If you've come across a link like supabase.link and wondered whether it's safe, the short answer is yes. This domain is simply a redirect to supabase.com, the official website of a well-known backend-as-a-service platform called Supabase. The domain was registered back in 2023 and has stayed clean on every security check we ran — no blacklists, no malware warnings, and a valid SSL certificate with modern encryption. For a redirect domain, the infrastructure is well set up: Cloudflare handles the DNS, the site enforces HTTPS, and the domain has a strict email authentication policy that helps prevent impersonation. Because supabase.link exists only to forward visitors to the main Supabase site, it doesn't have its own privacy policy or contact page — that's normal and not a concern. Your trust should rest on the reputation of Supabase itself, which is a legitimate company used by developers worldwide. So whether you're clicking a link from a documentation page, a status update, or a marketing email, you can be confident that supabase.link is not a scam. It's just a handy short URL that takes you where you expect to go.
In plain English
supabase.link is a redirect domain that points to the official Supabase website. All the security and reputation signals are clean, and the domain has been around for over three years. If you see a link to supabase.link, it's simply a shortcut to supabase.com — nothing suspicious going on here.
Where the score comes from
Solid security setup with a valid SSL certificate, enforced HTTPS via HSTS, and no blacklist or threat detections. This is exactly what you'd expect for a legitimate redirect domain tied to a major SaaS brand.
The domain name strongly suggests ownership by Supabase, and the redirect to supabase.com backs that up. The WHOIS is privacy-protected through Namecheap, which is standard for a company that doesn't need public contact on a secondary domain. The 3-year age adds confidence.
Clean across all blacklists and Google Safe Browsing. The domain isn't listed in the top million sites, but that's normal for a redirect-only domain. No history of abuse found.
The site is a redirect with no standalone content, so there's no about page or contact info here. That's acceptable for this kind of domain — the actual business transparency is on the target site supabase.com.
No legal pages like privacy policy or terms are present on supabase.link itself, but those are not required for a simple redirect. The parent site supabase.com likely covers legal obligations for the SaaS business.
Good infrastructure: Cloudflare DNS, strong email authentication (DMARC reject, SPF), modern TLS, and hosting on Amazon via Vercel. The lack of DNSSEC is a minor gap but not unusual for a redirect domain.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →