Ashby
Ashby ships almost daily, tightening reporting, feedback loops, and AI agents.
A side-by-side editorial comparison of Envoy and Horilla — release velocity, themes, recent moves, and the top alternatives to consider.
| Feature | Envoy | Horilla |
|---|---|---|
| Sector | HR | HR |
| Velocity score | 6.3 | 5.0 |
| Sparks · 30d | 1 | 0 |
| Top themes | visitor-management, id-verification, workplace-safety, compliance | security, access-control, open-source, hr-software |
| Last editorial update | 5d ago | 2h ago |
| Website | — | Visit → |
Envoy brings ID verification in-house with native AI document analysis, drops third-party vendor
Envoy is shipping a consistent stream of visitor management improvements: configurable badge auto-printing, admin-side document uploads for compliance gaps, reusable export templates with dynamic date ranges, and tighter approval rule enforcement. The most structurally significant move this period is eliminating its external ID verification vendor and replacing it with Envoy's own AI-based document analysis — a shift that adds face verification, name verification, and blocklist integration simultaneously.
Horilla shipped six security releases in three weeks, ending with a no-login RCE.
Horilla's 2.1.x line has become a running security audit. Between 2.1.1 and 2.1.8 the team closed more than a dozen externally reported advisories, from stored XSS and local file reads to salary-redirect and self-approval flaws, capped by an unauthenticated remote code execution in the public recruitment flow.
Envoy is shipping a consistent stream of visitor management improvements: configurable badge auto-printing, admin-side document uploads for compliance gaps, reusable export templates with dynamic date ranges, and tighter approval rule enforcement. The most structurally significant move this period is eliminating its external ID verification vendor and replacing it with Envoy's own AI-based document analysis — a shift that adds face verification, name verification, and blocklist integration simultaneously.
Envoy is building toward a complete workplace intelligence layer that extends beyond building access. Travel risk management (currently Navan-integrated) marks the first move outside the physical office perimeter — the same threat monitoring for buildings now covers employees on business travel. The in-house ID verification investment positions Envoy to tighten the loop between visitor identity data and its own blocklist and compliance systems without a third-party intermediary.
Travel integrations will expand beyond Navan (Concur and similar are the obvious next targets), and the blocklist system will likely get richer now that Envoy owns the identity verification data directly. Expect face verification accuracy metrics and audit trail improvements as ID scanning matures.
Horilla's 2.1.x line has become a running security audit. Between 2.1.1 and 2.1.8 the team closed more than a dozen externally reported advisories, from stored XSS and local file reads to salary-redirect and self-approval flaws, capped by an unauthenticated remote code execution in the public recruitment flow.
The pattern is consistent: outside researchers are probing the 2.x codebase, and the maintainers are responding fast with detailed advisories and no-migration patches. Most of the flaws are authorization checks that trusted any manager relationship rather than the specific record, which points to a codebase-wide access-control review rather than one-off fixes.
Expect more point releases closing authorization bugs in the remaining HR modules (payroll, attendance, assets) before any feature work resumes on 2.2.
Other HR products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Envoy or Horilla.
Ashby ships almost daily, tightening reporting, feedback loops, and AI agents.
Ever Gauzy is shipping a stream of pagination and filter fixes, one patch at a time.
Teamtailor lets recruiters write their own AI pipeline steps in plain language.
Frappe HR is pushing payroll toward accountant-grade bookkeeping, one release a week.
Tanda keeps absorbing HR admin into workforce management, one automation at a time.
Employment Hero builds toward AI-native HR with a recruitment agent and developer API push
See all Envoy alternatives → · See all Horilla alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Envoy is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Envoy is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other HR products to evaluate alongside.
Top Envoy alternatives in HR are ranked by recent ship velocity. Browse the "Envoy alternatives" section above for the current picks, or visit /alternatives/envoy for the full list with editorial commentary on each.
Top Horilla alternatives in HR are ranked by recent ship velocity. Browse the "Horilla alternatives" section above for the current picks, or visit /alternatives/horilla for the full list with editorial commentary on each.