Prometheus vs Vercel
Side-by-side trajectory, velocity, and editorial themes.
Prometheus enters 3.12 RC while running a coordinated security backport across the 3.5 LTS line.
Prometheus published a 3.12.0 release candidate with PromQL and Service Discovery additions, TSDB performance work, and security fixes for a remote-write denial-of-service and a STAC secret leak. In the same window, 3.11.3 and 3.5.3 shipped coordinated security fixes for snappy decoding, AzureAD client_secret handling, and an old-UI XSS, and the prior 3.11.2/3.5.2 pair fixed a metric-name XSS in the web UI. The project is clearly maintaining 3.5 as a long-term branch alongside the active 3.x line.
Cadence is dominated by responsible-disclosure security work, with feature additions concentrated in the upcoming 3.12 release. The fact that 3.5 keeps receiving coordinated backports months after 3.11 suggests Prometheus is informally treating 3.5 as a stable LTS for environments that cannot upgrade quickly.
Expect 3.12.0 to ship final within a few weeks given the RC has already landed, and a 3.5.4 backport to follow the next security disclosure rather than the next feature batch.
Vercel trials flat-rate CDN pricing and lines up its sandbox as the runtime for managed AI agents.
Vercel opened a Limited Beta of Flat Rate CDN for Pro teams — fixed monthly fee instead of usage-based bandwidth — and shipped a Claude Managed Agents integration for Vercel Sandbox in the same week. AI Gateway gained Gemini 3.5 Flash and provider sorting by cost, latency, or throughput. Around that, Firewall-mitigated traffic became free, monorepos got consolidated GitHub commit statuses, and Trusted Sources brought OIDC to deployment protection.
Two strategic moves are visible: a hedge against the usage-pricing backlash (Flat Rate CDN, free firewall-mitigated traffic) and a serious bid to host AI agent workloads (Sandbox + Claude Managed Agents, AI Gateway provider routing controls). Developer-experience polish continues underneath — natural-language WAF rules, native curl in CLI, protected source maps.
Expect Flat Rate to widen from CDN to compute and ISR cache once the beta closes, and Vercel Sandbox to gain integrations with at least one more major agent runtime beyond Claude.
See more alternatives to Prometheus →
See more alternatives to Vercel →