Skipper
Skipper patches its second filter advisory in a week, this one in the OPA request-body filter.
A side-by-side editorial comparison of Hanko and incident.io — release velocity, themes, recent moves, and the top alternatives to consider.
Hanko ships Firebase migration support and tightens session management — targeting auth stack replacements.
Hanko is a passkey-first authentication platform available as open-source self-hosted or cloud-managed. Monthly releases show consistent refinement across the auth stack: stronger passcode options, inactivity-based session termination, session token transparency, device trust handling improvements, and expanded OAuth/OIDC integration. The June 2026 Firebase Scrypt hash import signals an active effort to reduce friction for teams migrating away from Firebase Auth.
incident.io's Nexus agent now takes in your internal tools as well as going out to your editor.
Investigations, the agent that posts a root-cause hypothesis when an incident opens, is the center of incident.io; it went GA and then doubled its speed in September. Last week the company shipped a plugin that puts its agent skills into any coding harness. The newest release, Extensions, goes the other way: teams can feed Nexus their own debugging knowledge and connect internal or third-party tools to it.
Hanko is a passkey-first authentication platform available as open-source self-hosted or cloud-managed. Monthly releases show consistent refinement across the auth stack: stronger passcode options, inactivity-based session termination, session token transparency, device trust handling improvements, and expanded OAuth/OIDC integration. The June 2026 Firebase Scrypt hash import signals an active effort to reduce friction for teams migrating away from Firebase Auth.
The consistent themes across these releases are session management hardening, migration tooling, and auth protocol breadth. Custom OAuth connections, user metadata via Admin API, Firebase import, and OIDC updates together sketch a product trying to compete with established auth platforms (Auth0, Clerk) on flexibility and self-hostability. The monthly cadence is execution-focused — incremental improvements rather than architectural shifts.
The next likely moves are broader migration support (other providers beyond Firebase, e.g. Supabase Auth or Cognito) and enterprise session controls such as SAML or organization-level device trust policies. Custom OAuth was the groundwork; SAML is the common next ask.
Investigations, the agent that posts a root-cause hypothesis when an incident opens, is the center of incident.io; it went GA and then doubled its speed in September. Last week the company shipped a plugin that puts its agent skills into any coding harness. The newest release, Extensions, goes the other way: teams can feed Nexus their own debugging knowledge and connect internal or third-party tools to it.
incident.io is turning its agent into a two-way integration point. The plugin exports its skills into developers' agents, and Extensions imports a company's own tools and context into Nexus. Dashboards, ticket sync and alert routing keep incident.io as the record those skills read from and write to.
Expect worked examples or templates for common Extensions, such as internal deploy or feature-flag tools, and Investigations results that cite data pulled through them. The entries do not say how Extensions are built or whether they cost extra.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Hanko or incident.io.
Skipper patches its second filter advisory in a week, this one in the OPA request-body filter.
Aviator moves from merging code to judging it: Verify checks PRs against their stated intent.
Infisical stores PAM session recordings in S3 and backs internal CAs with AWS KMS keys.
Airflow 3.4.0 reaches its second beta a day after the common-ai provider hit 1.0.
ESPHome adds a sixth 2026.10 beta, one more than 2026.9 needed before its .0.
Semgrep adds Objective-C as an alpha target, its first new language since Dart went GA.
See all Hanko alternatives → · See all incident.io alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. incident.io is currently shipping more aggressively (velocity 8.8 vs 0.0), with 2 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. incident.io is currently shipping more aggressively (velocity 8.8 vs 0.0), with 2 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Hanko alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Hanko alternatives" section above for the current picks, or visit /alternatives/hanko for the full list with editorial commentary on each.
Top incident.io alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "incident.io alternatives" section above for the current picks, or visit /alternatives/incident-io for the full list with editorial commentary on each.