OpenStatus
OpenStatus grows from uptime checks into incident management, from Slack, dashboard or API.
Comparison · Infra & APIs
CrowdSec vs Merge
A side-by-side editorial comparison of CrowdSec and Merge — release velocity, themes, recent moves, and the top alternatives to consider.
CrowdSec vs Merge: at a glance
| Feature | CrowdSec | Merge |
|---|---|---|
| Sector | Infra & APIs | Infra & APIs |
| Velocity score | 5.0 | 5.0 |
| Sparks · 30d | 0 | 0 |
| Top themes | waf, bot-detection, security, fingerprinting | api-integration, llm-gateway, agent-tools, connector-catalog |
| Last editorial update | 16h ago | 2h ago |
| Website | Visit → | — |
What is CrowdSec?
CrowdSec's 1.8.2 candidates let operators write their own bot fingerprints.
The bot detection introduced with 1.8 is now being opened to customization. The 1.8.2 candidates add custom JavaScript fingerprinting, a cscli bot subcommand and a FlagSubmission helper, and rc2 adds a RateLimit helper for the WAF plus a cookie option for embedded contexts. Operational work runs alongside it: a cs_features metric, optional limits on concurrent decision streams and TLS certificate reloads.
What is Merge?
Merge adds connectors and new models weekly while fixing ERP sync details underneath.
Merge ships weekly across Gateway, Unified and Agent Handler. October brought new Agent Handler connectors (Google Workspace, Ironclad, Zoom Phone, Meta Ads, TikTok for Business, Warp), Gateway support for GPT-6.1 Terra, Gemini 4 Argon and Mistral Large 4, custom prompt classifiers and a management API for security rules. Unified got NetSuite, QuickBooks, SharePoint and Jira sync fixes.
CrowdSec vs Merge: editorial side-by-side
CrowdSec
5.0INFRA · APIS
CrowdSec's 1.8.2 candidates let operators write their own bot fingerprints.
◆ Current state
The bot detection introduced with 1.8 is now being opened to customization. The 1.8.2 candidates add custom JavaScript fingerprinting, a cscli bot subcommand and a FlagSubmission helper, and rc2 adds a RateLimit helper for the WAF plus a cookie option for embedded contexts. Operational work runs alongside it: a cs_features metric, optional limits on concurrent decision streams and TLS certificate reloads.
◆ Where it's heading
The WAF remains the center of gravity, and the direction is programmability. RateLimit, SkipProcessing and the fingerprinting hooks give rule authors primitives rather than fixed behavior. The LAPI changes point at larger deployments, where decision streaming puts load on the central API.
◆ Prediction
The final 1.8.2 is dated 26 October on GitHub, though it has not reached this feed yet. Whether fingerprint data ever joins the community blocklist remains unanswered in these notes.
Merge
5.0INFRA · APIS
Merge adds connectors and new models weekly while fixing ERP sync details underneath.
◆ Current state
Merge ships weekly across Gateway, Unified and Agent Handler. October brought new Agent Handler connectors (Google Workspace, Ironclad, Zoom Phone, Meta Ads, TikTok for Business, Warp), Gateway support for GPT-6.1 Terra, Gemini 4 Argon and Mistral Large 4, custom prompt classifiers and a management API for security rules. Unified got NetSuite, QuickBooks, SharePoint and Jira sync fixes.
◆ Where it's heading
Merge is positioning Gateway and Agent Handler as the governed path for enterprise AI, adding admin controls and API management alongside catalog growth. The Unified integrations business keeps getting steady correctness fixes rather than new categories.
◆ Prediction
Expect more connectors and same-week model additions in Gateway, plus more management-API coverage; pricing or packaging changes are not visible in the entries.
Alternatives to CrowdSec and Merge
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either CrowdSec or Merge.
Hanko
Hanko maps SAML and OIDC attributes into custom claims, a step toward enterprise SSO.
Apache Airflow
Airflow's provider candidates go final while 3.4 and the TypeScript SDK stay in testing.
Timely
Timely adds seat visibility and per-period budgets in a steady run of weekly releases.
Volatility
Volatility 3 2.28.2 adds Mermaid tree output and starts deprecating macOS analysis.
GLAuth
GLAuth's September releases are security dependency updates and build fixes.
See all CrowdSec alternatives → · See all Merge alternatives →
Recent activity from CrowdSec and Merge
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 3d agoMergeGPT-6.1 Terra, Gemini 4 Argon, and Mistral Large 4
- 3d agoMergeNetSuite contact sync filters and subsidiary coverage
- 3d agoMergeEight new connectors
- 10d agoMergeThree new connectors & beta connector launch
- 10d agoMergeCustom prompt classifiers and reasoning token counts
- 10d agoMergeQuickBooks Online contact and address improvements
- 11d agoCrowdSec1.8.2 rc2 adds a WAF RateLimit helper and decision stream limits
- 20d agoCrowdSec1.8.2 rc1 adds custom JS fingerprinting for bot detection
- 2mo agoCrowdSec1.8 rc2 tunes the bot-detection challenge, hardens acquisition
- 3mo agoCrowdSecCrowdSec 1.8 RC adds WAF bot detection and a Kubernetes datasource ⚡
- 6mo agoCrowdSec1.7.8 RC: OpenAPI schema validation in the WAF
- 7mo agoCrowdSec1.7.7 RC: flexible WAF rule conditions and RE2 by default
Frequently asked questions
What is the difference between CrowdSec and Merge?
They serve adjacent needs but don't currently overlap on shipped themes. CrowdSec and Merge are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is CrowdSec better than Merge?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. CrowdSec and Merge are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to CrowdSec?
Top CrowdSec alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "CrowdSec alternatives" section above for the current picks, or visit /alternatives/crowdsec for the full list with editorial commentary on each.
What are the best alternatives to Merge?
Top Merge alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Merge alternatives" section above for the current picks, or visit /alternatives/merge-dev for the full list with editorial commentary on each.