76 products Sparkpulse tracks are shipping around security. The highest-velocity security products right now are Speakeasy, n8n and CrowdSec (ranked by Sparkpulse's velocity score). The theme runs across 14 sectors, so the momentum you see here is drawn from products competing in different corners of the market. Their velocity scores span 5.0 to 10.0 out of 10, a spread that shows how unevenly shipping cadence is distributed across the field. Below: the products carrying this theme and 7 recent editorial briefs that reference it, the most recent dated Oct 1, 2026. Everything on this page is regenerated from verified release data, so the ranking reflects the latest changelogs rather than a static list.
#01SpeakeasySpeakeasy makes AI agents first-class principals: server identity modes, Slack as a work identity, and directory group role mapping10.0alternatives →#02n8nn8n 3.0 is out, shipped the same morning as 2.46 after weeks of migration-report groundwork.7.5alternatives →#03CrowdSecCrowdSec's bot-detection candidate hardens through rc2 while the WAF becomes the product's centre.6.3alternatives →#04HashiCorpHashiCorp Vault agentic IAM reaches GA — AI agents get production-grade identity and secrets management.6.3alternatives →#05DaprDapr 1.19 ships cross-app workflows, an MCP server and 40% faster workflow throughput.6.3alternatives →#06CountlyCountly ripped out its custom-code sandbox and rebuilt its Docker stack from scratch in a single LTS drop.6.3alternatives →#07RetoolRetool's week is security disclosures and patch trains after a fast run of model launches.6.3alternatives →#08DevinDevin's quarter is one long enterprise hardening push, headlined by stacked review permissions and network policy.6.3alternatives →#09Easy!AppointmentsEasy!Appointments 1.6 lands video conferencing, GDPR tools, and a serious security overhaul across its CalDAV and booking stack.6.3alternatives →#10Inspektor GadgetInspektor Gadget v0.56 adds Kubernetes multi-tenancy and GPU telemetry groundwork6.3alternatives →#11JoomlaJoomla 6.2 enters beta with AI language fallback, XOAuth2, and a revamped TinyMCE — three tracks shipping in parallel.6.3alternatives →#12Apache StormStorm 3.0 finishes removing the Clojure it was built in, and moves to a Java 21 baseline.6.3alternatives →#13QuayQuay keeps both enterprise branches on a monthly CVE-patch metronome — and nothing else.5.0alternatives →#14PixelfedPixelfed 0.15.2 ships the PHP RCE patches and turns cached timelines on for everyone.5.0alternatives →#15RoundcubeRoundcube patches 28+ vulnerabilities across two branches in a five-month hardening sprint5.0alternatives →#16ThingsBoardThingsBoard closes a script-sandbox file write and dozens of CVEs on its 4.3 and 4.2 lines.5.0alternatives →#17MeilisearchMeilisearch tightens sharding latency and index authorization in a flurry of maintenance releases.5.0alternatives →#18FreshRSSFreshRSS ships two security releases in a day for PHP CVEs and moves Docker to Debian 13.5.0alternatives →#19SyliusSylius patched critical JWT and Host header auth vulnerabilities across three stable branches simultaneously.5.0alternatives →#20GreenlightGreenlight 3.9 makes URL_HOST mandatory, forcing admin action on every self-hosted deployment.5.0alternatives →#21HorillaHorilla shipped six security releases in three weeks, ending with a no-login RCE.5.0alternatives →#22TraefikTraefik v2.11 ships three CVEs and Kubernetes CRD collision fixes in maintenance-mode patch cycle.5.0alternatives →#23ActivepiecesActivepieces backports October's Node.js security update to five release lines.5.0alternatives →#24KubeArmorKubeArmor is hardening its eBPF DNS visibility and supply chain security posture in the v1.7.5 pre-release cycle.5.0alternatives →#25GiftedGifted lets hotels sell in-room extras through the same checkout as vouchers.5.0alternatives →#26Open edXOpen edX maintenance branches carrying security backports, not features5.0alternatives →#27Google CloudGoogle Cloud is broadening Gemini Enterprise's data reach and tightening security defaults.5.0alternatives →#28WeaviateWeaviate patched its whole cloud estate in 17 hours after the eMudhra CA compromise.5.0alternatives →#29ElasticsearchElastic patches seven Kibana CVEs in a single wave, two rated High severity5.0alternatives →#30ElementElement 1.12.33 ships: simpler recovery keys, mandatory verification, no libolm migration.5.0alternatives →#31SlurmSlurm coordinated a 7-CVE security drop across three active branches, including a privilege escalation and SQL injection.5.0alternatives →#32HOMERHOMER 11.0.369 fixes S3 auth on Ceph-based storage and stops compaction memory growth.5.0alternatives →#33FourwavesFourwaves follows its participant inbox with a week of admin fixes and security hardening.5.0alternatives →#34ILIASILIAS ships synchronized security patches across versions 9, 10, and 11 on a monthly maintenance cadence.5.0alternatives →#35Eclipse OpenJ9Eclipse OpenJ9 v0.60.0 patches three CVEs and broadens JDK support to 26.0.2, while Valhalla and JFR build out across releases.5.0alternatives →#36AdGuard HomeAdGuard Home patches a DNS-over-QUIC resource exhaustion advisory and moves edge to the new UI5.0alternatives →#37TailscaleTailscale ships a client patch to distrust compromised TLS intermediates as policy features land.5.0alternatives →#38AutheliaAuthelia's 4.39.x series is a continuous patch stream: five releases in nine days, no new features5.0alternatives →#39PrestaShopPrestaShop 9.2 beta ships native One Page Checkout, an AI assistant, and a developer extensibility system.5.0alternatives →#40Close CRMClose takes Chloe Chat out of beta for every customer, a month after OIDC SSO.5.0alternatives →
Speakeasy, n8n, CrowdSec, HashiCorp, Dapr, and 35 more — the security products Sparkpulse tracks, ranked by shipping velocity from verified changelogs.
Which security product has the highest shipping velocity?
Speakeasy, with the top velocity score (10.0/10) — Sparkpulse's velocity score is derived from verified release data.
How many products are shipping around security?
Sparkpulse currently tracks 76 products carrying the security theme, updated continuously from verified release data.