Supabase
Open-source Firebase alternative built on vanilla PostgreSQL. Bundles a Postgres database with auto-generated REST/GraphQL APIs (PostgREST), row-level-security-based auth, realtime change streams over WAL replication, edge functions, and S3-compatible storage — all self-hostable.
Pros
- Real PostgreSQL underneath: full SQL joins, window functions, CTEs, extensions (PostGIS, pgvector) and standard tooling like pg_dump all work unmodified. 0
- Row Level Security policies push authorization into the database layer, so every access path (REST, GraphQL, direct SQL) enforces the same rules. 0
- Open source and self-hostable — no hard vendor lock-in; the exit path is an ordinary Postgres dump. 0
- Auto-generated APIs from schema (PostgREST) eliminate boilerplate CRUD endpoints while staying schema-first. 0
- pgvector support makes it a pragmatic single-store choice for AI apps that need embeddings alongside relational data. 0
- Predictable pricing anchored to compute instances rather than per-operation metering. 0
Cons
- Realtime layer replays the Postgres WAL; very high-churn tables can lag or drop subscription events under load. 0
- Connection-based Postgres model needs PgBouncer/Supavisor pooling for serverless workloads — misconfigured pools exhaust connections fast. 0
- RLS policies are powerful but hard to test and easy to get subtly wrong; a missing policy silently exposes or blocks rows. 0
- Horizontal write scaling is classic Postgres territory: vertical scaling first, then manual sharding/read replicas — no automatic multi-region writes. 0
- Younger managed platform than GCP/AWS; regional coverage, compliance certifications and enterprise support tiers are still catching up. 0
- Edge functions (Deno) are a separate runtime from your main backend, fragmenting local development and observability. 0