Appsmith vs Rivet
Side-by-side trajectory, velocity, and editorial themes.
Appsmith is in a sustained security-hardening and runtime-modernization cycle.
Nearly every Appsmith release is dominated by CVE remediation and hardening — SSRF filters, path-traversal validation, XSS fixes, stored-XSS and injection guards, and batches of dependency upgrades. The v2.0 release re-platformed the base image onto MongoDB 7, Java 25, and Node 24 with a mandatory intermediate-upgrade path. Genuine features arrive steadily but modestly, most recently cross-application copy of APIs, queries, and JS objects in v2.2.
This is a self-hosted low-code platform prioritizing enterprise security posture and modern runtimes over new surface. The v2.x base sets up further modernization; feature work is incremental widget, datasource, and dev-productivity polish layered on top of a heavy security cadence.
Expect the CVE-remediation cadence to continue and more infrastructure-forward work on the v2 runtime base, with periodic developer-experience features like cross-app copy. No directional product pivot is visible.
Rivet pivots from actor backend to a coding-agent OS, and is building the ecosystem to match.
Rivet began as an actor and serverless backend platform — RivetKit, Rivet Actors, Rivet Compute — and has spent the last month reorienting around agentOS, a WebAssembly-based Linux environment for running coding agents without a heavy sandbox. The June and July releases show both threads running in parallel: native language SDKs (Rust, Effect) for Actors, and a fast-maturing agentOS that now has its own package registry.
The center of gravity is shifting from hosting stateful actors to being the runtime coding agents execute inside. agentOS went from a v0.2 sandbox alternative to shipping a package registry and a sub-millisecond package manager in under two weeks, a sign Rivet wants to own the developer surface around agent execution, not just the compute underneath it.
Expect agentOS to keep accreting ecosystem pieces — more registry content and tighter orchestration — while the Actors SDKs settle toward maintenance. A likely next move is deeper coupling between agentOS and Rivet Compute so agents run on Rivet's own cloud.
See more alternatives to Appsmith →
See more alternatives to Rivet →