Neos CMS
Neos is finishing the 9.x content-repository rebuild while 9.2 adds editorial roles.
A side-by-side editorial comparison of Bludit and Open Web Analytics — release velocity, themes, recent moves, and the top alternatives to consider.
A flat-file CMS with a long CVE history just wired its API up for MCP.
Bludit ships every few weeks, and almost every release carries a security fix: an authentication bypass and arbitrary file upload in 3.18.4, an authenticated RCE via file upload plus .htaccess bypass in 3.20.0, a path traversal in the API files endpoint in 3.21.0, and session invalidation for disabled users in 3.22.0. Around that, the work is editor and dashboard maintenance, theme additions and a plugin hook for injecting editor toolbar buttons.
Open Web Analytics went from one release a year to six in a fortnight.
OWA published more releases in the last two weeks than in the previous two years. The sequence runs security hardening (1.8.2, 1.8.3), then a modernization release that raises the floor to PHP 8.2 and rebuilds the JavaScript toolchain (1.9.0), an emergency patch for a 403 that blocked every fresh install (1.9.1), a structural release completing the PSR-4 migration and repairing the updater (1.10.0), and a cleanup pass that tightens REST responses (1.10.1).
Bludit ships every few weeks, and almost every release carries a security fix: an authentication bypass and arbitrary file upload in 3.18.4, an authenticated RCE via file upload plus .htaccess bypass in 3.20.0, a path traversal in the API files endpoint in 3.21.0, and session invalidation for disabled users in 3.22.0. Around that, the work is editor and dashboard maintenance, theme additions and a plugin hook for injecting editor toolbar buttons.
Two threads run in parallel. One is a sustained security cleanup, largely driven by external reports and handled release by release. The other is a quiet repositioning of the API: 3.22.0 improved it specifically to support MCP, which points a file-based CMS at agent-driven authoring. The plugin hook work in 3.20.0 fits the same pattern of opening the editor to programmatic control.
Expect the MCP-facing API work to continue — the initial support arrived as API improvements rather than a documented server, which is the piece still missing.
OWA published more releases in the last two weeks than in the previous two years. The sequence runs security hardening (1.8.2, 1.8.3), then a modernization release that raises the floor to PHP 8.2 and rebuilds the JavaScript toolchain (1.9.0), an emergency patch for a 403 that blocked every fresh install (1.9.1), a structural release completing the PSR-4 migration and repairing the updater (1.10.0), and a cleanup pass that tightens REST responses (1.10.1).
This is a self-hosted analytics project being brought back from stagnation in a compressed burst, and the order of the work says how bad the starting position was: patch the security holes, then make it run on a supported PHP, then fix the fact that installing and updating were themselves broken, then start on structure. Backwards-compatibility shims for modules, templates and themes indicate the maintainers are trying to modernize without stranding the existing installed base. The REST API is where that promise is thinnest — 1.10.1 narrows responses to documented properties, which is correct but will break clients that were reading internals.
With the runtime, installer and updater repaired and PSR-4 finished, the next work is most likely to continue on the API and the reporting layer, where 1.10.0 already flagged a cluster of e-commerce bugs.
Other Marketing products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Bludit or Open Web Analytics.
Neos is finishing the 9.x content-repository rebuild while 9.2 adds editorial roles.
Brand24 is repositioning from social listening to tracking how AI models describe you.
ContentStudio is bolting ad reporting and AI video generation onto a publishing tool.
The feed is a content-marketing engine, not a changelog.
A marketing blog tracking how AI search is rewriting SEO, with its own tools quietly rebuilt underneath.
An SMB marketing-education mill — the product itself never appears in this feed.
See all Bludit alternatives → · See all Open Web Analytics alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Open Web Analytics is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Open Web Analytics is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Marketing products to evaluate alongside.
Top Bludit alternatives in Marketing are ranked by recent ship velocity. Browse the "Bludit alternatives" section above for the current picks, or visit /alternatives/bludit for the full list with editorial commentary on each.
Top Open Web Analytics alternatives in Marketing are ranked by recent ship velocity. Browse the "Open Web Analytics alternatives" section above for the current picks, or visit /alternatives/open-web-analytics for the full list with editorial commentary on each.