GitHub turns Copilot into an org-wide default, adds memory to agentic security fixes.
Libreswan alternatives
The best Libreswan alternatives in software development tools, ranked by Sparkpulse's velocity_score.
Updated Sep 25, 2026
Looking for the best alternatives to Libreswan? Sparkpulse tracks and ranks 12 alternatives in software development tools by shipping velocity — how frequently each ships meaningful updates, verified from official changelogs. For reference, Libreswan shipped 0 meaningful updates in the last 30 days and carries a velocity score of 6.3 out of 10 in 2026. The alternatives below are ranked the same way, so you're comparing real release momentum, not marketing claims.
About Libreswan
Libreswan puts post-quantum key exchange into IKEv2 — ML-KEM 768 ships in v5.4.
Libreswan spent the last two releases on security patches, including a CVE found when the project ran an AI audit over its own codebase. v5.4 breaks that pattern: it implements RFC 9370's multiple-key-exchange machinery end to end — IKE_INTERMEDIATE, IKE_ADDITIONAL_KE and IKE_FOLLOWUP_KE — and uses it to carry ML_KEM_768 in IKE_SA_INIT and IKE_INTERMEDIATE. The rest of the release is a wide maintenance sweep across kernel integration on the BSDs, config parsing and logging.
Velocity 6.3 · Last update 1mo ago
Top 12 alternatives to Libreswan
Ranked by recent ship velocity. Tap any card for the full editorial breakdown, or pivot to a head-to-head.
Speakeasy ships agent-as-principal identity and active Shadow AI blocking—moving from observing AI agents to controlling them.
Manticore Search adds direct-to-disk bulk import, eliminating RAM staging bottlenecks in large ingestion pipelines.
CodeRabbit launches a cross-repo PR triage queue that ranks every open pull request with evidence.
Weaviate ships Engram agent memory, HFresh disk indexing, and 4-bit quantization in quick succession
Workato adds per-tool RBAC to MCP servers, tightening agent blast radius for enterprise deployments
Rivet is shipping the complete agentic backend stack: actors, durable streams, BYOC, MCP integration, and a V8 app runtime in one month.
Sanity is building the headless CMS as an AI agent interface — a new MCP release nearly every day.
Gravity Forms Stripe 7.0 restructures how entries and webhooks are handled with Sandbox support
Kubernetes v1.37 broad Beta wave hardens storage security, memory management, and lays groundwork for AI workloads.
NATS 2.15 ships a desired-state reconciliation engine that fundamentally changes how JetStream clusters are managed.
Appsmith ships an embedded MCP server, letting AI clients build and edit apps via structured tool calls
Libreswan vs alternatives — shipping velocity at a glance
Velocity score (0–10) and meaningful releases shipped in the last 30 days, from official changelogs. Higher = shipping faster.
| Product | Velocity | Sparks · 30d | Focus areas | Latest release |
|---|---|---|---|---|
| Libreswan (baseline) | 6.3 | 0 | ipsecpost-quantum cryptoikev2 | 5.4: ML-KEM 768 and RFC 9370 multiple key exchanges for IKEv2 |
| GitHub | 10.0 | 3 | copilotagentic-aimemory | Agentic autofix now uses Copilot Memory |
| Speakeasy | 10.0 | 1 | ai-governancemcp-platformagent-identity | Agents act as themselves: scoped keys, their own upstream accounts, and their own name in audit and usage |
| Manticore Search | 8.8 | 1 | search-enginevector-searchbulk-import | Manticore 29.12: disk-direct bulk import bypasses RAM staging for real-time tables |
| CodeRabbit | 8.8 | 1 | pr-reviewtriagecross-repo | CodeRabbit Triage | GitHub Cloud | Team |
| Weaviate | 8.8 | 3 | vector-searchagent-memoryquantization | Agent Memory with Engram: A Practical Guide |
| Workato | 8.8 | 1 | agent-platformenterprise-rbacmcp | Tool-Level RBAC for MCP Servers — Now Generally Available |
| Rivet | 7.5 | 2 | actor-platformagentic-backendbyoc-enterprise | Rivet BYOC: run the control plane in your own AWS or GCP VPC |
| Sanity | 7.5 | 0 | mcp-serverai-agent-cmscontent-operations | — |
| Gravity Forms | 7.5 | 1 | wordpress-formsstripe-integrationpayment-forms | Brand new release: Stripe 7.0 |
| Kubernetes | 7.5 | 0 | ai-workloadsstorage-securitygang-scheduling | — |
| NATS | 7.5 | 1 | messagingjetstreamdistributed-systems | NATS 2.15: Desired-State JetStream and Full Cluster Operations Suite |
| Appsmith | 6.3 | 1 | mcp-serverai-agentsinternal-tools | Appsmith 2.4: embedded MCP server (beta) for AI-driven app building |
The 12 best Libreswan alternatives, in depth
1. GitHub · velocity 10.0
GitHub turns Copilot into an org-wide default, adds memory to agentic security fixes.
Over the last 30 days GitHub shipped 3 meaningful updates vs Libreswan's 0, most recently “Agentic autofix now uses Copilot Memory”. Its velocity score of 10.0/10 blends that with longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, GitHub focuses on copilot, agentic ai and memory.
Over the last 30 days GitHub has been shipping faster than Libreswan — a point in its favour if release momentum matters to you.
2. Speakeasy · velocity 10.0
Speakeasy ships agent-as-principal identity and active Shadow AI blocking—moving from observing AI agents to controlling them.
Over the last 30 days Speakeasy shipped 1 meaningful update vs Libreswan's 0, most recently “Agents act as themselves: scoped keys, their own upstream accounts, and their own name in audit and usage”. Its velocity score of 10.0/10 blends that with longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, Speakeasy focuses on ai governance, mcp platform and agent identity.
Over the last 30 days Speakeasy has been shipping faster than Libreswan — a point in its favour if release momentum matters to you.
Full Speakeasy trajectory → · Compare Libreswan vs Speakeasy →
3. Manticore Search · velocity 8.8
Manticore Search adds direct-to-disk bulk import, eliminating RAM staging bottlenecks in large ingestion pipelines.
Over the last 30 days Manticore Search shipped 1 meaningful update vs Libreswan's 0, most recently “Manticore 29.12: disk-direct bulk import bypasses RAM staging for real-time tables”. Its velocity score of 8.8/10 blends that with longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, Manticore Search focuses on search engine, vector search and bulk import.
Over the last 30 days Manticore Search has been shipping faster than Libreswan — a point in its favour if release momentum matters to you.
Full Manticore Search trajectory → · Compare Libreswan vs Manticore Search →
4. CodeRabbit · velocity 8.8
CodeRabbit launches a cross-repo PR triage queue that ranks every open pull request with evidence.
Over the last 30 days CodeRabbit shipped 1 meaningful update vs Libreswan's 0, most recently “CodeRabbit Triage | GitHub Cloud | Team”. Its velocity score of 8.8/10 blends that with longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, CodeRabbit focuses on pr review, triage and cross repo.
Over the last 30 days CodeRabbit has been shipping faster than Libreswan — a point in its favour if release momentum matters to you.
Full CodeRabbit trajectory → · Compare Libreswan vs CodeRabbit →
5. Weaviate · velocity 8.8
Weaviate ships Engram agent memory, HFresh disk indexing, and 4-bit quantization in quick succession.
Over the last 30 days Weaviate shipped 3 meaningful updates vs Libreswan's 0, most recently “Agent Memory with Engram: A Practical Guide”. Its velocity score of 8.8/10 blends that with longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, Weaviate focuses on vector search, agent memory and quantization.
Over the last 30 days Weaviate has been shipping faster than Libreswan — a point in its favour if release momentum matters to you.
Full Weaviate trajectory → · Compare Libreswan vs Weaviate →
6. Workato · velocity 8.8
Workato adds per-tool RBAC to MCP servers, tightening agent blast radius for enterprise deployments.
Over the last 30 days Workato shipped 1 meaningful update vs Libreswan's 0, most recently “Tool-Level RBAC for MCP Servers — Now Generally Available”. Its velocity score of 8.8/10 blends that with longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, Workato focuses on agent platform, enterprise rbac and mcp.
Over the last 30 days Workato has been shipping faster than Libreswan — a point in its favour if release momentum matters to you.
7. Rivet · velocity 7.5
Rivet is shipping the complete agentic backend stack: actors, durable streams, BYOC, MCP integration, and a V8 app runtime in one month.
Over the last 30 days Rivet shipped 2 meaningful updates vs Libreswan's 0, most recently “Rivet BYOC: run the control plane in your own AWS or GCP VPC”. Its velocity score of 7.5/10 blends that with longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, Rivet focuses on actor platform, agentic backend and byoc enterprise.
Over the last 30 days Rivet has been shipping faster than Libreswan — a point in its favour if release momentum matters to you.
8. Sanity · velocity 7.5
Sanity is building the headless CMS as an AI agent interface — a new MCP release nearly every day.
Its velocity score of 7.5/10 reflects longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, Sanity focuses on mcp server, ai agent cms and content operations.
Sanity and Libreswan have shipped at a similar pace over the last 30 days, so the decision comes down to fit and feature depth.
9. Gravity Forms · velocity 7.5
Gravity Forms Stripe 7.0 restructures how entries and webhooks are handled with Sandbox support.
Over the last 30 days Gravity Forms shipped 1 meaningful update vs Libreswan's 0, most recently “Brand new release: Stripe 7.0”. Its velocity score of 7.5/10 blends that with longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, Gravity Forms focuses on wordpress forms, stripe integration and payment forms.
Over the last 30 days Gravity Forms has been shipping faster than Libreswan — a point in its favour if release momentum matters to you.
Full Gravity Forms trajectory → · Compare Libreswan vs Gravity Forms →
10. Kubernetes · velocity 7.5
Kubernetes v1.37 broad Beta wave hardens storage security, memory management, and lays groundwork for AI workloads.
Its velocity score of 7.5/10 reflects longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, Kubernetes focuses on ai workloads, storage security and gang scheduling.
Kubernetes and Libreswan have shipped at a similar pace over the last 30 days, so the decision comes down to fit and feature depth.
Full Kubernetes trajectory → · Compare Libreswan vs Kubernetes →
11. NATS · velocity 7.5
NATS 2.15 ships a desired-state reconciliation engine that fundamentally changes how JetStream clusters are managed.
Over the last 30 days NATS shipped 1 meaningful update vs Libreswan's 0, most recently “NATS 2.15: Desired-State JetStream and Full Cluster Operations Suite”. Its velocity score of 7.5/10 blends that with longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, NATS focuses on messaging, jetstream and distributed systems.
Over the last 30 days NATS has been shipping faster than Libreswan — a point in its favour if release momentum matters to you.
12. Appsmith · velocity 6.3
Appsmith ships an embedded MCP server, letting AI clients build and edit apps via structured tool calls.
Over the last 30 days Appsmith shipped 1 meaningful update vs Libreswan's 0, most recently “Appsmith 2.4: embedded MCP server (beta) for AI-driven app building”. Its velocity score of 6.3/10 blends that with longer-term release cadence.
Where Libreswan leans on ipsec, post quantum crypto and ikev2, Appsmith focuses on mcp server, ai agents and internal tools.
Over the last 30 days Appsmith has been shipping faster than Libreswan — a point in its favour if release momentum matters to you.
Full Appsmith trajectory → · Compare Libreswan vs Appsmith →
Frequently asked questions
What are the best alternatives to Libreswan?
The top Libreswan alternatives we currently track in software development tools are GitHub, Speakeasy, Manticore Search, CodeRabbit, Weaviate, ranked by recent ship velocity.
How is this list of Libreswan alternatives ranked?
Alternatives are ranked by Sparkpulse's velocity_score — release cadence + 30-day spark count + sector-relative ship rate.
Can I compare Libreswan directly with one of these alternatives?
Yes — every card has a "Compare with Libreswan" link to a side-by-side /compare page.