OpenReplay
OpenReplay moves its Go backend to pgx v5 and patches vulnerable deps across 1.25–1.27.
A side-by-side editorial comparison of MotherDuck and ThingsBoard — release velocity, themes, recent moves, and the top alternatives to consider.
MotherDuck's Flights graduate from Preview with HIPAA support, unlocking regulated-industry analytics on DuckDB.
MotherDuck has been building its enterprise layer on top of DuckDB's cloud execution model: RBAC arrived in July, table-level sharing and custom roles landed in August, and Flights—the serverless job execution layer—reached general availability in September with HIPAA BAA coverage. In parallel, Guides (markdown context files that agents read automatically through the MCP server) and a CLI in preview point toward a scriptable, version-controlled analytics workflow for agentic SQL sessions.
ThingsBoard closes a script-sandbox file write and dozens of CVEs on its 4.3 and 4.2 lines.
ThingsBoard keeps three lines patched in parallel: 4.4, 4.3.1 and the 4.2 LTS. On October 27, 4.3.1.8 and 4.2.2.8 shipped a large security batch: dozens of dependency CVEs, a fix for arbitrary file writes from the TBEL script sandbox, and tamper protection for the OAuth2 authorization cookie. They also fix partitions lost after a ZooKeeper session expiry and unbounded Kafka topic growth from RPC and REST replies, and add IoT Hub search and filter changes.
MotherDuck has been building its enterprise layer on top of DuckDB's cloud execution model: RBAC arrived in July, table-level sharing and custom roles landed in August, and Flights—the serverless job execution layer—reached general availability in September with HIPAA BAA coverage. In parallel, Guides (markdown context files that agents read automatically through the MCP server) and a CLI in preview point toward a scriptable, version-controlled analytics workflow for agentic SQL sessions.
Two tracks are running simultaneously: enterprise compliance (HIPAA, RBAC, table-level security, org-wide visibility) and developer tooling (CLI, Guides, remote DB creation, Favorites). The Guides feature is the most interesting signal—it's MotherDuck's answer to the problem of AI agents rediscovering the same SQL conventions every session, by giving teams a way to codify context that agents read automatically.
SOC 2 Type II attestation or expanded compliance certifications are likely in the next two quarters given the pace of enterprise access controls. The CLI and Guides combination points toward a GitOps-style analytics workflow where data logic lives in version control alongside application code.
ThingsBoard keeps three lines patched in parallel: 4.4, 4.3.1 and the 4.2 LTS. On October 27, 4.3.1.8 and 4.2.2.8 shipped a large security batch: dozens of dependency CVEs, a fix for arbitrary file writes from the TBEL script sandbox, and tamper protection for the OAuth2 authorization cookie. They also fix partitions lost after a ZooKeeper session expiry and unbounded Kafka topic growth from RPC and REST replies, and add IoT Hub search and filter changes.
After the 4.4 feature release the project is back to maintenance on all supported lines, mostly security and runtime fixes, with the IoT Hub catalogue getting steady UI work alongside. Feature work arrives in larger, infrequent releases.
A matching 4.4.0.x patch with the same security batch is the likely next entry; 4.4 got no patch in this batch.
Other Analytics products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either MotherDuck or ThingsBoard.
OpenReplay moves its Go backend to pgx v5 and patches vulnerable deps across 1.25–1.27.
Basedash automations can now attach scheduled CSV exports to Slack and email.
OpenPanel tags three more note-free builds in one evening, reaching 3.16.4.
Fulcrum turns on Insights, its AI assistant for field data, for every customer.
Holistics lets admins put a key dashboard on everyone's Home page.
OpenHouse locks down its column-defaults capability flag as default values near completion.
See all MotherDuck alternatives → · See all ThingsBoard alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. MotherDuck is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. MotherDuck is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Analytics products to evaluate alongside.
Top MotherDuck alternatives in Analytics are ranked by recent ship velocity. Browse the "MotherDuck alternatives" section above for the current picks, or visit /alternatives/motherduck for the full list with editorial commentary on each.
Top ThingsBoard alternatives in Analytics are ranked by recent ship velocity. Browse the "ThingsBoard alternatives" section above for the current picks, or visit /alternatives/thingsboard for the full list with editorial commentary on each.