... solo founder building Ember (Next.js + Supabase) with AI coding tools. Last week I did a security pass on my database. Here s what I found: 1. Row-level security checks which rows, not which columns. My users table let a logged-in user update their own row. That sounds fine, until you notice their own row includes the column that stores their plan. Fix: revoke table-wide UPDATE and grant it only on the columns the app really needs (streaks ...

... name exists, and a check so the app now says not saved when no row actually updates. What I still don t have is a habit that stops this from happening again. If you build on Supabase or any hosted database, how do you keep what s live and what s in your code in sync? Do you check it before every release, or just wait for a bug? Comment from Enio Aguiar(@wwenioaguiar): Same stack, same problem ... ... project (LLMPvP, also Supabase

... requests for the products launching today and they'll build and launch the features in real time! Appropriately, given the speed theme, we've partnered with TypeSafe AI, makers of @Jev , a frontier model at real-time speed, and @Supabase . Each participant will need real, actionable feedback Rules Only featured launches are allowed to participate A launch s point score score = normal score + shipping points Each shipping request (bug fix or feature request) earns a fixed number of points ... ... month A user can complete requests up until 10pm PT on the day of the contest. All requests must be verified by Product Hunt to be awarded points Winners will be chosen from the top launches. Prizes will include Supabase

... everyone I m building Permetra , an open-source security tool for Supabase. The idea is simple: Who can access what in your Supabase

... about to buy a custom domain to put Cloudflare in front of my Supabase project. Then I read the documentation properly and found the line that killed the plan. When you set up a custom domain, the original project URL stays live. The docs say you can use both interchangeably. And the project ref isn't a secret it ships in the browser bundle, because that's how the client connects in the first place. So the proxy is optional ...

... been building a SaaS with Lovable + Supabase that handles pretty sensitive stuff bank data via Open Banking, tax-related info. It's still in beta with very few users, but I want to get security right before opening it up more. I know the basics (HTTPS, not exposing API keys in the frontend), but I'm not confident I've covered what actually matters for something handling financial/tax data. For anyone who's dealt with this: What would you consider ... ... absolute minimum before letting real users connect their bank accounts to something you built solo? Specifically wondering about: How strict should Row Level Security be on Supabase

... long time, I delivered projects to my clients as freelancers, often with Supabase or Firebase as a backend. Today, with Aurabase, I am building the only European alternative

... built an autonomous AI RAG Agent with long term memory using n8n, Supabase, and Postgres. This architecture handles complex, long-context data extraction: Memory: Integrated Postgres Chat Memory to give the LLM ongoing context across sessions. Knowledge Base: Connected a Supabase

... build on Vercel + Supabase a lot. Shipping is easy. Messing up RLS is also easy. What pushed me: I was using an LLM with MCP/plugins to help with policies. It got stuck, then disabled RLS "temporarily." Yeah. Temporarily. There are a ton of vibe-coded apps on Lovable, Base44, etc. on the same stack. Same risk: anon key in the client, policies that look fine until they aren't. So I spent a day on hackymacky. Paste ... ... checks the client bundle for secrets and probes anon Supabase

... Select is a curated day of talks by @Supabase and the industry's best builders. It will take place on October 2nd, in San Francisco, CA. If you've been building on Supabase

... gacha loot system on top. Servers, voice, video, screen share AI assistant ( b.ai .t) summarizes channels, runs polls, translates Gacha loot system XP, quests, loot boxes for cosmetics (no pay-to-win) Native desktop app: Tauri + Rust for voice, Supabase backend Bootstrapped, been building for about 5 months, currently in public beta. Just launched here on PH would love your support and any feedback: https://www.producthunt.com/prod... Happy to answer questions about the stack or the product itself ...

... people use, but not much on the actual architecture decisions behind that, things like framework, hosting, database, and auth choices that affect cost and security down the line. For context, my current default stack is Next.js on the frontend, Supabase for database and auth, Vercel for hosting, and Stripe for payments. I picked it mainly for speed of shipping and because it keeps infra costs predictable early on, but I'm not sure it's the best call for security ... ... using them a lot since we received 250k$ in credits) and model availability (new DeepSeek and Kimi models being available on Vercel but not AWS) Comment from Dipmala Kumari(@dipmala_kumari): I usually start with Next.js, Supabase

... Product Hunt I m Yash, and I m new here. I m a frontend/product engineer based in the UK, mostly working with React, Next.js, TypeScript, Tailwind, shadcn/ui, Supabase, and Node.js. I mostly work with React, Next.js, TypeScript, Tailwind, shadcn/ui, Supabase

... trying to do with my upcoming Chrome extension for LinkedIn. I don t know if it will take off, so I want to go with the most cost-efficient stack possible. Could you recommend the best low-cost alternatives for infrastructure and launching? Databases Payments/money management (I m currently considering Stripe) Analytics Hosting and domains? If there are other essential tools I m missing, feel free to add them. I m especially open to dev advice since my experience here ... ... basically zero. I believe your suggestions could help others in a similar situation, too. And if you know any good promo codes, don t hesitate to share them. Comment from Deepanshu Garg(@deepanshu_garg9): Database + Auth : Supabase

... This year again, Supabase surveyed 2,000+ startup founders to uncover what's powering modern startups: their stacks, their GTM motion, and how they approach AI. Many things have changed between 2025 and 2026. See full report here My key takeaways: 78% of founders are technical. @Claude Code became the most-named must-have dev tool (31%). @VS

... Claude Code - Helps me structure and put things in shipping mode 3. Next.js - My go-to app builder 4. Vercel - It's how modern servers and builds operate 5. Supabase - Where data turns into magic! Comment from Sebastian(@sebxdev): my 5: - Claude code - ChatGPT - Docker - Supabase

... funds will boost open-source / Postgres tools, grow the platform, and liquidity for the employees. Two months ago, @Supabase announced 8,000,000 developers building with the platform. [1] They're now nearly 10 million, with databases launches growing by 600% over the past year. Read the announcement on supabase.com S/O to @copple @antwilson and the @Supabase

... agent execution to agent management. The tools that win may not be the ones building better agents, but the ones helping humans supervise dozens of them effectively. Comment from Alexander Bering(@alexanderbering): @aadilghani  The reason "edit vs. tell-it-to-revise vs

... person, it might be literally $0; for another, it might be $3k/mo till break-even. Break-even on another hand depends on the nature of business + market (whether you need to scale adoption vs start charging right away) So it depends on geo + situation + (most importantly) the nature of the startup. Comment from John Hammond(@supamrvl): We've shipped 28+ apps at MRVL. Here's what the numbers actually look like from the inside. The $100 build cost is real ... ... most of our apps on Supabase

... start. Supabase . Found it here three years ago. Thought it was just another backend. Now I can't imagine building without it. Here's what it does for us at Rankfender: Auth that doesn't make you crazy. We have users across 120+ countries. Supabase

... Supabase just hit 100,000 GitHub Stars. They also announced 8,000,000 developers building with Supabase

... There's never been a better time to build. AI tools, smaller teams, faster product cycles. Last year, @Supabase surveyed over 2,000 startup founders and builders to uncover what's powering modern startups: tech stacks, GTM, and approach to AI. Many things have changed since then, and they want to know what building at startups looks like in 2026. Take the survey Quick update : The State of Startups 2026 report is out! Many things have changed. Join the discussion ... ... Comment from Michael Zhang(@michael_zhang20): Done! For us, Supabase

... recurring issue we ve been seeing with Supabase setups is not the database itself, but how credentials are managed across environments. The common pattern looks something like: credentials stored in .env files or secrets managers multiple environments (dev, staging, prod) manual propagation or duplication across those environments It works, but over time it seems easy for things to drift: a key gets rotated in one environment but not others a redeploy misses an env var credentials get misconfigured during setup ... ... mostly managed with guardrails? Would be especially interesting to hear if the move toward JWT signing keys is changing how people think about this layer. Comment from Stephen Njiu(@stephennjiu): I ve honestly moved away from relying on Supabase

... community I just launched Stackwatch a usage monitor for dev teams & Solo devs that tracks GitHub Actions minutes, Vercel bandwidth, Railway and Supabase limits in one place and alerts you before you hit them. The idea came from a painfully relatable moment: we hit our GitHub Actions limit mid-deploy on a Friday. No warning, no heads-up just a broken pipeline and a confused team. The fix took 10 minutes, but finding why everything was broken took ... ... that the tools don't talk to each other, so you're either checking 5 dashboards manually or finding out you've crossed a limit when something breaks in production. What I built: Connect GitHub Actions, Vercel,cRailway and Supabase

... friends), Everyone. Share different parts of yourself with different people. Also includes: Real-time chat with read receipts, typing indicators, voice messages, file sharing, message reactions, rooms, channels, and Memory Lane (daily "on this day" throwbacks). Built with Flutter + Supabase. Free on Google Play. TOPICS: Messaging, Productivity, Tech, Health & Fitness LINKS: Google Play: [ https://play.google.com/store/ap... ] FIRST COMMENT (post immediately after launch): "Hey Product Hunt! I built Kindly because I kept sending messages that sounded fine in my head ... ... community activity. Also includes: Marketplace with reputation-based seller ranking, mentorship matching, guided wellness journaling (Echo), events platform, 8 non-intrusive ad types, 10 language support, and 150+ total features. Built by a solo developer with Flutter + Node.js + Supabase