... Initially, I even pasted Supabase key directly into prompt because of request from the agent. It found its way to the file that I was about to commit. I noticed it in the diff accidentally. In any case, I formulated certain guidelines. Secrets reside exclusively in the environment files that appear in the gitignore list prior to the first commit. I never insert secrets into chat prompt, using only placeholders such as SUPABASE

... little game, because it explains what we built better than any pitch. Picture a typical freshly shipped SaaS: Next.js front end, Supabase back end, a few API routes. You run an external scan on it and recon flags these 6 candidates. When the validation step finishes, exactly one of them is PROVEN. The other five end up refuted, inconclusive, not tested or false positive. Which one is real? A. /api/admin/users returns a 500 instead of a 401 when you send ... ... malformed token B. The Supabase

... affiliation here. Also, most of them are hiring across the board. @Mastra is hiring an AI Engineer, remote US @Mintlify is hiring a Product Engineer, in San Francisco, CA @Polylane is hiring a Founding Engineer, in San Francisco, CA @Supabase is hiring an Engineering Manager, remote WW @Trigger.dev is hiring a Design Engineer, remote UK More open roles in the previous editions: Hiring? Looking for work? [Startup Roles October 2026] Hiring? Looking for work? [Startup Roles September 2026] Hiring? Looking ... ... from Ohiocheoya Alabi(@ohioalabi): Background & Skills I'm a frontend developer using React, Next.js, vite, JavaScript, TypeScript, Tailwind CSS, and related technologies. I also have experience with backend development, databases, APIs, and tools such as Node.js, PostgreSQL, and Supabase

... solo founder building Ember (Next.js + Supabase) with AI coding tools. Last week I did a security pass on my database. Here s what I found: 1. Row-level security checks which rows, not which columns. My users table let a logged-in user update their own row. That sounds fine, until you notice their own row includes the column that stores their plan. Fix: revoke table-wide UPDATE and grant it only on the columns the app really needs (streaks ...

... name exists, and a check so the app now says not saved when no row actually updates. What I still don t have is a habit that stops this from happening again. If you build on Supabase or any hosted database, how do you keep what s live and what s in your code in sync? Do you check it before every release, or just wait for a bug? Comment from Enio Aguiar(@wwenioaguiar): Same stack, same problem ... ... project (LLMPvP, also Supabase

... requests for the products launching today and they'll build and launch the features in real time! Appropriately, given the speed theme, we've partnered with TypeSafe AI, makers of @Jev , a frontier model at real-time speed, and @Supabase . Each participant will need real, actionable feedback Rules Only featured launches are allowed to participate A launch s point score score = normal score + shipping points Each shipping request (bug fix or feature request) earns a fixed number of points ... ... month A user can complete requests up until 10pm PT on the day of the contest. All requests must be verified by Product Hunt to be awarded points Winners will be chosen from the top launches. Prizes will include Supabase

... everyone I m building Permetra , an open-source security tool for Supabase. The idea is simple: Who can access what in your Supabase

... about to buy a custom domain to put Cloudflare in front of my Supabase project. Then I read the documentation properly and found the line that killed the plan. When you set up a custom domain, the original project URL stays live. The docs say you can use both interchangeably. And the project ref isn't a secret it ships in the browser bundle, because that's how the client connects in the first place. So the proxy is optional ...

... been building a SaaS with Lovable + Supabase that handles pretty sensitive stuff bank data via Open Banking, tax-related info. It's still in beta with very few users, but I want to get security right before opening it up more. I know the basics (HTTPS, not exposing API keys in the frontend), but I'm not confident I've covered what actually matters for something handling financial/tax data. For anyone who's dealt with this: What would you consider ... ... absolute minimum before letting real users connect their bank accounts to something you built solo? Specifically wondering about: How strict should Row Level Security be on Supabase

... long time, I delivered projects to my clients as freelancers, often with Supabase or Firebase as a backend. Today, with Aurabase, I am building the only European alternative

... built an autonomous AI RAG Agent with long term memory using n8n, Supabase, and Postgres. This architecture handles complex, long-context data extraction: Memory: Integrated Postgres Chat Memory to give the LLM ongoing context across sessions. Knowledge Base: Connected a Supabase

... build on Vercel + Supabase a lot. Shipping is easy. Messing up RLS is also easy. What pushed me: I was using an LLM with MCP/plugins to help with policies. It got stuck, then disabled RLS "temporarily." Yeah. Temporarily. There are a ton of vibe-coded apps on Lovable, Base44, etc. on the same stack. Same risk: anon key in the client, policies that look fine until they aren't. So I spent a day on hackymacky. Paste ... ... checks the client bundle for secrets and probes anon Supabase

... Select is a curated day of talks by @Supabase and the industry's best builders. It will take place on October 2nd, in San Francisco, CA. If you've been building on Supabase

... gacha loot system on top. Servers, voice, video, screen share AI assistant ( b.ai .t) summarizes channels, runs polls, translates Gacha loot system XP, quests, loot boxes for cosmetics (no pay-to-win) Native desktop app: Tauri + Rust for voice, Supabase backend Bootstrapped, been building for about 5 months, currently in public beta. Just launched here on PH would love your support and any feedback: https://www.producthunt.com/prod... Happy to answer questions about the stack or the product itself ...

... people use, but not much on the actual architecture decisions behind that, things like framework, hosting, database, and auth choices that affect cost and security down the line. For context, my current default stack is Next.js on the frontend, Supabase for database and auth, Vercel for hosting, and Stripe for payments. I picked it mainly for speed of shipping and because it keeps infra costs predictable early on, but I'm not sure it's the best call for security ... ... influence the choice for me either, it's more about not letting the agent maintain a stack you can't keep up with yourself. Comment from Chalermpon Ananwattanakit(@vollos): Auth coupling risk is real, but the flip side with Supabase

... Product Hunt I m Yash, and I m new here. I m a frontend/product engineer based in the UK, mostly working with React, Next.js, TypeScript, Tailwind, shadcn/ui, Supabase, and Node.js. I mostly work with React, Next.js, TypeScript, Tailwind, shadcn/ui, Supabase

... trying to do with my upcoming Chrome extension for LinkedIn. I don t know if it will take off, so I want to go with the most cost-efficient stack possible. Could you recommend the best low-cost alternatives for infrastructure and launching? Databases Payments/money management (I m currently considering Stripe) Analytics Hosting and domains? If there are other essential tools I m missing, feel free to add them. I m especially open to dev advice since my experience here ... ... busmark_w_nika): @hustlerv  What should I use instead of Stripe then? Comment from Nika(@busmark_w_nika): @konstant_gk  Never heard about Hetzner. Thank you for the tip! :) Comment from Abhishek(@new_user___1672026b3eb0daea8a0d99a): Similar - Databases: Supabase

... This year again, Supabase surveyed 2,000+ startup founders to uncover what's powering modern startups: their stacks, their GTM motion, and how they approach AI. Many things have changed between 2025 and 2026. See full report here My key takeaways: 78% of founders are technical. @Claude Code became the most-named must-have dev tool (31%). @VS

... would be ChatGPT, VS Code, GitHub, Chrome DevTools, and Notion. As a full-stack developer, these tools are part of my daily workflow and help me build web applications more efficiently. I also share development insights and projects on my website if anyone's interested: https://farrukhhafeez.dev . Comment from Sebastian Lopez(@soysebalopez): my 5: 1. Claude Code 2. Warp 3. Supabase

... funds will boost open-source / Postgres tools, grow the platform, and liquidity for the employees. Two months ago, @Supabase announced 8,000,000 developers building with the platform. [1] They're now nearly 10 million, with databases launches growing by 600% over the past year. Read the announcement on supabase.com S/O to @copple @antwilson and the @Supabase

... agent execution to agent management. The tools that win may not be the ones building better agents, but the ones helping humans supervise dozens of them effectively. Comment from Alexander Bering(@alexanderbering): @aadilghani  The reason "edit vs. tell-it-to-revise vs

... Appreciate that! :) Comment from Nika(@busmark_w_nika): @davem_0  Marketing is the most priciest item rn. Comment from Nika(@busmark_w_nika): @qasimkhan  Have you already started with marketing? Can you compare amounts for production (tech) vs promotion? Comment from Nika(@busmark_w_nika): @qasimkhan  It would be worth having some excel sheet to track those expenses :D Comment from Nika(@busmark_w_nika): @marcin_uchacz1  The last paragraph summarises it pretty well. :) Comment from ... ... media definitely polishes those stories, but a true $0 production stack is completely realistic today if you are clever with free tiers. I launched my product RoastMyLanding on exactly that: Vercel for the frontend, Render for the backend, Supabase

... start. Supabase . Found it here three years ago. Thought it was just another backend. Now I can't imagine building without it. Here's what it does for us at Rankfender: Auth that doesn't make you crazy. We have users across 120+ countries. Supabase

... Supabase just hit 100,000 GitHub Stars. They also announced 8,000,000 developers building with Supabase

... There's never been a better time to build. AI tools, smaller teams, faster product cycles. Last year, @Supabase surveyed over 2,000 startup founders and builders to uncover what's powering modern startups: tech stacks, GTM, and approach to AI. Many things have changed since then, and they want to know what building at startups looks like in 2026. Take the survey Quick update : The State of Startups 2026 report is out! Many things have changed. Join the discussion ... ... linked to AI. While this has added more features and flexibility, it has also become necessary to incur computational costs, which inevitably increases user usage costs. Comment from Vojt ch Ho ava(@hustlerv): Hello, is necessary for me to use Supabase