Bil Harmer

Supabase has hit an impressive 100,000 GitHub stars! 🌟 A massive THANK YOU to our amazing community for your unwavering support. Let’s keep building together!!

This is such an important addition! Thanks to the @github team for this!

@sama Promotvomit or Yeettext

I would like a single word for this phrase: "throw it into the maw with every bit of context I can think of".

@jameszhou02 @kpolley James trying to get a hold of you. My team has checked the backend, it's not public. I'd like you to send me the technical details of how you signed or got access to the URL you're using so I can investigate further.

@kpolley it's publicly available, anyone can do this. they shouldn't vibecode everything :)

btw their supabase storage bucket is publicly accessible via any signed url token 😭 exposes: > employee background checks > equity vesting schedules and grant amounts > performance reviews > session tokens for stripe, notion, etc > screenshots below 🧵 i also got access to their notion 😛

Use Supabase Realtime Broadcast to send and receive messages: - Delivered in real time - Scoped to specific channels - Message persistence with onMessage and Message props - Customizable appearance - Auto scroll-to-bottom for new messages - Room-based isolation

There are now 7M developers using @supabase Signups have been accelerating since the start of the year Our growth rate right now is as fast as it was during YC, except that we are doing it from a base of millions of developers instead of thousands

✅ Claude Code ✅ Superpowers plugin ✅ Supabase ✅ Vercel streaming-radar.com/p/i-rebuilt-af…

Log Drains are now on Pro Send your Postgres, Auth, Storage, Edge Functions, and Realtime logs directly to Datadog, Sentry, Grafana Loki, Axiom, S3, or your own endpoint Full-stack observability, no context switching

We are pleased to inform our community that access to Supabase’s website supabase.co has now been fully restored for all users across India. We sincerely thank the Ministry of Electronics and Information Technology (MeitY) for their prompt action and constructive engagement in resolving this matter. Access to our services has been fully restored, and we deeply appreciate the continued patience and support of builders, developers, and businesses across India. Thank you for your patience while we worked through this incident. status.supabase.com

I spent years at SuccessFactors running SAS 70 audits with full transparency, giving customers the actual workbooks so they knew exactly what was being tested. That process helped shape what became SOC 2. That was nearly two decades ago. The infrastructure has changed beyond recognition. The audit model hasn't. So I built the replacement. OTVP — the Open Trust Verification Protocol — replaces static audit reports with verification agents that scan live infrastructure and produce cryptographically signed trust assessments in seconds, not months. This weekend I deployed 11 agents against a real AWS account covering 10 SOC 2 criteria. They found unencrypted databases, users without MFA, missing audit logs, and zero backup coverage — all named by resource ARN, all signed with Ed25519, all chained into Merkle trees for tamper-proof verification. The full spec and SDK are open source. The dashboard shows real results from live infrastructure. I wrote up the full story below: linkedin.com/pulse/i-helped… Live dashboard: lnkd.in/gQa-dBih Spec: github.com/wharmer68/otvp SDK: lnkd.in/gn5H7x7C Looking for security practitioners who are tired of compliance theater, companies willing to run early agents, and GRC teams interested in integration. The spec is open. The code runs. The conversation starts now. #cybersecurity #soc2 #audit #opensource

we've added 7 new security events to @Supabase Auth to take action on suspicious behavior: ◆ Password changed ◆ Email address changed ◆ Phone number changed ◆ Identity linked ◆ Identity unlinked ◆ MFA method added ◆ MFA method removed works with @resend:

at @supabase we're building: ◆ a new storage engine for Postgres ◆ an open source sharding engine for Postgres ◆ an open source ETL engine for Postgres ◆ an FDW extension to query anything from Postgres we hire talented people who just want to build. come us ↓

🧵 Search isn’t dying — it’s evolving. AI didn’t replace SEO. It just revealed who’s been doing it right all along. Before joining @craft_ventures , I led organic growth at @clickup — where our team generated $10M+ in free traffic every month and scaled SEO from a few thousand to hundreds of thousands of signups. Now, across the Craft portfolio, I help Founders and GTM leaders do the same — but the playbook has changed. That’s why our recent private session with @5le hit differently. Eli isn’t just an SEO expert — he helped define the discipline. Welcome to the era of GEO / LLM Search 👇 We’re no longer optimizing for humans using Google. We’re optimizing for AI as the end user. ChatGPT, Gemini, Perplexity, Claude — they’re now the front-end of discovery. Eli wrote Product-Led SEO, scaled organic growth at SurveyMonkey, and now advises teams at Coinbase, Quora, Gusto, Faire, and Zendesk on building search systems that compound authority, not vanity metrics. And tools like @tryprofound , @getathenahq , and @peec_ai show how brands are performing when AI agents do the searching. Visibility isn’t just about ranking anymore — it’s about being referenced. In our fireside for the Craft Marketing & Growth Network and Portfolio, Eli broke down what he calls the Search Stack of 2025 — where human intent, AI models, and product utility converge. It was one of the clearest frameworks I’ve seen for how organic growth is evolving. Here are the 5 principles that stood out 👇

One thing that we don’t shout about much at @supabase, but I’m particularly proud of: we have engineered the entire company to be as open source as possible: 1/ we prioritise supporting existing open source projects over building from scratch 2/ we upstream everything we can 3/ we donate to frameworks and projects, and acquire them if they can’t find stability 4/ we prioritise community contributors over building ourselves (and sponsor them for their work) 5/ our code is 100% free and open source (and to back this up: used by behemoths like Alicloud who don’t pay us anything). Essentially every engineer we employ is working on open source products it has been incredibly difficult to pull this off, striking the balance between commercialization and giving away as much as possible. As we grow bigger I only hope to support more open source communities

Are you ready? ⚡️ > supabase.com/events

Don’t miss this!

@supabase Size 9

SupaCrocs 🐊 Giveaway To enter reply with: - Your favorite meme - Your US shoe size Most liked reply wins ⚡️

Supaswag is hard to come by…..get your entries in!

𝙉𝙚𝙬 𝙍𝙁𝘾: 𝙎𝙌𝙇 𝙀𝙙𝙞𝙩𝙤𝙧 𝙨𝙣𝙞𝙥𝙥𝙚𝙩𝙨 We just published a new RFC on how the SQL Editor handles snippet saving in Supabase. We’re proposing a switch from autosave ➡️ manual save, to simplify the experience. 🙏 Read & share your feedback 👇