Skipper
Skipper adds RFC 9421 HTTP Message Signatures and delivers 21% RouteGroup load time improvement
Comparison · Infra & APIs
Hanko vs Redocly
A side-by-side editorial comparison of Hanko and Redocly — release velocity, themes, recent moves, and the top alternatives to consider.
Shared themes:security
Hanko vs Redocly: at a glance
What is Hanko?
Hanko ships Firebase migration support and tightens session management — targeting auth stack replacements.
Hanko is a passkey-first authentication platform available as open-source self-hosted or cloud-managed. Monthly releases show consistent refinement across the auth stack: stronger passcode options, inactivity-based session termination, session token transparency, device trust handling improvements, and expanded OAuth/OIDC integration. The June 2026 Firebase Scrypt hash import signals an active effort to reduce friction for teams migrating away from Firebase Auth.
What is Redocly?
Redocly ships a built-in MCP server page across its entire docs platform, with public and authenticated endpoints
Redocly just landed a coordinated 0.137.0 release across Reef, Realm, Revel, and Redoc, anchored by a structural addition: every developer portal now ships a `/mcp` page with setup instructions for Claude, ChatGPT/Codex, and raw JSON config, plus an opt-in `/mcp-public` endpoint for serving anonymous-accessible content without authentication. The MCP code mode got reliability improvements, OAuth discovery was fixed to spec (RFC 8414), and four CVEs were patched in the same release. The breadth of the drop — 20 features and 67+ bug fixes across packages — reflects a team that released a major capability and simultaneously cleared accumulated UX debt.
Hanko vs Redocly: editorial side-by-side
Hanko
0.0INFRA · APIS
Hanko ships Firebase migration support and tightens session management — targeting auth stack replacements.
◆ Current state
Hanko is a passkey-first authentication platform available as open-source self-hosted or cloud-managed. Monthly releases show consistent refinement across the auth stack: stronger passcode options, inactivity-based session termination, session token transparency, device trust handling improvements, and expanded OAuth/OIDC integration. The June 2026 Firebase Scrypt hash import signals an active effort to reduce friction for teams migrating away from Firebase Auth.
◆ Where it's heading
The consistent themes across these releases are session management hardening, migration tooling, and auth protocol breadth. Custom OAuth connections, user metadata via Admin API, Firebase import, and OIDC updates together sketch a product trying to compete with established auth platforms (Auth0, Clerk) on flexibility and self-hostability. The monthly cadence is execution-focused — incremental improvements rather than architectural shifts.
◆ Prediction
The next likely moves are broader migration support (other providers beyond Firebase, e.g. Supabase Auth or Cognito) and enterprise session controls such as SAML or organization-level device trust policies. Custom OAuth was the groundwork; SAML is the common next ask.
Redocly
7.5INFRA · APIS
Redocly ships a built-in MCP server page across its entire docs platform, with public and authenticated endpoints
◆ Current state
Redocly just landed a coordinated 0.137.0 release across Reef, Realm, Revel, and Redoc, anchored by a structural addition: every developer portal now ships a `/mcp` page with setup instructions for Claude, ChatGPT/Codex, and raw JSON config, plus an opt-in `/mcp-public` endpoint for serving anonymous-accessible content without authentication. The MCP code mode got reliability improvements, OAuth discovery was fixed to spec (RFC 8414), and four CVEs were patched in the same release. The breadth of the drop — 20 features and 67+ bug fixes across packages — reflects a team that released a major capability and simultaneously cleared accumulated UX debt.
◆ Where it's heading
Redocly is repositioning every hosted API portal as a first-class AI agent resource, not just a human-readable docs site. The public MCP endpoint especially matters: it enables AI coding assistants to read API docs without credentials, which removes the main friction for developers integrating via LLM tools. Security hardening (audience validation, OAuth compliance, CVE patching) in the same release signals this isn't a prototype feature — it's going into production. The next logical step is deeper programmatic authoring via the MCP surface, not just reading.
◆ Prediction
Expect Redocly to add MCP write-path features — letting AI agents update API documentation or sync specs directly — once the read-path is fully stable. The visual review check in Reunite suggests a git-workflow integration direction.
Alternatives to Hanko and Redocly
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Hanko or Redocly.
ToolJet
ToolJet bundles MCP, multi-LLM switching, and PATs in a single beta — shifting from app builder to AI development platform
GitHub
GitHub Copilot tightens enterprise governance while AI security scanning drops its CodeQL prerequisite
ESPHome
ESPHome 2026.9.0 ships template climate component, OTA encryption with API key, and ESP-NOW for ESP32-P4
Expo
Expo kills its AI agent, SDK 58 beta arrives as EAS observability stack hits GA
Jackett
Jackett in pure tracker-maintenance mode, daily domain and category updates only
See all Hanko alternatives → · See all Redocly alternatives →
Recent activity from Hanko and Redocly
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 9h agoRedoclyReunite v2026-09-16.1
- 1d agoRedoclyReunite v2026-09-15.2
- 1d agoRedocly@redocly/portal-plugin-mock-server 0.22.0
- 1d agoRedocly@redocly/theme 0.69.0
- 1d agoRedocly@redocly/api-docs 0.2.0
- 1d agoRedoclyRevel 0.137.0
- 3mo agoHankoJune 2026 Updates
- 5mo agoHankoApril 2026 Updates
- 6mo agoHankoMarch 2026 Updates
- 7mo agoHankoJanuary 2026 Updates
- 9mo agoHankoDecember 2025 Updates
- 10mo agoHankoNovember 2025 Updates
Frequently asked questions
What is the difference between Hanko and Redocly?
Both compete on the same themes — security — within Infra & APIs. Redocly is currently shipping more aggressively (velocity 7.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Hanko better than Redocly?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Redocly is currently shipping more aggressively (velocity 7.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to Hanko?
Top Hanko alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Hanko alternatives" section above for the current picks, or visit /alternatives/hanko for the full list with editorial commentary on each.
What are the best alternatives to Redocly?
Top Redocly alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Redocly alternatives" section above for the current picks, or visit /alternatives/redocly for the full list with editorial commentary on each.