Dev tools · alternatives · 2026

24 alternatives to Supabase RLS Leak Demo

Reproduce a cross-tenant RLS leak and verify the fix

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

1. 1
   Supabase▲2,325

   The Postgres developer platform is now generally available

   2024 · supabase.com · its alternatives →

2. 2
   Supabase-Test – Fast Isolated Postgres DBs for Testing Supabase RLS▲30

   Hi HN — we've built a testing framework for Supabase that spins up fast, isolated Postgres databases for each test case. It’s designed to make RLS policies easy to validate with real database state, without global test fixtures or mock auth. Features: - Instant isolated Postgres DBs per test - Automatic rollback after each test - RLS-native testing with `.setContext()` for auth simulation - Flexible seeding (SQL, CSV, JSON, JS) - Works with Jest, Mocha, and any async test runner - CI-friendly (runs cleanly in GitHub Actions) We also published example projects and a free set of tutorials:…

   Nov 2025 · npmjs.com · its alternatives →

3. 3MD
   Multiplayer Demo Built with Elixir▲221

   Hey HN, I’m an engineer at Supabase [0] and one of the creators of this demo. My team and I have been working hard to bring developers the next version of Supabase Realtime. The current version of Realtime [1] is a Change Data Capture (CDC) server for a PostgreSQL database that broadcasts changes via WebSockets to authorized subscribers. It’s written in Elixir/Phoenix. The server utilizes PostgreSQL’s logical replication functionality, which writes database changes to Write-Ahead Logging (WAL) segment files, and a replication slot, responsible for managing and retaining WAL files.…

   2022 · multiplayer.dev · its alternatives →

4. 4
   Pg_CRDT – an experimental CRDT extension for Postgres▲296

   This is an experimental extension for CRDTs, pg_crdt: GitHub repo[0]. It supports Yjs/Yrs and Automerge. The linked blog post [1] describes how we're thinking about this extension in a Supabase context. I want to emphasise this part: "pg_crdt has not been released onto the Supabase platform (and it may never be). We’re considering many options for offline-sync/support and, while CRDTs will undoubtedly factor in, we’re not sure if this is the right approach." [0] GitHub repo: https://github.com/supabase/pg_crdt [1] Blog post:…

   2022 · supabase.com · its alternatives →

5. 5
   Pg_replicate – Build Postgres replication applications in Rust▲216

   A high-performance Postgres replication engine written in Rust. Embed it in your Rust application or run it as a standalone binary. - supabase/etl

   2024 · github.com · its alternatives →

6. 6
   LeakScope — Supabase Security Auditor▲3

   Scan websites for exposed Supabase data and API leaks

   Mar 2026 · leakscope.tech · its alternatives →

7. 7
   Supabase (Beta)▲314

   The open source Firebase alternative.

   2020 · supabase.com · its alternatives →

8. 8
   Open source, logical multi-master PostgreSQL replication▲151

   Logical multi-master PostgreSQL replication. Contribute to pgEdge/spock development by creating an account on GitHub.

   2025 · github.com · its alternatives →

9. 9
   HasMySecretLeaked▲160

   Check if your secrets and API keys have leaked on GitHub.

   2023 · gitguardian.com · its alternatives →

10. 10
    Supavisor – a Postgres connection pooler written in Elixir▲149

    hey hn, supabase ceo here this is a postgres connection pooler. it’s similar to pgbouncer, but built with Elixir and specifically designed for multi-tenancy. it’s still under development, but it’s at a stage where we can gather a feedback from the community and you can try it yourself. we aren’t using this in production yet, but aiming to deploy it for a subset of databases in the next 2 months. We have the following benchmarks (details in the readme): - Elixir Cluster maintaining 400 connections to a single Postgres database - 1_000_000 clients connecting to the Elixir cluster - Sending…

    2023 · github.com · its alternatives →

11. 11
    Rocketgraph▲121

    Build production grade web applications in minutes

    2024 · its alternatives →

12. 12
    Postgres Docker image with common extensions▲130

    Unmodified Postgres with some useful extensions. Contribute to supabase/postgres development by creating an account on GitHub.

    2021 · github.com · its alternatives →

13. 13
    KeyHippo [LW24]▲141

    Add API key auth to Postgres Row Level Security (RLS) policy

    2024 · keyhippo.com · its alternatives →

14. 14
    Supaguard ▲91

    Scan, Detect & Protect Your Supabase Data

    Jan 2026 · supaguard.pro · its alternatives →

15. 15
    Securelog▲112

    Prevent leaked secrets across code, logs, and pipelines

    2024 · its alternatives →

16. 16
    LeaksID Data Room▲113

    Make your due diligence process with VCs and partners secure

    2022 · leaksid.com · its alternatives →

17. 17
    pgwire-replication - pure rust client for Postgres CDC▲46

    Lean tokio-based Postgres wire-protocol logical replication client (pgoutput) with TLS and SCRAM. - vnvo/pgwire-replication

    Jan 2026 · github.com · its alternatives →

18. 18
    Antifailure▲11

    A disposable copy of your production stack for every pull request: masked Postgres, contained third-party APIs, and agents that use your app like people.

    Sep 2026 · antifailure.dev · its alternatives →

19. 19NO
    Nuvix – Open-source Supabase and Appwrite with 3 schema types, auto RLS▲5

    I built a full backend-as-a-service platform — solo, in TypeScript — to fix what I hated about Supabase and Appwrite. The Problem - Supabase: Too rigid. One schema model. No flexibility. - Appwrite: Too loose. No RLS. Security is manual. The Solution: 3 Schema Types | Type | Use Case | Security | |------------|-----------------------------------|----------| | `Document` | Rapid prototyping (Appwrite-style) | Manual | | `Managed` | Secure apps (auto RLS + permissions) | *Secure by default* | | `Unmanaged`| Full SQL power (raw Postgres) | None | ### Killer Features - *APIs better than…

    Oct 2025 · its alternatives →

20. 20SO
    Supaglue – open-source unified API▲32

    Last month, we open-sourced Supaglue (https://github.com/supaglue-labs/supaglue) as a developer toolkit for building customer-facing Salesforce integrations. Since then, we've been iterating on our approach with users and are re-launching Supaglue as an open source unified API, starting with CRMs. With our re-launched public alpha you can: - Interact with HubSpot and Salesforce through a unified REST API - Sync data from HubSpot and Salesforce into a local Postgres cache and make reads against a normalized CRM schema - Make writes (POST and PATCH) to HubSpot and…

    2023 · its alternatives →

21. 21
    SecurityScan.dev

    Find leaked API keys & open Supabase/Firebase in 20 seconds

    Dec 2025 · securityscan.dev · its alternatives →

22. 22
    Supabase▲40

    The Postgres developer platform is now generally available

    2024 · supabase.com · its alternatives →

23. 23
    FixRLS▲3

    A repair tool for fixing Supabase RLS errors

    May 2026 · fixrls.dev · its alternatives →

24. 24
    Continuum Leak Check▲1

    Free security scan for apps you built with AI

    Aug 2026 · uxcontinuum.com · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →