Vaulto
Multi-vendor digital account marketplace software. Built on Laravel 13 + Next.js 16, escrow-protected, production-ready platform.
[email protected]→ admin[email protected]→ buyer[email protected]→ seller
User Password: password
In Brief
Vaulto is a complete marketplace application designed for selling game accounts, social media accounts, software licenses, and premium subscriptions. It is not a WordPress plugin or theme; it is an independent software with its own backend API, its own frontend, and its own admin panel.
Installed on a single server. Domain is connected, payment providers are integrated, goes live within 24 hours.
Core Value Propositions
Escrow pool. Buyer's payment remains locked in the Vaulto pool until delivery is confirmed. Chargeback risk is minimized, both parties are protected.
Multi-vendor structure. Unlimited vendors, four-tier commission system (Bronze 15% → Diamond 5%), KYC verification, automated delivery infrastructure.
Full CMS. Everything from homepage text to commission rates, from FAQs to legal pages is managed from the admin panel. No code editing required.
Multiple languages. Turkish and English built-in (~250 keys). Adding a new language is done from the admin panel. English URL slugs work with automatic redirection.
Technology
Stack by Layer
Backend: Laravel 13 · PHP 8.3 · MySQL 8 · Redis
Frontend: Next.js 16 · React 19 · TypeScript 5 · Tailwind v4
Auth: Sanctum token · Google OAuth · 2FA · reCAPTCHA
Payment: Stripe · PayPal · PayTR · NOWPayments (crypto)
Mail: SMTP · Resend · Mailgun (selectable from admin)
Feature Summary
Buyer: Advanced search and filtering, favorites, cart, coupons, multiple payment methods, order tracking, dispute opening, messaging with vendor, verified review system, wallet.
Vendor: KYC process, listing management, automatic or manual delivery, sales dashboard, conversion analytics, wallet and withdrawal to TR IBAN, customer messaging, profile page.
Admin: User/vendor/listing/order management, KYC approval queue, dispute resolution, financial reports, payment provider configuration, content management (CMS), language management, system settings.
Security
Bcrypt 12-round password hashing, Sanctum token revocation support, HMAC webhook signature verification, rate limiting, CSRF/XSS protection, KYC files on private disk + signed URLs, demo mode (write operations can be locked).
Performance
Next.js static rendering + ISR, Redis caching, indexed database schema, queue worker for async operations, optimized image pipeline. A single VPS (4 GB / 2 vCPU) is sufficient for up to 5,000 monthly active users.
Who It Is For
Entrepreneurs who want to formalize digital account sales
Those who want to move their Discord/Telegram-based sales to a web platform
Companies building B2C marketplaces for the Turkish market
Local startups planning to expand to the European market
Enterprise customers looking for white-label solutions
What Is Included
Complete source code (backend + frontend)
17 database migrations, seed data, 30+ demo products
Detailed setup documentation in three languages: TR / EN / DE (PDF)
12 months of free updates
6 months of technical support
Commercial use license