OpenHouse
OpenHouse locks down its column-defaults capability flag as default values near completion.
A side-by-side editorial comparison of Countly and ThingsBoard — release velocity, themes, recent moves, and the top alternatives to consider.
Countly 25.03.58 tightens API tokens, sessions and login lockouts in one security patch.
Countly 25.03.58 is a security-heavy patch for the 25.03 line. App-restricted tokens must now declare their permissions, password changes and member lockouts revoke tokens, single-use tokens and reset links work once even under concurrency, and login failures count per account regardless of username casing. It also tightens access to dashboards, dbviewer and exports, and fixes file migration, remote-config targeting and star-rating widgets.
ThingsBoard closes a script-sandbox file write and dozens of CVEs on its 4.3 and 4.2 lines.
ThingsBoard keeps three lines patched in parallel: 4.4, 4.3.1 and the 4.2 LTS. On October 27, 4.3.1.8 and 4.2.2.8 shipped a large security batch: dozens of dependency CVEs, a fix for arbitrary file writes from the TBEL script sandbox, and tamper protection for the OAuth2 authorization cookie. They also fix partitions lost after a ZooKeeper session expiry and unbounded Kafka topic growth from RPC and REST replies, and add IoT Hub search and filter changes.
Countly 25.03.58 is a security-heavy patch for the 25.03 line. App-restricted tokens must now declare their permissions, password changes and member lockouts revoke tokens, single-use tokens and reset links work once even under concurrency, and login failures count per account regardless of username casing. It also tightens access to dashboards, dbviewer and exports, and fixes file migration, remote-config targeting and star-rating widgets.
The 25.03 LTS line keeps absorbing security work at a fast clip: an upstream Node CVE, certificate distrust, and now a sweep of Countly's own token and permission model. Feature work stays in enterprise licensing and journeys, while LTS releases mostly harden what exists.
Expect a matching 24.05 backport of the token and permission fixes. Token owners may also need migration guidance, since existing app-restricted tokens without permissions are now limited to their owner's rights.
ThingsBoard keeps three lines patched in parallel: 4.4, 4.3.1 and the 4.2 LTS. On October 27, 4.3.1.8 and 4.2.2.8 shipped a large security batch: dozens of dependency CVEs, a fix for arbitrary file writes from the TBEL script sandbox, and tamper protection for the OAuth2 authorization cookie. They also fix partitions lost after a ZooKeeper session expiry and unbounded Kafka topic growth from RPC and REST replies, and add IoT Hub search and filter changes.
After the 4.4 feature release the project is back to maintenance on all supported lines, mostly security and runtime fixes, with the IoT Hub catalogue getting steady UI work alongside. Feature work arrives in larger, infrequent releases.
A matching 4.4.0.x patch with the same security batch is the likely next entry; 4.4 got no patch in this batch.
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Countly or ThingsBoard.
OpenHouse locks down its column-defaults capability flag as default values near completion.
Plausible's tracked feed stops at a Dec 2025 pre-release that limits shared links to a segment.
Keboola adds dark mode while it tightens the MCP server and retires idle workspaces.
OpenReplay moves assist and sourcemap services to Node 26; still no feature notes.
Cribl Stream 4.20.3 takes its Terraform provider out of preview and renames its AI editor.
Omni tightens Omni Agent's query validation and lets admins set roles at invite.
See all Countly alternatives → · See all ThingsBoard alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — lts — within Analytics. Countly and ThingsBoard are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Countly and ThingsBoard are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.
Top Countly alternatives in Analytics are ranked by recent ship velocity. Browse the "Countly alternatives" section above for the current picks, or visit /alternatives/countly-server for the full list with editorial commentary on each.
Top ThingsBoard alternatives in Analytics are ranked by recent ship velocity. Browse the "ThingsBoard alternatives" section above for the current picks, or visit /alternatives/thingsboard for the full list with editorial commentary on each.