NetBird
NetBird's v0.81 reaches rc.3 with nothing left but cleanup.
Comparison · Infra & APIs
Infisical vs Semgrep
A side-by-side editorial comparison of Infisical and Semgrep — release velocity, themes, recent moves, and the top alternatives to consider.
Infisical vs Semgrep: at a glance
What is Infisical?
Infisical adds Kafka dynamic secrets and moves PAM onto its shared alerting module.
Infisical releases several times a week, pairing feature work with a v3 UI migration that now reaches KMS, PAM and the core Secret Manager screens. v0.166.7 adds Kafka to the dynamic secrets catalog, moves PAM onto the shared alerting module, and lets users edit secrets and preview comments in the single-environment view. Billing V2 now asks for a cancellation reason and labels credit invoices correctly.
What is Semgrep?
Semgrep stops dropping unpinned Python deps from its inventory
Semgrep ships weekly, and Supply Chain carries most of the substantive work: Bazel Maven workspaces in 1.177, Bun lockfiles in 1.179, and now every requirements.txt line in 1.181, pinned or not. 1.180 turned to the matcher, promoting Dart to GA and removing QL as a target language. 1.181 also widens Go generics and Hack parsing.
Infisical vs Semgrep: editorial side-by-side
Infisical
7.5INFRA · APIS
Infisical adds Kafka dynamic secrets and moves PAM onto its shared alerting module.
◆ Current state
Infisical releases several times a week, pairing feature work with a v3 UI migration that now reaches KMS, PAM and the core Secret Manager screens. v0.166.7 adds Kafka to the dynamic secrets catalog, moves PAM onto the shared alerting module, and lets users edit secrets and preview comments in the single-environment view. Billing V2 now asks for a cancellation reason and labels credit invoices correctly.
◆ Where it's heading
Two tracks keep advancing together: shared platform services (global approvals, reminders on alert channels, now PAM alerting) and a lineup split into separately packaged products with per-product billing. Agent Vault took two breaking changes in v0.166.6 and is now getting small polish fixes, which suggests its API may be settling. Billing work shows up in almost every release.
◆ Prediction
Expect more products to move onto the shared alerting and approval modules, and Agent Vault to keep shipping polish until its API stops breaking. Whether a GA announcement follows is not visible in the entries.
Semgrep
5.0INFRA · APIS
Semgrep stops dropping unpinned Python deps from its inventory
◆ Current state
Semgrep ships weekly, and Supply Chain carries most of the substantive work: Bazel Maven workspaces in 1.177, Bun lockfiles in 1.179, and now every requirements.txt line in 1.181, pinned or not. 1.180 turned to the matcher, promoting Dart to GA and removing QL as a target language. 1.181 also widens Go generics and Hack parsing.
◆ Where it's heading
Two tracks run in parallel: dependency coverage that reflects how repos are actually declared rather than how a resolver would pin them, and deeper parsing for languages Semgrep already supports. 1.181 reports unpinned Python deps in the SBOM but produces no findings for them yet, which leaves an open gap the team has flagged with 'for now'.
◆ Prediction
Expect the next Bazel ecosystem (rules_python or rules_go, named in the 1.177 notes) and a follow-up that turns unpinned Python requirements into findings, likely by resolving a version from range specifiers.
Alternatives to Infisical and Semgrep
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Infisical or Semgrep.
Tolgee
Tolgee adds task-aware filters as editor gains and billing plumbing alternate.
Kubernetes
Kubernetes turns its memory and scheduling primitives into operator playbooks.
Indent
Indent is turning a chat assistant into a multi-model agent that works inside your other tools.
authentik
authentik spends its post-2026.8 cycle hardening the proxy and SCIM paths the Agent release leaned on.
Kestra
Kestra's first tracked release drops Bootstrap from its UI design system.
See all Infisical alternatives → · See all Semgrep alternatives →
Recent activity from Infisical and Semgrep
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 16h agoSemgrepSupply Chain inventories unpinned Python requirements
- 20h agoInfisicalKafka dynamic secrets, PAM alerting, Billing V2 cancel reasons
- 1d agoInfisicalAgent Vault breaking changes and PAM MSSQL discovery
- 2d agoInfisicalSecret changes join global approvals; secret scanning becomes own product
- 3d agoInfisicalCloudflare and Keeper secret syncs, reminders via alert channels
- 6d agoInfisicalInfisical adds Ed25519 KMS keys and a global approval system
- 7d agoSemgrepDart reaches GA; QL language support removed
- 8d agoInfisicalv0.166.2: hostname fixes and more v3 UI migration
- 13d agoSemgrepSupply Chain adds Bun bun.lock parsing
- 21d agoSemgrepTree-sitter runtime bump and Windows hang fix
- 1mo agoSemgrepNative Supply Chain support for Bazel workspaces ⚡
- 1mo agoSemgrepHomebrew installs dropped on Intel Macs
Frequently asked questions
What is the difference between Infisical and Semgrep?
They serve adjacent needs but don't currently overlap on shipped themes. Infisical is currently shipping more aggressively (velocity 7.5 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Infisical better than Semgrep?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Infisical is currently shipping more aggressively (velocity 7.5 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to Infisical?
Top Infisical alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Infisical alternatives" section above for the current picks, or visit /alternatives/infisical for the full list with editorial commentary on each.
What are the best alternatives to Semgrep?
Top Semgrep alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Semgrep alternatives" section above for the current picks, or visit /alternatives/semgrep for the full list with editorial commentary on each.