Skipper
Skipper adds RFC 9421 message signing and cuts RouteGroup parse time by 21%
Comparison · Infra & APIs
authentik vs Dragonfly
A side-by-side editorial comparison of authentik and Dragonfly — release velocity, themes, recent moves, and the top alternatives to consider.
authentik vs Dragonfly: at a glance
What is authentik?
authentik 2026.8.0 ships an Agent for machine identity and domain join, then enters rapid patch mode.
authentik is in a high-cadence maintenance cycle following the 2026.8.0 major release. Three point releases have landed in quick succession addressing admin file search, API autocomplete, and a blueprint field typo. The 2026.5 and 2026.2 legacy branches are still receiving backports, reflecting an enterprise install base that moves slowly between majors.
What is Dragonfly?
Dragonfly tags v2.0.0 while hardening memory accounting and patching a HyperLogLog CVE across the 1.x line
Dragonfly is shipping across two concurrent tracks: the 1.40.x stable line is receiving steady improvements to connection memory accounting correctness, tiering metrics, and Redis ecosystem compatibility (RedisShake RDB format), while v2.0.0 has been tagged. The 2.0.0 entry's visible content is minimal — scope-based memory tracking is added but disabled — suggesting 2.0.0 is an architectural milestone marker for accumulated work rather than a single user-visible feature introduction.
authentik vs Dragonfly: editorial side-by-side
authentik
5.0INFRA · APIS
authentik 2026.8.0 ships an Agent for machine identity and domain join, then enters rapid patch mode.
◆ Current state
authentik is in a high-cadence maintenance cycle following the 2026.8.0 major release. Three point releases have landed in quick succession addressing admin file search, API autocomplete, and a blueprint field typo. The 2026.5 and 2026.2 legacy branches are still receiving backports, reflecting an enterprise install base that moves slowly between majors.
◆ Where it's heading
2026.8.0 introduced the authentik Agent — enabling machine-initiated identity flows and device domain join — alongside an Actors entity type for non-human identity tracking. This is authentik's first explicit move beyond user-focused SSO into device and service account identity, putting it in territory occupied by commercial PAM and device trust vendors. The multi-branch backport pace signals that the team is supporting long deployment cycles while actively pushing the frontier forward.
◆ Prediction
The authentik Agent and Actors system are early features — expect expanded directory sync, credential lifecycle, and machine token management in the 2026.9 cycle. If domain join matures, authentik becomes a self-hosted alternative for organizations wanting to consolidate SSO and device identity on a single stack.
Dragonfly
6.3INFRA · APIS
Dragonfly tags v2.0.0 while hardening memory accounting and patching a HyperLogLog CVE across the 1.x line
◆ Current state
Dragonfly is shipping across two concurrent tracks: the 1.40.x stable line is receiving steady improvements to connection memory accounting correctness, tiering metrics, and Redis ecosystem compatibility (RedisShake RDB format), while v2.0.0 has been tagged. The 2.0.0 entry's visible content is minimal — scope-based memory tracking is added but disabled — suggesting 2.0.0 is an architectural milestone marker for accumulated work rather than a single user-visible feature introduction.
◆ Where it's heading
The project's operational focus is sharpening around production reliability and Redis compatibility: O(1) connection memory tracking, per-shard tiering metrics, CVE-2025-32023 remediation in HyperLogLog, and AVX2/NEON SIMD acceleration for dense HLL operations (8-29x measured gains). The staged 2.0.0 release and the disabled scope-based memory tracking point to Dragonfly building toward granular per-connection memory visibility as a differentiating feature for operators running large clusters.
◆ Prediction
Scope-based memory tracking will be re-enabled in a near-term 2.x patch — the code is already shipped in 2.0.0, just gated off. That re-enable will be the actual headline for what 2.0.0 unlocks operationally.
Alternatives to authentik and Dragonfly
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either authentik or Dragonfly.
ToolJet
ToolJet bundles MCP into its EE image and adds PAT auth, making the AI builder addressable by external agents
GitHub
GitHub meters agentic CLI extensions as Copilot enterprise governance tightens
Ably
Ably ships LiveObjects as production-ready and expands its AI Transport SDK to cover Temporal durable workflows.
Jackett
Jackett ships near-daily releases keeping its tracker catalog current with domain migrations and category fixes.
Buildkite
Buildkite ships Agent v4 after eight years and lands a VS Code extension, reshaping CI as IDE infrastructure.
See all authentik alternatives → · See all Dragonfly alternatives →
Recent activity from authentik and Dragonfly
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 22h agoauthentik2026.8.3: Case-insensitive file search, search autocomplete, and blueprint fix
- 9d agoauthentikRelease 2026.8.2
- 9d agoauthentik2026.5.7: Backport CI and endpoint auth schema fixes
- 9d agoauthentik2026.2.7: Container hardening and policy filter backport
- 9d agoDragonflyDragonfly v2.0.0: major version milestone with scope-based memory tracking staged ⚡
- 12d agoDragonflyi1.40.8: fix(server): make connection memory accounting constant time (#8245)
- 14d agoDragonflyFix RDB listpack compatibility with RedisShake migrations
- 17d agoauthentikRelease 2026.8.1
- 1mo agoauthentik2026.8.0: authentik Agent, Actors for non-human identity, and device domain join ⚡
- 1mo agoDragonflyTiering: unified pending-bytes limit and metrics export
- 1mo agoDragonflyi1.40.2: backport: mem accounting fix, journal flushslots in tx (#8061)
- 1mo agoDragonflyHyperLogLog: CVE-2025-32023 patch, SIMD acceleration (8-29x), and three correctness fixes ⚡
Frequently asked questions
What is the difference between authentik and Dragonfly?
They serve adjacent needs but don't currently overlap on shipped themes. Dragonfly is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is authentik better than Dragonfly?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Dragonfly is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to authentik?
Top authentik alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "authentik alternatives" section above for the current picks, or visit /alternatives/authentik for the full list with editorial commentary on each.
What are the best alternatives to Dragonfly?
Top Dragonfly alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Dragonfly alternatives" section above for the current picks, or visit /alternatives/dragonfly for the full list with editorial commentary on each.