Compare
Supabase Auth (GoTrue) is the open-source, self-hostable authentication layer of the Supabase Postgres platform — cheap, generous on free MAU, and tightly integrated with your database. Choose Qeet ID when identity is a product in its own right: first-class multi-tenancy, a real authorization engine, enterprise SSO and SCIM, and a verifiable audit trail.
Qeet ID
- License
- MIT (open source)
- Self-host
- First-class
- Pricing
- Linear per-MAU
- Stack
- Go + Postgres
- Focus
- Dedicated identity
Supabase Auth
- License
- Apache-2.0 (open source)
- Self-host
- First-class
- Pricing
- Per-MAU, cheaper overage
- Stack
- Go (GoTrue) + Postgres
- Focus
- Auth within DB platform
Open source too — but identity is the whole product.
Supabase Auth is a genuinely open-source, self-hostable component of the Supabase platform. Qeet ID competes on the same ground, then goes further where auth is your core concern: multi-tenancy, a real authorization engine, SSO without a paywall, and a verifiable audit trail.
Feature-by-feature
Verified against Qeet ID's implemented status and Supabase Auth's public docs. Where we're still building, we say so.
- Available
- Partial / gated
- Not offered
| Capability | Qeet ID | Supabase Auth |
|---|---|---|
| Authentication | ||
Passkeys / WebAuthn Supabase's WebAuthn support is newer and less complete. | Yes | Partial |
Magic links | Yes | Yes |
MFA (TOTP, SMS, email, recovery codes) Supabase MFA centres on TOTP and phone; email OTP and recovery codes are less complete. | Yes | Partial |
| Federation | ||
Social / OIDC login | Yes | Yes |
SAML 2.0 enterprise SSO App-level SAML SSO is Supabase Pro-plus only and billed separately (~$0.015/SSO-MAU). | Yes | Partial |
SCIM 2.0 provisioning Supabase has no SCIM provisioning. | Yes | No |
| Authorization | ||
RBAC + single-call /check API Supabase does authz via Postgres RLS + custom claims — no dedicated /check API. | Yes | Partial |
ABAC policy engine Attribute rules live in RLS policies, not a standalone policy engine. | Yes | Partial |
Explainable authz (grant-path “why?” trace) | Yes | No |
Multi-tenant isolation by default A Supabase project is effectively one user pool; multi-tenant is not first-class. | Yes | Partial |
| Deployment | ||
Open-source code Both are open source — Qeet ID is MIT, Supabase Auth (GoTrue) is Apache-2.0. | Yes | Yes |
Self-host on Postgres Both self-host; Qeet ID is a single binary, Supabase self-host runs the wider platform stack. | Yes | Yes |
Air-gapped / fully offline Qeet ID runs fully offline as one binary; Supabase self-host pulls a larger multi-service stack. | Yes | Partial |
| Pricing | ||
Free tier Supabase's free tier is larger. | 25,000 MAU | 50,000 MAU |
Per-MAU overage Supabase's overage is cheaper; Pro includes 100,000 MAU. | $0.02 / MAU (Pro) | $0.00325 / MAU (Pro) |
Enterprise SSO included Supabase app SAML SSO is a paid Pro-plus add-on billed per SSO-MAU. | Yes | Partial |
| Security & audit | ||
Tamper-evident hash-chained audit log + /verify Supabase offers logs but no hash-chained, independently verifiable audit trail. | Yes | Partial |
Breached-password rejection (HIBP) Supabase supports an opt-in HaveIBeenPwned password check. | Yes | Yes |
Adaptive / risk-based MFA + bot detection Supabase leans on CAPTCHA / rate limits; neither ships full adaptive MFA yet. | Roadmap | Partial |
| Compliance | ||
SOC 2 Type II / ISO 27001 Supabase's managed platform holds SOC 2; Qeet ID's audit is scheduled before GA. | Roadmap (pre-GA) | Yes |
Self-hosted = your compliance boundary Both can self-host, so the compliance boundary is yours either way. | Yes | Yes |
| Developer experience | ||
Dedicated identity admin UI Supabase's dashboard is database-centric; auth is a section within it, not a dedicated identity admin. | Yes | Partial |
Webhook events with HMAC + retries Supabase exposes auth hooks / DB webhooks; Qeet ID ships signed, retried event webhooks. | Yes | Partial |
First-party SDKs Supabase's JS SDK is excellent; broader language coverage is community-driven. | React · Node · Go | JavaScript-first |
Comparison is based on publicly-available product information at the time of writing. We do our best to be accurate — if anything above is wrong, please let us know and we'll correct it.
Migrate from Supabase Auth
Both open source. One is built for identity.
Start free on our hosted plan or self-host the Qeet ID binary — with multi-tenancy, SSO, and a verifiable audit log built in.