Retool
Retool fills in its AI-native React app builder
A side-by-side editorial comparison of Supabase and Vapi — release velocity, themes, recent moves, and the top alternatives to consider.
Supabase is reversing its biggest security default - public-schema tables no longer auto-exposed via PostgREST.
The headline shipping move is a deliberate change to Supabase's security posture: new projects can opt out of automatic Data API and GraphQL exposure for public-schema tables, with broader defaults flipping in May. Around it: an OAuth 2.1 compliance fix, an RLS Tester preview to make policy verification possible from the UI, and a steady drumbeat of platform improvements summarized in the monthly developer update.
Vapi widens its transcriber menu as Soniox hits GA and Deepgram Flux goes multilingual
Vapi is a platform for building voice AI agents. The substantive recent shipping is concentrated in its speech-to-text layer: the Soniox transcriber reached general availability for all customers, and Deepgram's Flux model gained multilingual support — both configurable per assistant. Most other weekly changelog entries in this window are empty placeholders with no described changes.
The headline shipping move is a deliberate change to Supabase's security posture: new projects can opt out of automatic Data API and GraphQL exposure for public-schema tables, with broader defaults flipping in May. Around it: an OAuth 2.1 compliance fix, an RLS Tester preview to make policy verification possible from the UI, and a steady drumbeat of platform improvements summarized in the monthly developer update.
Supabase is rebuilding the security defaults that made it fast to start with but easy to misconfigure. Combine the no-auto-expose change with the RLS Tester preview and the direction is clear: the platform is moving from convention-based exposure to explicit, testable access control. The OAuth compliance fix and developer updates suggest steady investment in standards conformance rather than new product surface this window.
Expect the no-auto-expose default to apply to existing projects (with a long opt-out runway), and the RLS Tester to graduate from preview into the dashboard as a first-class panel. Continued breaking-change drumbeat tied to OAuth/OIDC compliance is likely.
Vapi is a platform for building voice AI agents. The substantive recent shipping is concentrated in its speech-to-text layer: the Soniox transcriber reached general availability for all customers, and Deepgram's Flux model gained multilingual support — both configurable per assistant. Most other weekly changelog entries in this window are empty placeholders with no described changes.
The visible direction is widening transcriber choice and quality for real-time, multilingual voice agents. Within a short span Vapi promoted one new STT provider to GA (Soniox) and extended multilingual coverage on another (Deepgram Flux), both emphasizing low latency and turn-taking — the parts of a voice agent users feel most. The thin, content-free weekly entries make the rest of the roadmap hard to read from the changelog alone.
Expect continued expansion of the transcriber/provider menu and multilingual coverage; beyond the speech-to-text layer the changelog is too sparse to call a confident next move.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Supabase or Vapi.
Retool fills in its AI-native React app builder
Vercel keeps stacking the deployment platform for the agent era
Auth0 is re-tooling identity for AI agents and B2B multi-tenancy
GitHub bends its security stack toward governing the coding agents now writing the code.
Buildkite goes agent-native and secretless while easing the path off GitHub Actions
Ably is rebuilding its realtime stack around AI agents: transport SDK and agent-native CLI
See all Supabase alternatives → · See all Vapi alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Supabase is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Supabase is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Supabase alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Supabase alternatives" section above for the current picks, or visit /alternatives/supabase for the full list with editorial commentary on each.
Top Vapi alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Vapi alternatives" section above for the current picks, or visit /alternatives/vapi for the full list with editorial commentary on each.