Firefly III
Firefly III's develop builds continue into October 21, still with no changelog.
A side-by-side editorial comparison of InvoicePlane and Zluri — release velocity, themes, recent moves, and the top alternatives to consider.
| Feature | InvoicePlane | Zluri |
|---|---|---|
| Sector | Finance | Finance |
| Velocity score | 5.0 | 7.5 |
| Sparks · 30d | 0 | 0 |
| Top themes | invoicing, self-hosted, php, security-remediation | identity governance, access reviews, segregation of duties, workflow automation |
| Last editorial update | 2mo ago | 22d ago |
| Website | Visit → | — |
InvoicePlane's 1.7.2 is a mass security remediation, still working through its release candidates.
InvoicePlane is a self-hosted PHP invoicing and quoting application. The 1.7.2 line, now at its second release candidate, is dominated by security remediation: roughly thirty researchers are credited across the beta and RC notes for responsibly disclosed vulnerabilities, with severity, CVSS and GHSA advisories held back until the final release. The RC also warns that installations running custom invoice and quote templates must take manual steps before upgrading.
Zluri is turning SaaS management into identity governance, and Segregation of Duties is the pivot.
Zluri now covers discovery, access requests, access reviews and Segregation of Duties enforcement in one product. September releases spread SoD conflict signals into both access requests and certifications, and they gave approvers more control over who decides. The latest release closes a data-trust gap: JDBC, on-prem AD, CSV and SDK sources now show when they last refreshed.
InvoicePlane is a self-hosted PHP invoicing and quoting application. The 1.7.2 line, now at its second release candidate, is dominated by security remediation: roughly thirty researchers are credited across the beta and RC notes for responsibly disclosed vulnerabilities, with severity, CVSS and GHSA advisories held back until the final release. The RC also warns that installations running custom invoice and quote templates must take manual steps before upgrading.
The project has spent this cycle absorbing an unusually large volume of external vulnerability reports while simultaneously modernising the platform — PHP 8.2 compatibility arrived on the 1.7.0 branch, and Stripe and PayPal were reintroduced at 1.7.2 beta 1 after having been absent. The decision to withhold advisory details until 1.7.2 goes final is a deliberate disclosure posture, meaning the true scope of what these releases fix is not yet public. Release notes here are dominated by hashes and contributor credits rather than change detail.
The final 1.7.2 release and the simultaneous publication of the security advisories are the clear next step, given RC 2 is described as working toward it. Whether further RCs intervene depends on what testing surfaces.
Zluri now covers discovery, access requests, access reviews and Segregation of Duties enforcement in one product. September releases spread SoD conflict signals into both access requests and certifications, and they gave approvers more control over who decides. The latest release closes a data-trust gap: JDBC, on-prem AD, CSV and SDK sources now show when they last refreshed.
The product is moving from SaaS discovery and spend toward the IGA territory of policy, certification, and remediation. Each release either adds a governance control or makes the underlying identity data more trustworthy. The Workflows v2 canvas, SoD detection and source prioritization all support automated, auditable access decisions.
SoD and Workflows v2 are likely to move from early access and beta to general availability. Expect deeper links between them, such as SoD violations triggering canvas playbooks directly.
Other Finance products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either InvoicePlane or Zluri.
Firefly III's develop builds continue into October 21, still with no changelog.
Stigg shows card brand and wallet type on payment methods as its billing reach widens.
Shift4 posts Gift Card & Loyalty 26.2.1 notes in three languages ahead of an October 21 release.
GOAT.tax adds Form 6765 Section G reporting for large R&D credit filers.
Kill Bill keeps two release lines alive with small invoice-template changes.
InvoiceShelf 3.0 alphas let Claude, ChatGPT and Cursor draft and send invoices.
See all InvoicePlane alternatives → · See all Zluri alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Zluri is currently shipping more aggressively (velocity 7.5 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Zluri is currently shipping more aggressively (velocity 7.5 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Finance products to evaluate alongside.
Top InvoicePlane alternatives in Finance are ranked by recent ship velocity. Browse the "InvoicePlane alternatives" section above for the current picks, or visit /alternatives/invoiceplane for the full list with editorial commentary on each.
Top Zluri alternatives in Finance are ranked by recent ship velocity. Browse the "Zluri alternatives" section above for the current picks, or visit /alternatives/zluri for the full list with editorial commentary on each.