← Back to home
Comparison · HR

Horilla vs OpenCATS

A side-by-side editorial comparison of Horilla and OpenCATS — release velocity, themes, recent moves, and the top alternatives to consider.

Shared themes:open-source

Horilla vs OpenCATS: at a glance

FeatureHorillaOpenCATS
SectorHRHR
Velocity score5.06.3
Sparks · 30d00
Top themessecurity, access-control, open-source, hr-softwareats, php8, security-hardening, open-source
Last editorial update2h ago22d ago
WebsiteVisit →Visit →

What is Horilla?

Horilla shipped six security releases in three weeks, ending with a no-login RCE.

Horilla's 2.1.x line has become a running security audit. Between 2.1.1 and 2.1.8 the team closed more than a dozen externally reported advisories, from stored XSS and local file reads to salary-redirect and self-approval flaws, capped by an unauthenticated remote code execution in the public recruitment flow.

Read the full Horilla trajectory →

What is OpenCATS?

OpenCATS ships PHP 8.4/8.5 compatibility, utf8mb4 migration, and country support in its most significant release in years.

OpenCATS delivered two major releases in quick succession: v0.11.0 brought the long-deferred PHP 8 compatibility overhaul, utf8mb4 database migration, full country support across candidates/contacts/companies/job orders, CAPTCHA for career portal applications, and the replacement of the old Google ZIP lookup with OpenStreetMap Nominatim. v0.11.1 followed with a focused security hardening pass — SQL input validation, CSV import field mapping, mass-import file handling — plus Career Portal fixes and expanded contributor documentation.

Read the full OpenCATS trajectory →

Horilla vs OpenCATS: editorial side-by-side

H5.0

Horilla shipped six security releases in three weeks, ending with a no-login RCE.

◆ Current state

Horilla's 2.1.x line has become a running security audit. Between 2.1.1 and 2.1.8 the team closed more than a dozen externally reported advisories, from stored XSS and local file reads to salary-redirect and self-approval flaws, capped by an unauthenticated remote code execution in the public recruitment flow.

◆ Where it's heading

The pattern is consistent: outside researchers are probing the 2.x codebase, and the maintainers are responding fast with detailed advisories and no-migration patches. Most of the flaws are authorization checks that trusted any manager relationship rather than the specific record, which points to a codebase-wide access-control review rather than one-off fixes.

◆ Prediction

Expect more point releases closing authorization bugs in the remaining HR modules (payroll, attendance, assets) before any feature work resumes on 2.2.

O6.3

OpenCATS ships PHP 8.4/8.5 compatibility, utf8mb4 migration, and country support in its most significant release in years.

◆ Current state

OpenCATS delivered two major releases in quick succession: v0.11.0 brought the long-deferred PHP 8 compatibility overhaul, utf8mb4 database migration, full country support across candidates/contacts/companies/job orders, CAPTCHA for career portal applications, and the replacement of the old Google ZIP lookup with OpenStreetMap Nominatim. v0.11.1 followed with a focused security hardening pass — SQL input validation, CSV import field mapping, mass-import file handling — plus Career Portal fixes and expanded contributor documentation.

◆ Where it's heading

OpenCATS is undergoing a systematic modernization of its technical foundation: InnoDB migration (v0.10.0), PHP 8 + utf8mb4 (v0.11.0), security hardening (v0.11.1). The project is not adding net-new capability so much as making what exists maintainable and secure enough to run in modern environments. The expanded contributing documentation and automated legacy database testing signal that maintainers are investing in the contributor pipeline.

◆ Prediction

After the modernization sprint, the next likely move is a modern email/rich text editor replacement (CKEditor 4 was pinned at the final open-source release as a placeholder) and further security audit work on endpoints that haven't been touched since the v0.9 era.

Alternatives to Horilla and OpenCATS

Other HR products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Horilla or OpenCATS.

See all Horilla alternatives → · See all OpenCATS alternatives →

Recent activity from Horilla and OpenCATS

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 4d agoHorilla2.1.8 — Security release
  2. 21d agoHorilla2.1.5 — Bug-fix release
  3. 22d agoHorilla2.1.4 — Security release
  4. 22d agoHorilla2.1.3 — Security and bug-fix release
  5. 23d agoHorilla2.1.2 — Security patch
  6. 24d agoHorilla2.1.1 — Security patch
  7. 27d agoOpenCATSOpenCATS v0.11.1
  8. 1mo agoOpenCATSOpenCATS v0.11.0 ⚡
  9. 3mo agoOpenCATSOpenCATS v0.10.0 ⚡
  10. 2y agoOpenCATSv 0.9.7.4 Bugfixes and Security fixes
  11. 2y agoOpenCATS0.9.7.3: RussH patch cookies (#641)
  12. 2y agoOpenCATSSecurity release v0.9.7.2

Frequently asked questions

What is the difference between Horilla and OpenCATS?

Both compete on the same themes — open-source — within HR. OpenCATS is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Horilla better than OpenCATS?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. OpenCATS is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other HR products to evaluate alongside.

What are the best alternatives to Horilla?

Top Horilla alternatives in HR are ranked by recent ship velocity. Browse the "Horilla alternatives" section above for the current picks, or visit /alternatives/horilla for the full list with editorial commentary on each.

What are the best alternatives to OpenCATS?

Top OpenCATS alternatives in HR are ranked by recent ship velocity. Browse the "OpenCATS alternatives" section above for the current picks, or visit /alternatives/opencats for the full list with editorial commentary on each.