Firebase vs Supabase

Firebase

Supabase

Firebase · 20 features

• A/B Testing — Experiments on Remote Config params, FCM notifications, and Analytics events. Ba…
• App Check — Attestation service: only requests from authentic, untampered app instances reac…
• App Hosting — Managed hosting for modern web apps (Next.js, Angular, SvelteKit). Git-based dep…
• Cloud Firestore — Serverless NoSQL document database. Real-time sync, ACID transactions, offline p…
• Cloud Functions — Serverless functions (Node.js/Python). Trigger on HTTP, Firestore, RTDB, Auth, S…
• Cloud Storage — Object storage for user files. Built on GCS. Security rules + signed URLs. Resum…
• Crashlytics — Real-time crash reporting for iOS/Android/Unity/Flutter. Stack traces, breadcrum…
• Data Connect — GraphQL API backed by Cloud SQL for PostgreSQL. Type-safe SDK generation. Previe…
• Dynamic Links — Deep links that survive app install. NOTE: deprecated, shutdown Aug 2025 — migra…
• FCM Topics — Publish/subscribe messaging: devices subscribe to topic names; backend sends one…
• Firebase AI Logic — Client-side SDK to call Gemini models directly from mobile/web. Formerly "Vertex…
• Firebase Authentication — Drop-in auth: email/password, phone, anonymous, 10+ federated providers, custom …
• Firebase Cloud Messaging — Push notifications for iOS, Android, Web (APNs/FCM transports). Topics, device g…
• Firebase Extensions — Pre-packaged Cloud Functions + config: Stripe, Algolia search, image resize, tra…
• Firebase Hosting — Static + dynamic hosting with global CDN. Preview channels, atomic deploys, rewr…
• Genkit — Open-source AI app framework. Unified API for Gemini, OpenAI, Ollama; tools, RAG…
• Google Analytics for Firebase — Free unlimited event tracking with audience building. BigQuery export on Blaze. …
• Performance Monitoring — App startup, HTTP network, and custom traces. Integrates with Google Analytics e…
• Realtime Database — Low-latency JSON tree database with WebSocket sync. Best for high-frequency pres…
• Remote Config — Feature flags / parameterized config with conditional targeting (user property, …

Supabase · 24 features

• Authentication — Complete JWT-based auth: passwords, magic links, OTP, OAuth, SSO, phone, MFA.
• Backups & PITR — Automatic daily backups + Point-in-Time Recovery (WAL-G). 14-day default PITR wi…
• Compute Instances — Upgradeable DB compute: Micro, Small, Medium, Large. Affects CPU, RAM, and conne…
• Connection Pooling — Supavisor pooler: Session mode (persistent) and Transaction mode (serverless). D…
• Cron Jobs — Scheduled recurring jobs via pg_cron. Trigger DB functions, edge functions, or H…
• Custom Domains — Configure custom hostname for API endpoints with SSL certificate management.
• Database Webhooks — Async HTTP callbacks on INSERT/UPDATE/DELETE via pg_net extension.
• Edge Functions — TypeScript (Deno runtime) functions deployed globally at the edge. Supports secr…
• Full-Text Search — PostgreSQL native FTS: to_tsvector, to_tsquery, GIN indexes, fuzzy matching, wei…
• Image Transformations — On-the-fly resize, crop, quality (20-100), WebP auto-format. Smart CDN caching. …
• Log Drains — Route all stack logs to HTTP, Datadog, Loki, Sentry, S3, OTLP, or Axiom. Up to 2…
• Metrics API — ~200 Prometheus-compatible Postgres metrics. OpenTelemetry export to Datadog, Gr…
• Network Restrictions — CIDR allowlist for database access. Multiple IP ranges supported. Pro+ plan.
• OAuth 2.1 Server — Use Supabase Auth as OAuth provider. Custom Access Token Hooks for claim injecti…
• pgvector — Store and search vector embeddings in Postgres. Supports HNSW/Flat indexes, cosi…
• PostgreSQL Database — Full PostgreSQL per project: SQL editor, table editor, CSV import, 50+ extension…
• PostgreSQL Extensions — 50+ pre-installed extensions: uuid-ossp, pgvector, pg_cron, plv8, pgtap, pg_net,…
• Preview Branches — Ephemeral or persistent DB branches for isolated testing. Git integration, auto-…
• Queues — Exactly-once message queues built on pgmq. Stored in Postgres with configurable …
• Read Replicas — Async read-only replicas in multiple regions. Geo-routing, replication lag monit…
• Realtime — WebSocket subscriptions for DB changes (INSERT/UPDATE/DELETE), broadcast, and pr…
• Row Level Security — SQL-native access control; policies auto-filter rows based on auth.uid() / auth.…
• SSL Enforcement — Require TLS for all DB connections. Configurable: required, preferred, disabled.
• Storage — Files, Analytics (Iceberg), and Vector buckets with global CDN (285+ cities) and…