Supabase

Open-source Postgres backend platform with auth, storage, realtime and edge functions.

HN commenters like Supabase for its developer experience and easy configuration,123 a free tier that bundles a Postgres database, auth and functions,456 and access to Postgres extensions like pgvector and PostGIS.789 The most common caveats are that self-hosting is heavy,101112 and that Row Level Security is the only barrier between the public API and your data.1314
The HN verdict, written from 14 cited comments
9recommend
2warn against
Nov 29, 2025first mention
Oct 15, 2026latest mention
Nov 25 – Oct 26
Used forfor hobby projectsfor solo devsfor Next.js appsfor vector searchbackenddatabase backend

Why people recommend it

Developer experience · 3

Commenters praise how easy it is to configure and how good the developer experience is.

“We were so used to the clean, no-bs-scaling-cost nature of Supabase, as well as how easy it is to configure.”

Show 1 more

“fell behind the capabilities and devex of products like Supabase and Vercel.”

switched from Herokuon “Heroku Is Not Dead”

All-in-one backend · 3

Used as a single backend for SQL, auth and hosted functions.

“On the back end I used supa base (sql, auth, some hosted functions).”

built a new tab browser extensionon “8y48r7eknf8e-0908”

“Database & Auth: Supabase (using Row Level Security).”

Show 1 more

“you can get a database, function calling and user auth on Supabase's free tier”

Free tier · 3

The free tier is recommended for hobby and personal projects.

“you can get a database, function calling and user auth on Supabase's free tier”

“I recommend having a separate backend service like supabase with HF as”

Show 1 more

“I'm now thinking something like Supabase or Convex may be the way to go for personal projects.”

Postgres extensions · 3

Gives managed access to extensions such as pgvector, pg_cron, unaccent and PostGIS.

“Supabase is an interesting middle ground here”

“Backend: Supabase (Postgres + pgvector for long-term memory of relationship graphs)”

Show 1 more

“Next.js/Supabase doing 17k+ visitors/mo”

Self-taught full-stack freelance devon “Ask HN: Who wants to be hired? (July 2026)”

Webhooks and realtime · 3

Database webhooks and realtime subscriptions are used for workflows and syncing.

“Supabase has something similar with their database webhooks. I use that extensively for kicking off signup workflows.”

“We use html, JavaScript, Alpine for reactivity and Supabase realtime subscriptions.”

Show 1 more

“I use Supabase to sync human messages across the room.”

Auth options · 2

Auth features, including anonymous auth, work for no-signup apps.

“I use Supabase anonymous auth combined with a device fingerprint hash.”

“On the back end I used supa base (sql, auth, some hosted functions).”

built a new tab browser extensionon “8y48r7eknf8e-0908”

Caveats and dissent

RLS exposure · 2

A wrong or missing RLS policy can expose data directly, and many insecure apps ship.

“The problem is that Supabase puts it as the only thing standing between the public internet and your data.”

“Supabase did added a LOT of new features in their dashboard to warn and prevent users from shipping tools unprotected”

building a business around auditing Supabase appson “11% of vibe-coded apps are leaking Supabase keys”

Self-hosting · 3

Self-hosting needs many containers, and one commenter couldn't get realtime working locally.

“I recently moved a project off supabase entirely”

Show 1 more

“Supabase is a great product, we use it for all of our products”

Compliance · 1

Not WORM compliant, which blocked one commenter selling to enterprises.

“Plus Supabase isn't WORM compliant so it is hard to ensure data doesn't get deleted.”

Edge functions · 1

One commenter found Deno cloud functions and weak dev/prod separation messy.

“even though I used it in supabase”

Auth lock-in · 1

Auth is sticky, which makes migrating off Supabase harder.

“I recently moved a project off supabase entirely”

Often compared with

Who recommends it in their own words

From the makers not counted in the ranking

“Fully remote, fully async, fully open-source.”

All comments 40

“On the back end I used supa base (sql, auth, some hosted functions).”

built a new tab browser extensionon “8y48r7eknf8e-0908”

“I recommend having a separate backend service like supabase with HF as”

“Postgres, Supabase/Neon/Render”

AI-powered forward engineer looking for workon “Ask HN: Who wants to be hired? (October 2026)”

“Supabase is a great product, we use it for all of our products”

“One Flutter codebase for web, Android and iOS on Supabase.”

“Stack is just Next.js / React + PostgreSQL hosted on Vercel + Supabase with GH Actions.”

Location: Rio de Janeiro, Brazil (UTC−3) Remote: Yes Willing to relocate: Yes Technologies: TypeScript (strict) · React · Next.js · Node.js · Python · SQL/PostgreSQL · Supabase · Docker · GitHub Actions/CI · Azure · LLM APIs (Anthropic, OpenAI) · RAG · agent architectures · Cursor/Claude Code in the daily loop Résumé/CV: https://sidneyferreira.com - https://aifield.tech — https://github.com/sidfer Email: ferreirasidn

“My stack for this project is React Native and Supabase”

“Next.js/Supabase doing 17k+ visitors/mo”

Self-taught full-stack freelance devon “Ask HN: Who wants to be hired? (July 2026)”

“The site relies on Astro, GitHub, Leaflet/Protomaps/OpenStreetMap, Lucide, Formspree, and Supabase.”

“We use html, JavaScript, Alpine for reactivity and Supabase realtime subscriptions.”

“Built on Python / FastAPI and Supabase for the backend.”

solo developer

“Supabase is an interesting middle ground here”

“Plus Supabase isn't WORM compliant so it is hard to ensure data doesn't get deleted.”

“I use Supabase for synchronization and role-based access control (RBAC).”

“from the frontend to the Supabase database”

“We were so used to the clean, no-bs-scaling-cost nature of Supabase, as well as how easy it is to configure.”

“Supabase has something similar with their database webhooks. I use that extensively for kicking off signup workflows.”

“you can get a database, function calling and user auth on Supabase's free tier”

“even though I used it in supabase”

“spins up a docker-in-docker Supabase environment”

“I use Supabase and Google KMS so my auth keys are encrypted.”

“Tech: Next.js 15 / TypeScript / Supabase (Postgres) / Vercel / Resend”

“Tech: Next.js 15, Supabase (Postgres, 954K+ records), Vercel (102kB first load), Plausible + GA4.”

“Tech: Next.js 15, Supabase (Postgres, 954K+ records), Vercel (102kB first load), Plausible + GA4.”

“I recently moved a project off supabase entirely”

“fell behind the capabilities and devex of products like Supabase and Vercel.”

switched from Herokuon “Heroku Is Not Dead”

“The problem is that Supabase puts it as the only thing standing between the public internet and your data.”

“It connects directly from your browser to your Supabase project”

“Backend: Supabase (Postgres + pgvector for long-term memory of relationship graphs)”

“Supabase did added a LOT of new features in their dashboard to warn and prevent users from shipping tools unprotected”

building a business around auditing Supabase appson “11% of vibe-coded apps are leaking Supabase keys”

“I use Supabase anonymous auth combined with a device fingerprint hash.”

“I'm now thinking something like Supabase or Convex may be the way to go for personal projects.”

“Database & Auth: Supabase (using Row Level Security).”

“I use Supabase to sync human messages across the room.”

Threads where it came up

Data: supabase.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.

Keyboard shortcuts
j / kNext / previous item
o or EnterOpen selected item
/Search
g hHome
g tTop
g rRising
g cCategories
tToggle dark mode
?This help