← Back to home
Comparison · Infra & APIs

Apereo CAS vs Incus

A side-by-side editorial comparison of Apereo CAS and Incus — release velocity, themes, recent moves, and the top alternatives to consider.

Apereo CAS vs Incus: at a glance

FeatureApereo CASIncus
SectorInfra & APIsInfra & APIs
Velocity score2.55.0
Sparks · 30d00
Top themesidentity, sso, open-source, release-candidatescontainer manager, live migration, sr-iov, project isolation
Last editorial update2mo ago1h ago
WebsiteVisit →Visit →

What is Apereo CAS?

Apereo CAS opens an 8.1 line while 8.0 is still working through release candidates.

CAS is running a long release-candidate train. The 8.0.0 line reached RC6 in late June after RC4 and RC5 in spring, and 8.1.0-RC1 has now appeared in August. A 7.3.7.1 patch in June addressed a published OIDC vulnerability on the maintenance branch. The release entries themselves carry only navigation links and contributor credits, so feature detail is not visible here.

Read the full Apereo CAS trajectory →

What is Incus?

Incus 7.6 fixes 18 security issues, eight critical, and adds SR-IOV NIC live migration

Incus 7.6, released October 30, carries 18 security fixes, eight rated critical, many of them about restricted projects reaching the default project or the host, plus an authentication bypass through unverified client certificate chains. Its features aim at larger environments: live migration for VMs using SR-IOV NICs, multifd for VM live migration, cluster healing options, compression for block volumes, and OIDC opaque tokens. 7.5 before it added live migration between projects, cluster metrics and NVIDIA GPU cliques. The 7.0 LTS branch received a second patch, 7.0.2, with no described changes.

Read the full Incus trajectory →

Apereo CAS vs Incus: editorial side-by-side

A
Apereo CAS
INFRA · APIS
2.5

Apereo CAS opens an 8.1 line while 8.0 is still working through release candidates.

◆ Current state

CAS is running a long release-candidate train. The 8.0.0 line reached RC6 in late June after RC4 and RC5 in spring, and 8.1.0-RC1 has now appeared in August. A 7.3.7.1 patch in June addressed a published OIDC vulnerability on the maintenance branch. The release entries themselves carry only navigation links and contributor credits, so feature detail is not visible here.

◆ Where it's heading

Two lines are moving at once, which suggests 8.0 is close enough to final that work has begun branching forward rather than that the RC train has stalled. The contributor lists stay small and consistent across releases - a handful of recurring maintainers - and security handling happens on the older supported branch, as it should.

◆ Prediction

An 8.0.0 final is the obvious next milestone given RC6 was three months ago and an 8.1 branch is already open. The release bodies do not describe features, so what it contains cannot be read from this feed.

I
Incus
INFRA · APIS
5.0

Incus 7.6 fixes 18 security issues, eight critical, and adds SR-IOV NIC live migration

◆ Current state

Incus 7.6, released October 30, carries 18 security fixes, eight rated critical, many of them about restricted projects reaching the default project or the host, plus an authentication bypass through unverified client certificate chains. Its features aim at larger environments: live migration for VMs using SR-IOV NICs, multifd for VM live migration, cluster healing options, compression for block volumes, and OIDC opaque tokens. 7.5 before it added live migration between projects, cluster metrics and NVIDIA GPU cliques. The 7.0 LTS branch received a second patch, 7.0.2, with no described changes.

◆ Where it's heading

Live migration is still the through-line: 7.4 made it near-live for dependent disks, 7.5 took it across projects, and 7.6 extends it to VMs using SR-IOV NICs. The other thread is multi-tenancy under scrutiny. The size of the 7.6 security batch, with several critical items in project isolation, shows that restricted projects are now being tested as a real boundary, and the release adds a build and threat model for Anthropic's OSS Scanner.

◆ Prediction

Expect a 7.6.x patch or further security fixes, because the project-isolation findings cover a wide surface. The monthly feature cadence should continue with more live-migration throughput work, given multifd and the throughput improvements in this release.

Alternatives to Apereo CAS and Incus

Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Apereo CAS or Incus.

See all Apereo CAS alternatives → · See all Incus alternatives →

Recent activity from Apereo CAS and Incus

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 2d agoIncus18 security fixes, SR-IOV NIC live migration and multifd
  2. 16d agoIncusSecond patch on the 7.0 LTS branch
  3. 1mo agoIncusLive migration across projects, cluster metrics, NVIDIA GPU cliques
  4. 2mo agoIncusIncus 7.4 adds near-live migration and Secure Boot key management ⚡
  5. 2mo agoApereo CASv8.1.0-RC1
  6. 3mo agoIncusNative Windows and macOS installers; QMP command timeouts
  7. 3mo agoIncusFirst patch release on the 7.0 LTS branch
  8. 4mo agoApereo CASv8.0.0-RC6
  9. 4mo agoApereo CASPatch release for a published OIDC vulnerability
  10. 5mo agoApereo CASv8.0.0-RC5
  11. 6mo agoApereo CASv8.0.0-RC4

Frequently asked questions

What is the difference between Apereo CAS and Incus?

They serve adjacent needs but don't currently overlap on shipped themes. Incus is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Apereo CAS better than Incus?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Incus is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.

What are the best alternatives to Apereo CAS?

Top Apereo CAS alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Apereo CAS alternatives" section above for the current picks, or visit /alternatives/apereo-cas for the full list with editorial commentary on each.

What are the best alternatives to Incus?

Top Incus alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Incus alternatives" section above for the current picks, or visit /alternatives/incus for the full list with editorial commentary on each.