Auth0
Auth0's cadence is all enterprise plumbing: federation, SCIM provisioning, session governance.
Comparison · Infra & APIs
Dust vs Semgrep
A side-by-side editorial comparison of Dust and Semgrep — release velocity, themes, recent moves, and the top alternatives to consider.
Dust vs Semgrep: at a glance
What is Dust?
Dust doubles down on MCP-native agents with multi-model routing and enterprise guardrails.
Dust is building an MCP-native agent platform with broad model coverage and growing enterprise depth. The May cadence shows parallel investment in agent capability (vision via MCP tools, context compaction, frame editing/export) and operational readiness (audit logs, SIEM streaming, protocol migrations). Mobile is getting a voice-first input redesign.
What is Semgrep?
Semgrep grinds out weekly gains in language coverage, scan speed, and supply-chain depth
Semgrep is on a steady weekly release train dominated by language-parser fidelity (Dart, Scala, PHP, Python, Java), engine startup and scan performance, and supply-chain plus secrets tooling. Recent releases added transitive dependency-path reporting, binary-file skipping by default, and configurable rule validation, alongside repeated hardening against credential leaks in CI output and telemetry.
Dust vs Semgrep: editorial side-by-side
Dust
8.8INFRA · APIS
Dust doubles down on MCP-native agents with multi-model routing and enterprise guardrails.
◆ Current state
Dust is building an MCP-native agent platform with broad model coverage and growing enterprise depth. The May cadence shows parallel investment in agent capability (vision via MCP tools, context compaction, frame editing/export) and operational readiness (audit logs, SIEM streaming, protocol migrations). Mobile is getting a voice-first input redesign.
◆ Where it's heading
The product is converging on agents-in-the-enterprise via MCP, with multi-model routing as table stakes. MCP V2 migrations and image returns from MCP tools point to the protocol becoming Dust's integration backbone. The model-refresh cadence — three vendors in 48 hours — suggests model routing is now a core competency, not a feature.
◆ Prediction
Expect more MCP V2 connector migrations and richer MCP return types beyond images. The voice-first mobile input bar likely precedes a deeper voice-mode agent surface.
Semgrep
5.0INFRA · APIS
Semgrep grinds out weekly gains in language coverage, scan speed, and supply-chain depth
◆ Current state
Semgrep is on a steady weekly release train dominated by language-parser fidelity (Dart, Scala, PHP, Python, Java), engine startup and scan performance, and supply-chain plus secrets tooling. Recent releases added transitive dependency-path reporting, binary-file skipping by default, and configurable rule validation, alongside repeated hardening against credential leaks in CI output and telemetry.
◆ Where it's heading
The direction is incremental breadth and speed rather than new product surface: more languages parsed accurately, faster rule loading and parsing, and deeper Pro interfile taint analysis. Supply-chain reachability and secrets validation keep getting attention, signaling those remain the commercial focus over the open-source CLI.
◆ Prediction
Expect continued weekly point releases extending interfile and taint analysis to more languages and further trimming scan startup time; no single release in view signals a directional shift.
Alternatives to Dust and Semgrep
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Dust or Semgrep.
Depot
Depot extends from build acceleration into hosted source control with Depot Code.
Ably
Ably is spinning up an AI-agent transport layer at 0.x speed
OpenStatus
OpenStatus ships weekly: status-page polish plus a self-hostable, provider-agnostic AI assistant.
Tailscale
Tailscale deepens enterprise identity while quietly building agent-access infrastructure
Unleash
Unleash is pitching feature flags as runtime control for AI coding agents
See all Dust alternatives → · See all Semgrep alternatives →
Recent activity from Dust and Semgrep
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoSemgrepDart parser updated to a newer upstream version
- 15d agoSemgrepTransitive supply-chain dependency paths; libpcre2 replaces libpcre
- 22d agoSemgrepSkips binary files by default; org-wide nosemgrep control
- 28d agoSemgrepExperimental cross-file taint for Gosu; parsing and token fixes
- 1mo agoSemgrepMatch-context size limit and configurable rule validation
- 1mo agoSemgrepDart typed metavariables; cgroup-aware memory for Pro scans
- 1mo agoDustCompact mobile input bar goes voice-first
- 1mo agoDustFrames export as PDF or PNG
- 1mo agoDustInline text editing in frames
- 1mo agoDustGemini 3.5 Flash now available
- 1mo agoDustGrok 4.3 upgrade and Anthropic model migrations
- 1mo agoDustAsana MCP update
Frequently asked questions
What is the difference between Dust and Semgrep?
They serve adjacent needs but don't currently overlap on shipped themes. Dust is currently shipping more aggressively (velocity 8.8 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Dust better than Semgrep?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Dust is currently shipping more aggressively (velocity 8.8 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to Dust?
Top Dust alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Dust alternatives" section above for the current picks, or visit /alternatives/dust for the full list with editorial commentary on each.
What are the best alternatives to Semgrep?
Top Semgrep alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Semgrep alternatives" section above for the current picks, or visit /alternatives/semgrep for the full list with editorial commentary on each.