Your entire backend.
One platform.
Already wired.
Postgres, enterprise auth, OAuth2, API gateway, fine-grained permissions, S3 storage, realtime, webhooks, vectors, search, and a client API. Managed or self-hosted. Same product, zero assembly required. ^ yes, all of it.
Not invented. Overheard.
One dashboard. Nothing to duct-tape. finally.
Postgres + SQL Workbench
Monaco editor, query history, ERD visualizer, branching, backups, point-in-time recovery.
Enterprise Auth
Social login, passwordless, MFA, sessions, SSO. The auth system your app will actually need at scale.
Fine-Grained Permissions
Relation-based access control. RBAC, relation tuples, role matrix, access checker.
OAuth2 / OpenID Connect
Issue access tokens, manage OAuth2 clients, PKCE flows, client credentials. Full OIDC provider.
API Gateway
Zero-trust reverse proxy. Session + token auth, permission checks, header mutation. Route auth once.
S3 Object Storage
Buckets, file browser, drag-and-drop, presigned URLs, access policies.
Live Subscriptions
WebSocket push on row changes. Subscribe to inserts, updates, deletes.
Event Delivery
HTTP callbacks on DB events. HMAC-signed, delivery logs, retries, test and replay.
REST + SQL-over-HTTP
Auto-REST, SQL-over-HTTP, RPC. Connect your frontend without writing another Express server.
Full-Text Search
Postgres-native FTS. Weighted ranking, highlighted results, auto-generated triggers.
pgvector Built In
Similarity search, HNSW/IVFFlat indexes. Skip the $70/mo vector database bill.
Database Branching
Instant dev copies of your database. Branch, experiment, merge or expire. Like git for your schema.
Same shopping list, different carts.
- Postgres database
- Enterprise auth (SSO + MFA)
- Fine-grained permissions
- OAuth2 / OIDC provider
- API Gateway (zero-trust)
- S3-compatible storage
- Realtime subscriptions
- Webhooks + HMAC
- Vector search (pgvector)
- Full-text search
- Database branching
- Backups + PITR
- Self-hosted = full product
- No vendor lock-in
- Postgres database
- Enterprise auth (SSO + MFA)
- Fine-grained permissions
- OAuth2 / OIDC provider
- API Gateway (zero-trust)
- S3-compatible storage
- Realtime subscriptions
- Webhooks + HMAC
- Vector search (pgvector)
- Full-text search
- Database branching
- Backups + PITR
- Self-hosted = full product
- No vendor lock-in
- Postgres database
- Enterprise auth (SSO + MFA)
- Fine-grained permissions
- OAuth2 / OIDC provider
- API Gateway (zero-trust)
- S3-compatible storage
- Realtime subscriptions
- Webhooks + HMAC
- Vector search (pgvector)
- Full-text search
- Database branching
- Backups + PITR
- Self-hosted = full product
- No vendor lock-in
- Postgres database
- Enterprise auth (SSO + MFA)
- Fine-grained permissions
- OAuth2 / OIDC provider
- API Gateway (zero-trust)
- S3-compatible storage
- Realtime subscriptions
- Webhooks + HMAC
- Vector search (pgvector)
- Full-text search
- Database branching
- Backups + PITR
- Self-hosted = full product
- No vendor lock-in
Simple pricing. No feature jail.
Every plan ships with the full platform. You only pay more when you use more.
- 1 project
- 500 MB Postgres
- 1 GB storage
- 500 auth MAU
- 2 GB bandwidth
- 100 req/min
- 3 projects
- 8 GB Postgres
- 5 GB storage
- 10K auth MAU
- 20 GB bandwidth
- 1K req/min
- 10 projects
- 50 GB Postgres
- 25 GB storage
- 50K auth MAU
- 100 GB bandwidth
- 5K req/min
no sales pitch, promise
Need more of just one thing?
Add a booster pack. No forced upgrades. stack as many as you want
Or, build it yourself…
do the math
Self-hosting? Docker image is free, same full product. But if midnight Postgres debugging isn't your hobby, we'll handle the ops.
~ spoken from experience
Before you ask
How is Truss different from Supabase?
Truss includes enterprise authentication (Ory Kratos with SSO, MFA, passwordless), fine-grained permissions (Ory Keto — Zanzibar-style RBAC/ReBAC), a full OAuth2/OIDC provider (Ory Hydra), and a zero-trust API gateway (Ory Oathkeeper). Supabase uses GoTrue for auth and has no built-in authorization engine, OAuth2 provider, or API gateway. Truss is fully self-hostable with zero feature restrictions — no crippled community edition.
Is Truss an alternative to Firebase?
Yes. Truss replaces Firebase Auth, Firestore, Cloud Storage, and Cloud Functions with self-hosted equivalents: PostgreSQL (not a proprietary document store), Ory Kratos for auth, MinIO for S3-compatible storage, and edge functions. Unlike Firebase, Truss runs on your own infrastructure with standard Postgres — no vendor lock-in, no proprietary query language, pg_dump always works.
How does Truss compare to Appwrite or PocketBase?
Appwrite and PocketBase are great for prototyping but lack enterprise auth (SSO, MFA), fine-grained permissions, OAuth2/OIDC, and an API gateway. Truss uses production-grade components — Ory's identity stack handles millions of users. PocketBase is a single Go binary with SQLite; Truss runs on PostgreSQL with pgvector, full-text search, database branching, and point-in-time recovery.
Can I self-host Truss for free?
Yes. Truss deploys with a single docker compose command. Every feature — auth, permissions, OAuth2, gateway, storage, realtime, webhooks, vectors, search, branching, backups — is available in the self-hosted version. There is no paid-only tier that gates features. The managed hosting is for teams who'd rather not operate Postgres at 3am.
What database does Truss use?
PostgreSQL — with pgvector for vector/embedding similarity search, built-in full-text search with weighted ranking, database branching (Neon-style instant dev copies), point-in-time recovery, and a web-based SQL workbench with Monaco editor, query history, and ERD visualizer.
Does Truss replace Neon?
Truss includes Neon-style database branching — instant copy-on-write dev databases that auto-expire. Combined with a SQL workbench, schema visualizer, backups, and PITR, it covers the Postgres developer experience Neon provides, plus auth, permissions, storage, and everything else in one platform.
Truss isn't open yet.
Drop your email to get in first when it is. Built for developers and indie hackers tired of wiring the same backend stack for every project.
No spam. One email — when it's ready.
You're on the list
You'll hear back when a spot opens up.