Hacker ApprovedDepartments

Metabase

The most recommended of 4 business intelligence tools

People recommend it for turning messy databases into stakeholder dashboards quickly. Critics find it clunky for deep UX, permissions and embedding, and cite a 2026 zero-day hack.

People recommend it for turning messy databases into stakeholder dashboards quickly. Critics find it clunky for deep UX, permissions and embedding, and cite a 2026 zero-day hack.

26 people gave an opinion

recommend it
16
criticize it
10
approval share
62%
Each figure is one person. RecommendsCriticizes

Recommended in 8 of 13 months

  1. November 2025: not recommended
  2. December 2025: recommended
  3. January 2026: recommended
  4. February 2026: recommended
  5. March 2026: not recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: not recommended
  9. July 2026: not recommended
  10. August 2026: recommended
  11. September 2026: recommended
  12. October 2026: recommended
  13. November 2026: not recommended (month in progress)

Why it doesn’t carry the badge

  • 16 people recommend itNeeds 10 or more, met.
  • 1.6 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 8 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Simple dashboards for stakeholders

    “It's great for internal dashboards and quick customer access, but starts to feel clunky once you care about UX, permissions, and embedding deeply.”

    Comment from 9 Feb 2026 in “What do you use for your customer facing analytics?”

    “if all you care about is showing data in a digestible format to stakeholders, it's really simple”

    Comment from 7 May 2026 in “SQLite Is a Library of Congress Recommended Storage Format”
  • Works well for many people

    “This setup works very well at the moment for me.”

    Comment from 29 Aug 2026 in “Ask HN: Why do we need MCP?”

    “We use metabase (and generally love it)”

    Comment from 20 Dec 2025 in “Skills Officially Comes to Codex”
  • Works with Claude and CLI

    “we're pretty happy with Claude plus Metabase CLI (self-hosted)”

    Comment from 28 Oct 2026 in “Hex Raises $100M”

    “i have a metabase skill to query analytics”

    Comment from 20 Dec 2025 in “Skills Officially Comes to Codex”

What people warn about

Each mark is one comment

  • Hacked by zero-day vulnerability

    “their metabase instance was hacked with a zero-day”

    Comment from 8 Sep 2026 in “We have a year to fix security everywhere”

    “It's just a hack, it happens, we fixed the hole, nothing to see here until we find the next buyer”

    Comment from 11 Aug 2026 in “The UK's War on Anonymity Has Come to America”

    “Metabase Cloud was attacked by someone utilizing an unknown ("0-day") security vulnerability”

    Comment from 6 Aug 2026 in “Metabase: Unauthenticated SQL injection in password reset (CVSS 10.0)”
  • Clunky UX, permissions, embedding

    “It's great for internal dashboards and quick customer access, but starts to feel clunky once you care about UX, permissions, and embedding deeply.”

    Comment from 9 Feb 2026 in “What do you use for your customer facing analytics?”

    “without the clunkiness of Metabase”

    Comment from 12 Feb 2026 in “What do you use for your customer facing analytics?”
  • Poor code quality, bad SQL output

    “Apparently the AI company Metabase has a very poor code base.”

    Comment from 15 May 2026 in “Welcome to the Strip Mining Era of OSS Security”

    “I've seen the SQL Metabase emits, it's not great.”

    Comment from 30 Jan 2026 in “Deep dive into Turso, the "SQLite rewrite in Rust"”

Other business intelligence tools people recommend

The three most recommended other business intelligence tools, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Metabase compared with 3 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
MetabaseThis page161062%8——
Microsoft Power BI91047%6——
Tableau71237%5——
BitBoard70100%1——
See all 4 business intelligence tools, ranked

What people said

23 of the 26 comments that mention it, newest first. Each links to the original comment.

“we're pretty happy with Claude plus Metabase CLI (self-hosted)”

RecommendsComment from 28 Oct 2026 in “Hex Raises $100M”

“the cloud / self hosted divide was too much fiddling, along with the expression language”

CriticizesComment from 21 Oct 2026 in “DuckDB 2.0.0 LTS “Cinnamon Teal””

“One is Metabase, which is written in Clojure”

MixedComment from 8 Oct 2026 in “Clojure in the age of language models”

“their metabase instance was hacked with a zero-day”

MixedComment from 8 Sep 2026 in “We have a year to fix security everywhere”

“This setup works very well at the moment for me.”

RecommendsComment from 29 Aug 2026 in “Ask HN: Why do we need MCP?”

“It's just a hack, it happens, we fixed the hole, nothing to see here until we find the next buyer”

CriticizesComment from 11 Aug 2026 in “The UK's War on Anonymity Has Come to America”

“I'd also like to see them pursue legal action against Metabase.”

CriticizesComment from 7 Aug 2026 in “Framework discloses data breach via Metabase 0-day”

“You can self host it and not allow accessing it over the internet.”

RecommendsComment from 7 Aug 2026 in “Framework discloses data breach via Metabase 0-day”

“we are sending this email to you regardless”

CriticizesComment from 7 Aug 2026 in “Framework discloses data breach via Metabase 0-day”

“Last 0day was catastrophic.”

CriticizesComment from 7 Aug 2026 in “Framework discloses data breach via Metabase 0-day”

“Metabase Cloud was attacked by someone utilizing an unknown ("0-day") security vulnerability”

CriticizesComment from 6 Aug 2026 in “Metabase: Unauthenticated SQL injection in password reset (CVSS 10.0)”

“Metabase is not going to get meaningful investment from researchers who want to fix issues”

CriticizesComment from 15 May 2026 in “Welcome to the Strip Mining Era of OSS Security”

“Apparently the AI company Metabase has a very poor code base.”

CriticizesComment from 15 May 2026 in “Welcome to the Strip Mining Era of OSS Security”

“if all you care about is showing data in a digestible format to stakeholders, it's really simple”

RecommendsComment from 7 May 2026 in “SQLite Is a Library of Congress Recommended Storage Format”

“Metabase works great with DuckDB as well”

RecommendsComment from 18 Feb 2026 in “A DuckDB-based metabase alternative”

“without the clunkiness of Metabase”

CriticizesComment from 12 Feb 2026 in “What do you use for your customer facing analytics?”

“It's great for internal dashboards and quick customer access, but starts to feel clunky once you care about UX, permissions, and embedding deeply.”

MixedComment from 9 Feb 2026 in “What do you use for your customer facing analytics?”

“I've seen the SQL Metabase emits, it's not great.”

CriticizesComment from 30 Jan 2026 in “Deep dive into Turso, the "SQLite rewrite in Rust"”

“metabase is intended for business analyst types and is AGPL, with shenanigans for embedding”

MixedComment from 29 Jan 2026 in “Deep dive into Turso, the "SQLite rewrite in Rust"”

“First you use Metabase to turn the mess into something you can stand behind”

RecommendsComment from 9 Jan 2026 in “Metabase Community Data Stack Report 2025”

“lets anyone in your company rummage around in the databases you have”

RecommendsComment from 5 Jan 2026 in “Ask HN: Who is hiring? (January 2026)”

“We use metabase (and generally love it)”

RecommendsComment from 20 Dec 2025 in “Skills Officially Comes to Codex”

“i have a metabase skill to query analytics”

MixedComment from 20 Dec 2025 in “Skills Officially Comes to Codex”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.