Cloudflare Tunnel
Cloudflare Tunnel ships its sixth October release, still with checksums only.
A side-by-side editorial comparison of Casdoor and Prowler — release velocity, themes, recent moves, and the top alternatives to consider.
Casdoor is rebuilding its console on shadcn/ui, porting auth features into web2 release by release.
Casdoor tags multiple releases a day, each carrying a single commit, so the version stream reads as a commit log rather than a milestone list. The visible work splits in two: a frontend rewrite called web2 that is absorbing the old antd console into shadcn/ui and re-acquiring features as it goes, and a steady trickle of repairs on the live auth surface covering signup validation, theme handling, and translations. SAML IdP-initiated SSO in v3.161.0 is the only protocol-level addition anywhere in this window.
Prowler 5.46 groups scan findings into issues and extends AI checks to Bedrock and Vertex.
Prowler ships a minor release every one to two weeks. 5.46.0 adds an Issues page to Prowler Cloud that groups a scan's findings into issues with a verdict, new AWS Bedrock, Cognito and WAFv2 checks, a five-check Vertex AI Workbench service on GCP, and checks for PHP runtimes left exposed by the PHP2Shell CVEs across AWS, GCP and Azure. Google Workspace checks now account for the tenant's edition and read the policy Google actually applies.
Casdoor tags multiple releases a day, each carrying a single commit, so the version stream reads as a commit log rather than a milestone list. The visible work splits in two: a frontend rewrite called web2 that is absorbing the old antd console into shadcn/ui and re-acquiring features as it goes, and a steady trickle of repairs on the live auth surface covering signup validation, theme handling, and translations. SAML IdP-initiated SSO in v3.161.0 is the only protocol-level addition anywhere in this window.
The web2 migration is the spine of this release train, and it is advancing by increments rather than by cutover: code moves across, then the features that code backed get rebuilt on the other side. Everything else in the window is maintenance on the shipping product, sized to single commits. Expect the migration to keep consuming minor versions until web2 reaches parity with the console it replaces.
The next releases most likely continue porting console screens into web2 and cleaning up the login theme path that v3.160.0 and v3.163.3 have both touched. The entries give no signal on when web2 becomes the default, so the cutover timing is unclear.
Prowler ships a minor release every one to two weeks. 5.46.0 adds an Issues page to Prowler Cloud that groups a scan's findings into issues with a verdict, new AWS Bedrock, Cognito and WAFv2 checks, a five-check Vertex AI Workbench service on GCP, and checks for PHP runtimes left exposed by the PHP2Shell CVEs across AWS, GCP and Azure. Google Workspace checks now account for the tenant's edition and read the policy Google actually applies.
The open-source engine keeps absorbing coverage where risk is moving: hosted AI services first on Azure in 5.45, now on AWS and GCP, plus fast responses to named CVEs. The paid cloud product keeps adding triage layers on top, from AI fixes per finding to issue grouping, making the free CLI the data source and Prowler Cloud the place findings get worked.
Expect AI-service coverage to keep widening across providers and further Prowler Cloud triage features built on the new issue grouping.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Casdoor or Prowler.
Cloudflare Tunnel ships its sixth October release, still with checksums only.
Harbor 2.16 RC1 brings official arm64 builds, custom project roles and smarter proxy caching.
ToolJet ships AI Builder release 4 to its LTS line, with Gemini 4 Argon support.
Kubernetes moves conformance from the cluster to the workloads running on it.
Jackett ships a daily build to keep hundreds of torrent indexers working as sites move and close.
Redocly gives its docs MCP server its own name and public endpoint settings.
See all Casdoor alternatives → · See all Prowler alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Casdoor and Prowler are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Casdoor and Prowler are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Casdoor alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Casdoor alternatives" section above for the current picks, or visit /alternatives/casdoor for the full list with editorial commentary on each.
Top Prowler alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Prowler alternatives" section above for the current picks, or visit /alternatives/prowler for the full list with editorial commentary on each.