PostgREST 16
Depends
Confidence: Medium
Buy it if you know Postgres well and want the database itself to be the API . it's free and mature.
New check
Comparison
PostgREST 16 and Hasura both land on Depends.
Buy it if you know Postgres well and want the database itself to be the API . it's free and mature.
Buy if you run Postgres and need instant, governed GraphQL with realtime and federation at real scale.
| Compare | ||
|---|---|---|
| Verdict | Depends | Depends |
| Best for | Postgres-first developers | Postgres-heavy products needing instant GraphQL |
| Who it's not for | Non-technical teams wanting a managed API . no vendor to call | Small CRUD apps . Supabase or PostgREST is cheaper and simpler |
| Privacy | No known public vulnerabilities found in the sources reviewed.³ | Multiple public CVEs across versions; vendor discloses and patches, but auth misconfiguration remains the top real-world risk. |
| Support quality | No support evidence found | No supporting evidence in sources |
| Public sentiment | Developers on Hacker News and Reddit praise PostgREST for spinning up APIs straight from Postgres, with complaints sparse in available sources.⁶ | Reviewers praise the instant-API model and production stability but complain about pricing changes and permission complexity.10 |
| Biggest gotcha | Leaving Supabase Cloud surfaces PostgREST config failures that produce no error⁷ | 2023 pricing overhaul caused bill shock; community called it 'full bananas'12 |