DEV3 Technologies home

Launch Offer: up to 50% off

This item is 50% off: $24.50 instead of $49

Ends in
--
Days
--
Hrs
--
Min
--
Sec

DEV3 Snipora – Branded Short Link SaaS Laravel Script with Custom Domains, Link Rules, QR Codes & Analytics

A multi-tenant short link service on Laravel 12 and Filament 4: workspaces with branded domains, redirect rules and A/B tests, QR codes, click analytics with bot filtering, a scoped-key API, plans with usage meters and an operator panel. Web installer and demo data included. No mobile apps.

by DEV3 TechnologiesVerified Author(0) 0 sales 0 viewsUpdated 08 Nov 2026

Video tour. Pick a section below to browse 118 screenshots in 16 sections.

App & phone tours

Tap play to watch each app. Nothing downloads until you do.

  • Mobile web1:08

Snipora is a multi-tenant branded short link platform built by DEV3 Technologies on Laravel 12 and Filament 4. You run the service: each customer gets a workspace that creates short links on your short domains or on its own branded domains, adds rules, prints QR codes, reads click analytics and calls an API. You are the merchant of record and charge for plans.

What it does

  • Short links. Paste a destination, pick a domain and an optional custom ending, add a title, tags, a campaign and UTM tags. Endings are generated without look-alike characters, reserved words are blocked, and a deny list keeps listed hosts from being shortened.
  • Branded domains. A workspace adds its own domain, gets the DNS records to create, verifies them and serves links from it. Each branded domain also gets a small link-in-bio page that lists pinned links.
  • Rules and tests. Send visitors to different destinations by country, device, language, time or referrer, split traffic between destinations with weighted A/B rotation, and set a password, an expiry date or a click cap. A loop check and a safety check cover every destination.
  • QR codes. Every link has a QR code in SVG, PNG or print-ready EPS, with colours and a margin, plus PDF sheets.
  • Click analytics. Humans and bots are separated and bot clicks never count against the quota. Daily rollups give clicks, uniques, countries, devices, browsers and referrers; long ranges come from summaries so they stay fast. Compare links, export to CSV and share an optional public stats page by adding a plus sign to the short link.
  • Click Stream. A live map of the last 24 hours of human clicks on the workspace dashboard (live with the Reverb server, polling without).
  • Bulk and API. CSV import with a result file, a REST API with scoped keys, per-plan rate limits, an OpenAPI document with rendered docs, a request log and signed outbound webhooks.
  • SaaS billing. Four plans with monthly and yearly billing, a trial, usage meters for links created and clicks tracked per month, upgrades, invoices with PDFs, team members with roles, and quota warnings.
  • Operator panel. Tenants, plans and their limits, subscriptions, SaaS invoices and payments, global domains, reserved words, a deny list, top links, system health, roles, an abuse-report queue with takedowns, audited support sessions and an audit log.
  • A marketing site. Home page with a live shortener, features, pricing, API reference, report-a-link form, legal pages, sign-up, light and dark themes, English and Arabic (right to left).

Install and demo data

A web installer checks the server, writes the configuration, migrates and either loads the demo data or an empty install, then creates your operator account. The demo holds 12 fictional workspaces (a theatre, a bakery, an outdoor outfitter and nine more), 13 domains, 18,000 links, about 450,000 recent raw clicks and about 1.2 million clicks of rollups over eight months, API keys, bulk jobs, abuse reports and webhooks. Every demo password is password. Node.js is not needed because the compiled assets are included.

Good to know before you buy

  • Geo-IP is simulated until you download a GeoLite2 database and point Snipora at it; the MaxMind reader is included. Country and region in the demo come from a bundled fictional table.
  • Domain verification (DNS) and the safety check are simulated. Add your own resolver settings and a threat-list API key to check against real data; the Google Safe Browsing driver is present but guarded.
  • Redirects are served by PHP, not by a CDN. That suits most installs; for very high traffic put a cache or CDN in front.
  • SSL is reported, not issued. Snipora shows the certificate status of a branded domain but does not request certificates; terminate TLS on your server or proxy.
  • SaaS billing is simulated. The simulated gateway is complete; real card gateways need your own account and finishing work. You are the merchant of record; workspaces cannot connect their own payment account.
  • Visitor pages on branded domains (password, expired, blocked and not-found pages) show the workspace initial rather than a custom logo.
  • No mobile apps and no hosted demo. The brands, people, hosts and numbers in the screenshots are fictional.
  • Name. Snipora is a working name checked by a web search only, not a trademark clearance. Check it before launching under it.

Quality checks

Snipora 1.0.0 passed the seven release gates of the DEV3 Laravel suite on the final code: static analysis (Larastan level 6, 0 errors), 393 Pest tests with 1,964 assertions, a front-end size budget, migrations and seeding on MySQL 8 and SQLite, a headless-browser pass over 112 pages and 59 happy paths with four race checks on MySQL (20 parallel creates of one alias, 500 parallel generated endings, 10 clicks on a cap of 3, two creates on the last quota slot) and a redirect time budget, an installer test from the package and a secret scan. Lighthouse mobile on the home page scored 96 for performance and 94 for accessibility on the development machine.

#url-shortener#short-links#branded-domains#qr-code#click-analytics#link-management#laravel#filament#php-script#saas#multi-tenant

How it's built

Architecture, stack, key decisions and the quality gates DEV3 Snipora passed before release.

The engineering behind Snipora: a redirect path with no database writes on the request thread, unique indexes instead of check-then-insert, one conditional update for click caps, and daily rollups that reconcile with the raw clicks.

The problem it solves

A short link service is read-heavy and unforgiving. Redirects must be quick, two people can claim the same ending at the same instant, a click cap must hold under parallel visitors, a workspace's quota must not be overspent, and the numbers on the dashboard must equal the clicks that really happened, even when bots, replays and failed jobs are in the mix.

Architecture and approach

Snipora is a Laravel 12 application with Filament 4 panels for workspaces and the operator, Blade pages for the marketing site and a REST API. It builds on the shared DEV3 Laravel core and SaaS layer for settings, roles, plans, subscriptions and audit.

A redirect with no writes on the request thread

The redirect handler looks up the code, evaluates the rules in memory and answers. Recording the click runs after the response, in one transaction that inserts the click, updates the rollups and spends quota. A test measures the in-process time and counts queries on the request thread.

Unique indexes, not checks

A custom ending is claimed by inserting against a unique index on the domain and the case-folded code, so twenty parallel creates of one alias produce exactly one winner. Generated endings avoid look-alike characters, retry on a duplicate and grow in length when a space fills up.

Caps and quotas under load

A click cap is one conditional update that only succeeds while the cap is not reached. The monthly link quota is a locked usage row taken in a fixed lock order, and a MySQL race runs two creates for the last slot.

Humans, bots and replays

Clicks are scored for bots, replayed clicks are detected before quota is spent, and only human clicks count towards the plan and the headline numbers.

Rollups that reconcile

Daily rollups are written in the same job as the click row. A check command compares the rollups with the raw clicks and every link's total with its rollups, and the smoke test runs it after the races.

Quality gates and results

Snipora 1.0.0 passed the seven release gates on the final code, including Larastan level 6 with no errors, a full Pest suite, a headless-browser pass and race checks on MySQL. Lighthouse mobile on the home page scored 96 for performance and 94 for accessibility.

Known limits are listed on the item page: geo-IP, DNS checks and the safety check are simulated until you add data or keys, redirects are served by PHP rather than a CDN, and SaaS billing runs on the simulated gateway.

Tech stack

Area Technologies
Application Laravel 12, Filament 4, Blade, REST API, OpenAPI
Redirect edge In-memory rule evaluation, Post-response click recording, Bot scoring
Analytics Daily rollups, Reconciliation check, CSV export
Concurrency Unique indexes, Conditional updates, Fixed lock order, MySQL race checks
Quality Pest, Larastan level 6, Headless browser smoke, Installer test

Inside the build

Short links for print and screen: The home page opens on a live shortener, branded domains and the numbers behind every link. Short links for print and screen — The home page opens on a live shortener, branded domains and the numbers behind every link.

Everything a link needs: Rules, A/B tests, QR codes, analytics and an API, each explained in a short block. Everything a link needs — Rules, A/B tests, QR codes, analytics and an API, each explained in a short block.

Guides & articles

Practical guides and engineering write-ups for DEV3 Snipora.

URL shortener software: 7 things to check before you pick one

Last updated
URL shortener software: 7 things to check before you pick one: DEV3 Snipora

A short link looks simple until two people claim the same ending, a campaign link goes viral and the dashboard shows twice the clicks it should. Here are seven things to check before you pick a URL shortener, with DEV3 Snipora as the worked example.

Video tour — shorten a link to the operator panel

Snipora home page with a live shortener, branded domains and click numbers

1. Can links wear your own domain?

Short links on your own domain build trust and keep working if you change tools. Snipora gives each workspace its own domains with the DNS records to add, a verify button and a small link-in-bio page per domain.

Branded domains with status, link count and the last DNS check

2. How fast is the redirect?

The redirect is the product. Look for a path that answers before it records anything. Snipora evaluates rules in memory, answers, then records the click after the response, and its tests hold the in-process time under a budget.

3. Can one link send people to different places?

Country, device, language, time and referrer rules, weighted A/B rotation, a password, an expiry date and a click cap should all be there, and they should be checked for loops and unsafe destinations.

The rules tab of the link editor

4. Do the numbers exclude bots?

Analytics are only useful if replays and crawlers are separated from people. Snipora scores bots, keeps them out of the quota and the headline numbers, and reconciles its daily rollups with the raw clicks.

Link analytics with daily clicks, countries, devices and referrers

5. Do QR codes come with every link?

Print needs vector files. Every link should offer SVG, PNG and EPS with colours you choose.

6. Is there an API, and is it safe to hand out?

Scoped keys, per-plan rate limits, a request log and signed webhooks let a customer integrate without handing over the account.

Creating a short link in the workspace

7. What happens when someone abuses it?

Public shorteners get abused. You want a deny list, a safety check, a report-a-link form, a takedown that blocks the link and closes the report, and a log of support sessions.

Limits

Geo-IP, DNS checks and the safety check are simulated until you add a GeoLite2 file and real keys, redirects are served by PHP rather than a CDN, SSL is reported rather than issued, and SaaS billing runs on a simulated gateway. Snipora has no mobile apps.

Frequently asked questions

The complete source code (version 1.0.0) as a download from your account, with the setup and usage guides shown on this page. You can modify the code to suit your product.

Buying guides: Laravel scripts with Filament panels and a web installer · Next.js or Laravel for a SaaS script?

More from this author

View all

Related in Web Scripts & Software

View all