Supabase
Postgres backend with auth, storage and realtime included.
Supabase gives you a real Postgres database plus the plumbing most apps need, row level security, auth providers, file storage, realtime subscriptions and serverless functions, without assembling four services yourself.
The important discipline is RLS: policies are the security boundary, because the anon key ships to the browser. Get policies right on day one rather than after launch.
What it's genuinely good at
- Real Postgres
- Generous free tier
- Good DX
Where it falls apart
- RLS has a learning curve
Alternatives to Supabase
Who should use Supabase
- Full-stack side projects and MVPs
- Anyone who wants SQL rather than a document store
- Apps needing auth and realtime quickly
What it costs
Free tier covers small projects with pausing after inactivity; Pro from about $25/month per organisation adds backups, no pausing and more compute.
Frequently asked
Is Supabase safe to call directly from the browser?
Yes, provided every table has row level security enabled with correct policies. Without RLS the anon key is an open door.
Can I move off Supabase later?
It is Postgres, so a standard dump and restore moves your data anywhere.