Supabase vs Vercel
Side-by-side trajectory, velocity, and editorial themes.
Supabase is reversing its biggest security default - public-schema tables no longer auto-exposed via PostgREST.
The headline shipping move is a deliberate change to Supabase's security posture: new projects can opt out of automatic Data API and GraphQL exposure for public-schema tables, with broader defaults flipping in May. Around it: an OAuth 2.1 compliance fix, an RLS Tester preview to make policy verification possible from the UI, and a steady drumbeat of platform improvements summarized in the monthly developer update.
Supabase is rebuilding the security defaults that made it fast to start with but easy to misconfigure. Combine the no-auto-expose change with the RLS Tester preview and the direction is clear: the platform is moving from convention-based exposure to explicit, testable access control. The OAuth compliance fix and developer updates suggest steady investment in standards conformance rather than new product surface this window.
Expect the no-auto-expose default to apply to existing projects (with a long opt-out runway), and the RLS Tester to graduate from preview into the dashboard as a first-class panel. Continued breaking-change drumbeat tied to OAuth/OIDC compliance is likely.
Vercel keeps stacking the deployment platform for the agent era
Vercel's shipping rhythm is split across three lanes: a steadily growing AI Gateway model catalog, primitives for autonomous workloads (Sandbox, the new skills.sh API), and routine platform polish via the CLI and Git tooling. The same week brought a new Claude model on the Gateway, persistent storage for Sandbox, and updated legal terms explicitly addressing AI acting on user accounts.
Vercel is positioning itself as the place agents run, not just where sites deploy. The AI Gateway is becoming a neutral model marketplace, Sandbox is accruing the storage and lifecycle features that long-running agent jobs need, and the skills.sh API exposes a vast capability index to authenticated projects. The legal-terms update signals the company is formalizing the shared-responsibility model for autonomous actions.
Expect Sandbox drives and the skills.sh API to graduate from beta toward general availability, and the AI Gateway to keep adding frontier models within days of their release.
See more alternatives to Supabase →
See more alternatives to Vercel →