Prometheus vs HashiCorp
Side-by-side trajectory, velocity, and editorial themes.
Prometheus ships 3.13 LTS while hardening the 3.5 line against a steady drip of CVEs
Prometheus is running two supported tracks at once: the long-lived 3.5 LTS, which now takes near-monthly security-only patches, and the new 3.13 LTS, which lands a large batch of PromQL, service-discovery, and TSDB work. The bulk of recent releases are security maintenance and incremental engine improvements rather than new user-facing surface.
The center of gravity is experimental PromQL (start-timestamp-aware rate/increase, smoothed/anchored rate over native histograms, new scalar and search functions) and native-histogram maturation across TSDB and scrape. Alongside that runs a disciplined security cadence — sanitize-html bumps, credential-forwarding fixes on redirects, snappy-decode limits — backported across both LTS lines.
Expect 3.13.x to stabilize out of RC and continue the native-histogram and start-timestamp buildout behind feature flags, with the 3.5 LTS line receiving security-only patches as new CVEs surface.
HashiCorp pushes an infrastructure graph and Boundary 1.0 while reorienting around AI-agent access
HashiCorp is layering two moves on top of its IaC and secrets core: a graph-based source of truth for sprawling multi-cloud estates, and a steady buildout of access control for AI agents. Boundary reached 1.0 with session recording, Vault and Boundary both shipped agent-security previews, and HCP gained SCIM provisioning. The through-line is governing who — and increasingly what — can touch infrastructure.
Terraform is being repositioned from provisioning tool to system-of-record via Infragraph, while Boundary and Vault extend privileged access from humans to autonomous agents. The AI-agent framing recurs across nearly every release, suggesting HashiCorp sees agent access as the next control-plane contest. Expect the graph and the access layer to knit into a single governance story.
Likely next: Infragraph moving from limited to general availability, and more concrete Vault and Boundary primitives for scoping and recording AI-agent sessions.
See more alternatives to Prometheus →
See more alternatives to HashiCorp →