A complete platform for software licensing and client authentication.
WINAUTH is a full SaaS platform for developers and software companies: license keys, client authentication, HWID anti-piracy protection, team roles, a reseller program with its own wallet, a public API with webhooks and Stripe billing. A safer, clearer alternative to dated licensing panels.
The brief
Developers and software companies that sell paid software keep hitting the same wall: how to issue and manage licenses, confirm that a protected app is really running for a paying customer, and stop sharing and piracy, all without spending months building security-critical infrastructure in-house. The off-the-shelf options are mostly older KeyAuth-style panels: cluttered, weak on security, thin on real team roles or auditing. The brief was a modern, trustworthy control plane for licensing and authentication, with a cleaner API, RBAC, proper auditing and a fast everyday workflow.
- Issue and manage license keys without a custom backend that takes months to build and maintain
- Verify that a protected application runs on the authorized customer’s device, not a shared copy
- Prevent piracy, license sharing and access abuse
- Keep a clear record of who logged in, when and from where, and who changed what in the system
- Safely delegate access to team members and partners without sharing a single password
- Automate reseller sales, billing and integration with your own tooling
What we built
We built WINAUTH to cover the whole lifecycle of a licensed application: issuing a license, authenticating the client, tracking activity, responding to abuse and billing. It all lives in one clean dashboard that behaves like real developer infrastructure: dense tables, keyboard shortcuts, bulk actions and search for the daily routine. The architecture is multi-tenant, so a single deployment serves dozens of projects, teams and partners with separated data and permissions.
- License key generation and bulk management: lifetime or time-limited keys with usage caps, notes, and bulk ban, extend or HWID reset
- End-customer user accounts (username and password) as an alternative to license keys, including password and HWID reset
- Anti-piracy protection: binding a license to specific hardware (HWID), running-process checks and configurable obfuscation of protected .exe builds
- A private client API with HMAC-signed responses and replay-attack protection for secure application authentication
- Team roles and granular permissions (RBAC): member invitations, custom roles and precise control over who can do what
- A reseller and partner program with a prepaid wallet, custom pricing and separated permissions, where a partner issues licenses against their own credit
- Blocklists for IP, HWID, email and users with federation: subscribe to shared blocklists and share them across projects
- A public REST API with API keys and webhooks (Discord, Telegram and generic) for integration with your own tooling and automation
- Custom variables at the project, license and user level, readable and writable from the dashboard and the API
- An audit log of every dashboard action and an activity log of client logins with IP, HWID and device details
- Account security: two-factor authentication (TOTP) with backup codes, Google sign-in and session and device management
- Stripe billing with Free, Pro and Enterprise tiers, with metered billing by activation count on Enterprise
- A hidden administrator panel for managing the whole platform: users, subscriptions and transactions
Technologies
- Go
- SvelteKit
- Svelte 5
- Tailwind CSS
- PostgreSQL
- Stripe
What WINAUTH does and who it helps
WINAUTH is ready-made infrastructure for anyone who sells or runs paid software and would rather not build and maintain a licensing backend themselves. In minutes you get what normally takes months to develop: licensing, secure client authentication, sharing protection, activity visibility, team roles, reseller sales and billing. Next to dated licensing panels, it wins on security, a clean API and auditability. The platform is live at winauth.net.
- A finished licensing backend instead of months building security-critical infrastructure yourself
- Security by default: 2FA, HMAC-signed API, HWID binding and a complete audit trail
- Multi-tenant architecture: a single deployment serves dozens of projects, teams and partners
- The reseller program opens a new sales channel with no extra manual work
- A clean public API and webhooks connect WINAUTH to any of your own tools
- A clearer, more trustworthy alternative to dated KeyAuth-style panels
“We wanted a tool that gives developers everything around licensing and authentication in one place, but feels like serious infrastructure rather than a cluttered panel. WINAUTH is meant to be quiet by default and fast when you need it.”