Supabase
Postgres with auth, storage, realtime and edge functions attached.
Supabase gives you a real Postgres database plus the plumbing most apps need, row level security, auth providers, file storage, realtime subscriptions and serverless functions, without assembling four services yourself.
The important discipline is RLS: policies are the security boundary, because the anon key ships to the browser. Get policies right on day one rather than after launch.
What it's genuinely good at
- Real Postgres, no proprietary query language
- Auth, storage and realtime included
- Generous free tier for side projects
- Self-hostable, so no hard lock-in
Where it falls apart
- RLS has a genuine learning curve
- Free projects pause after inactivity
- Edge function debugging is fiddly
Alternatives to Supabase
Who should use Supabase
- Full-stack side projects and MVPs
- Anyone who wants SQL rather than a document store
- Apps needing auth and realtime quickly
What it costs
Free tier covers small projects with pausing after inactivity; Pro from about $25/month per organisation adds backups, no pausing and more compute.
Frequently asked
Is Supabase safe to call directly from the browser?
Yes, provided every table has row level security enabled with correct policies. Without RLS the anon key is an open door.
Can I move off Supabase later?
It is Postgres, so a standard dump and restore moves your data anywhere.