apology. He said he had started blocking people and wrote that his feed was made of developers who think the world can be fixed with more tests. That reaction did more damage than the bugs. Supporters who had spent two years cheering the build-in-public story began to turn, with the consensus that the response was too dismissive for the seriousness of what had been found.

He later apologised, acknowledging that prioritising speed over rigour might have been defensible when almost nobody used his product, and that the standard should have risen as ShipFast's popularity did.

That concession identifies the structural problem with the picks-and-shovels trade. A normal SaaS bug affects that product's users. A boilerplate bug ships into every application built on top of it, and the people who bought it did so precisely because they did not want to audit the plumbing themselves. The cost of getting security wrong does not stay with the vendor. It propagates.

Does AI Make Boilerplate Worthless?

The obvious question

If an AI agent can scaffold authentication and Stripe billing on demand, what is left to sell?

The argument made across the category is that coding agents and starter kits are complements rather than substitutes: agents are strong at building features and weaker at cross-cutting infrastructure such as auth flows, webhook reliability and tenant isolation, where a mistake is a security or billing incident rather than a bug. On that view the 2026 default is a tested foundation plus an agent working on top of it.

It is worth noting who makes that argument. Most of the published versions of it come from boilerplate vendors, who have an obvious interest in the conclusion. We found no independent study measuring whether AI-generated scaffolding is more or less secure than a maintained starter kit.

What can be said from ShipFast's own numbers is narrower. Its revenue fell sharply during exactly the period when AI coding tools became capable, but a one-time-payment product with a saturating audience and a dozen new competitors would have declined anyway. The decay is overdetermined. Anyone claiming the AI tools alone killed it is reading more into the chart than it holds.

The Trade Works Until Everyone Is Selling Shovels

What the evidence supports

ShipFast earned more than $1.2 million by identifying a real, repeated, boring problem and charging a one-off fee to remove it. That is a genuine business, and the margins on it were extraordinary.

Three things then limited it, and only one was about the product.

The payment model capped it: a one-off sale cannot compound, so every month restarts at zero. The category ate it: what is generic enough to sell to everyone is generic enough for anyone to rebuild, and nineteen-plus competitors now share the shelf. And the trust broke at the moment it mattered most, when the response to security findings became the story rather than the findings themselves.

The picks-and-shovels instinct was right. Selling to people chasing a gold rush is safer than joining it. What ShipFast shows is the part of the metaphor that usually gets left out: in the original rush, the shovel sellers who kept earning were the ones who owned the supply, not the ones who arrived first. For another business whose headline number needed unpacking before it meant anything, see our investigation into Cometly's $251,000 launch week.

Resources

Every figure traces back to one of these
Have documents on ShipFast?
Board decks, billing exports, contracts, internal dashboards. We read everything, we protect sources, and we tell you first what we intend to do with it.
Reach the tip line