Sanity
Sanity's MCP server hits v2.33 with safer publishing guards as Studio bug-fix cadence accelerates
Comparison · DevOps
Slurm vs Rivet
A side-by-side editorial comparison of Slurm and Rivet — release velocity, themes, recent moves, and the top alternatives to consider.
Slurm vs Rivet: at a glance
| Feature | Slurm | Rivet |
|---|---|---|
| Sector | DevOps | DevOps |
| Velocity score | 5.0 | 8.8 |
| Sparks · 30d | 0 | 3 |
| Top themes | hpc, job-scheduling, security, open-source | actor-model, byoc, mcp, agent-infrastructure |
| Last editorial update | 12d ago | 1d ago |
| Website | Visit → | — |
What is Slurm?
Slurm coordinated a 7-CVE security drop across three active branches, including a privilege escalation and SQL injection.
Slurm released coordinated security patches across three active branches (25.05.x, 25.11.x, 26.05.x) fixing 7-8 CVEs per branch: sbcast credential bypass (CVE-2026-65107), slurmstepd stack overflow via SPANK environment variables (CVE-2026-65108), OCI container directory traversal (CVE-2026-65109), heap over-read in forward data RPC (CVE-2026-65138), SQL injection via cluster names in accounting queries (CVE-2026-65139), operator-to-administrator privilege escalation (CVE-2026-65140), and step distribution issues (CVE-2026-65165). The 26.05.3 patch also added support for external nodes in heterogeneous jobs — a meaningful expansion for cloud-burst HPC workflows.
What is Rivet?
Rivet positions its Actors runtime as the infrastructure layer for enterprise-ready, AI-native application deployment.
Rivet has shipped three substantive capability moves in rapid succession: BYOC (Bring Your Own Cloud, letting enterprises run Rivet's control plane inside their own AWS or GCP VPCs), MCP integration (exposing Rivet Actors as a first-class tool in Claude Code, Cursor, Codex, and Gemini CLI), and Dynamic Apps (a V8-isolate-based runtime for deploying AI-generated applications for end users). Underneath all of this is the Actors model — a durable, stateful compute primitive built on open-source infrastructure. Durable Streams, a zero-disk SQLite storage engine with S3 tiering, and the agentOS execution API round out the technical foundation.
Slurm vs Rivet: editorial side-by-side
Slurm
5.0DEVOPS
Slurm coordinated a 7-CVE security drop across three active branches, including a privilege escalation and SQL injection.
◆ Current state
Slurm released coordinated security patches across three active branches (25.05.x, 25.11.x, 26.05.x) fixing 7-8 CVEs per branch: sbcast credential bypass (CVE-2026-65107), slurmstepd stack overflow via SPANK environment variables (CVE-2026-65108), OCI container directory traversal (CVE-2026-65109), heap over-read in forward data RPC (CVE-2026-65138), SQL injection via cluster names in accounting queries (CVE-2026-65139), operator-to-administrator privilege escalation (CVE-2026-65140), and step distribution issues (CVE-2026-65165). The 26.05.3 patch also added support for external nodes in heterogeneous jobs — a meaningful expansion for cloud-burst HPC workflows.
◆ Where it's heading
Slurm's three-branch maintenance model reflects the reality of HPC deployments: clusters running critical workloads don't upgrade quickly, so SchedMD backports security fixes to older release lines rather than forcing upgrades. The CVE density in this release cycle — particularly the accounting database SQL injection and the privilege escalation — suggests the accounting storage layer is under active security scrutiny. Feature work in 26.05.x continues on external node support and async step improvements.
◆ Prediction
The accounting database SQL injection (CVE-2026-65139) will likely prompt a broader audit of user-controlled inputs to the accounting storage layer. External hetjob support in 26.05.3 will expand as cloud-burst deployments become more common in AI/HPC workloads.
Rivet
8.8DEVOPS
Rivet positions its Actors runtime as the infrastructure layer for enterprise-ready, AI-native application deployment.
◆ Current state
Rivet has shipped three substantive capability moves in rapid succession: BYOC (Bring Your Own Cloud, letting enterprises run Rivet's control plane inside their own AWS or GCP VPCs), MCP integration (exposing Rivet Actors as a first-class tool in Claude Code, Cursor, Codex, and Gemini CLI), and Dynamic Apps (a V8-isolate-based runtime for deploying AI-generated applications for end users). Underneath all of this is the Actors model — a durable, stateful compute primitive built on open-source infrastructure. Durable Streams, a zero-disk SQLite storage engine with S3 tiering, and the agentOS execution API round out the technical foundation.
◆ Where it's heading
Rivet is building toward a single answer to a specific question: where does agent-generated, user-facing software actually run? The BYOC move unlocks regulated industries and large enterprises who can't send data to a SaaS control plane. MCP turns Rivet's Actors into something any AI client can discover and call without bespoke integration. Dynamic Apps makes Rivet the runtime, not just the infrastructure, for user-generated software. The through-line is that Rivet wants every AI agent — whether built by a developer or generated at runtime — to run on the Actors primitive with Rivet managing the lifecycle.
◆ Prediction
BYOC on AWS/GCP is the foundation; Azure support and SOC 2 certification are the logical next steps to close enterprise deals. Expect MCP to expand to more clients (OpenAI Codex, Copilot, Windsurf) as the MCP ecosystem grows, and Dynamic Apps to get versioning and rollback — the missing piece for user-facing production deployments.
Alternatives to Slurm and Rivet
Other DevOps products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Slurm or Rivet.
Speakeasy
Speakeasy becomes the enterprise control plane for MCP server access and AI tool governance.
Kubernetes
Kubernetes v1.37 matures its memory management and scheduling stack for AI/ML workloads.
GitHub
GitHub Copilot gets cost-aware inference tiers as enterprise AI tooling tightens across the platform.
CodeRabbit
CodeRabbit pushes upmarket with enterprise APIs, rate controls, and a CLI that reviews remotely
NATS
NATS 2.15 introduces a desired-state reconciliation engine for JetStream, making cluster operations safe to run mid-flight.
Recent activity from Slurm and Rivet
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoRivetIntroducing Rivet BYOC ⚡
- 6d agoRivetIntroducing Rivet MCP ⚡
- 13d agoRivetDurable Streams now supports Rivet Actors
- 13d agoSlurmSlurm 26.05.4: 7 CVEs patched including privilege escalation and SQL injection
- 13d agoSlurmSlurm 25.11.8: CVE backport security release
- 13d agoSlurmSlurm 25.05.9: CVE backport security release
- 16d agoRivetIntroducing Dynamic Apps: Deploy AI-Generated Apps for Your Users ⚡
- 1mo agoSlurmv26.05.3
- 1mo agoRivetRivet ships zero-disk SQLite with S3-tiered cold storage
- 1mo agoRivetIntroducing agentOS Execution API for JavaScript and Python
- 2mo agoSlurmv26.05.2
- 2mo agoSlurmv25.11.7
Frequently asked questions
What is the difference between Slurm and Rivet?
They serve adjacent needs but don't currently overlap on shipped themes. Rivet is currently shipping more aggressively (velocity 8.8 vs 5.0), with 3 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Slurm better than Rivet?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Rivet is currently shipping more aggressively (velocity 8.8 vs 5.0), with 3 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other DevOps products to evaluate alongside.
What are the best alternatives to Slurm?
Top Slurm alternatives in DevOps are ranked by recent ship velocity. Browse the "Slurm alternatives" section above for the current picks, or visit /alternatives/slurm for the full list with editorial commentary on each.
What are the best alternatives to Rivet?
Top Rivet alternatives in DevOps are ranked by recent ship velocity. Browse the "Rivet alternatives" section above for the current picks, or visit /alternatives/rivet for the full list with editorial commentary on each.