GitHub
At Universe, GitHub folds Copilot into Enterprise seats and lets Copilot Fusion pick the model.
Comparison · Collab
KACE vs Passbolt
A side-by-side editorial comparison of KACE and Passbolt — release velocity, themes, recent moves, and the top alternatives to consider.
KACE vs Passbolt: at a glance
| Feature | KACE | Passbolt |
|---|---|---|
| Sector | Collab | Collab |
| Velocity score | 5.0 | 5.0 |
| Sparks · 30d | 0 | 0 |
| Top themes | endpoint-management, security-patches, php2shell, windows-11 | password-manager, access-control, sharing, session-management |
| Last editorial update | 1d ago | 2mo ago |
| Website | — | Visit → |
What is KACE?
KACE extends its PHP2SHELL fix to the SDA deployment appliance, six days after disclosure.
KACE has now patched the critical PHP2SHELL vulnerabilities across both appliances: SMA 15.1 and 15.0 on October 23, and the SDA 9.3 deployment appliance on October 27. SMA also gained official support for Windows 11 26H2 agents and patches, following KACE Cloud's 26H2 support a few days earlier.
What is Passbolt?
Passbolt keeps rebuilding the sharing dialog because that is where its access model leaks.
Three consecutive releases have gone into permission transparency. 5.14 introduced confirmation prompts before editing shared resources and surfaced group members in the access list; 5.14.3 corrected two behaviours it got wrong; 5.15 adds badges showing whether a permission is added, modified or deleted, and lets a deletion be rolled back before confirmation. 5.15 also moves sessions into the database with a PurgeSessions command and a healthcheck reporting the active provider, and closes three externally reported bypasses around personal-folder sharing and V5 tag promotion.
KACE vs Passbolt: editorial side-by-side
KACE
5.0COLLAB
KACE extends its PHP2SHELL fix to the SDA deployment appliance, six days after disclosure.
◆ Current state
KACE has now patched the critical PHP2SHELL vulnerabilities across both appliances: SMA 15.1 and 15.0 on October 23, and the SDA 9.3 deployment appliance on October 27. SMA also gained official support for Windows 11 26H2 agents and patches, following KACE Cloud's 26H2 support a few days earlier.
◆ Where it's heading
The changelog is dominated by security response and OS-version coverage, with both SMA branches patched in lockstep. Feature work is limited to agent reliability fixes. KACE behaves like a maintained endpoint-management line rather than one being redirected.
◆ Prediction
Expect November Patch Tuesday content and further cumulative patches on both SMA branches. The entries don't point to new feature work.
Passbolt
5.0COLLAB
Passbolt keeps rebuilding the sharing dialog because that is where its access model leaks.
◆ Current state
Three consecutive releases have gone into permission transparency. 5.14 introduced confirmation prompts before editing shared resources and surfaced group members in the access list; 5.14.3 corrected two behaviours it got wrong; 5.15 adds badges showing whether a permission is added, modified or deleted, and lets a deletion be rolled back before confirmation. 5.15 also moves sessions into the database with a PurgeSessions command and a healthcheck reporting the active provider, and closes three externally reported bypasses around personal-folder sharing and V5 tag promotion.
◆ Where it's heading
The product is treating accidental over-sharing as its primary risk, and the fix is repeated iteration on the moment of change rather than a new permission model. The company has said this is staged work — folder moves and richer preview dialogs are named as future extensions. In parallel the platform side is maturing for larger installs: database-backed sessions, edition switching in-app since 5.13, healthcheck coverage, SCIM administrator-deletion guards. Autofill has just started its own multi-release arc, with 5.15 explicitly the first step.
◆ Prediction
The next release should extend confirmation prompts to folder move operations, and the notes flag that the SSO egress guard will default to on. Autofill form classification is the other named thread, with a technical write-up promised after the following release.
Alternatives to KACE and Passbolt
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either KACE or Passbolt.
SiYuan
SiYuan 3.8.9 reaches RC, adding AI-agent extraction of images embedded in PDFs.
Mattermost
Mattermost v12 puts user-scoped permissions, private models and audit trails on every agent action.
AFFiNE
AFFiNE's canaries stay on upkeep: a Swift Collections bump follows CVE and migration fixes.
Teable
Teable's Structured Query v2 now reports across multi-hop relations, with a strict mode against SQL.
Readwise
Readwise splits its bundle into Reader-only and Highlights-only plans and renames its first app.
See all KACE alternatives → · See all Passbolt alternatives →
Recent activity from KACE and Passbolt
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 2d agoKACESDA 9.3 hotfix closes PHP2SHELL flaws
- 3d agoKACEKACE SMA Windows 11 26H2 general support
- 6d agoKACEKACE SMA 15.0 Cumulative Patch 5
- 6d agoKACEKACE SMA 15.1 Cumulative Patch 2
- 6d agoKACEKACE Cloud supports Windows 11 26H2 feature updates
- 14d agoKACEOctober 2026 Microsoft Patch Tuesday
- 2mo agoPassbolt5.15 adds database sessions and closes shared-tag permission bypasses
- 2mo agoPassbolt5.14.3 limits the permission dialog to actual secret changes
- 3mo agoPassbolt5.14 adds confirmation prompts before shared-resource edits
- 4mo agoPassbolt5.13 adds in-app switching between Community and Pro
- 5mo agoPassbolt5.12 makes the Safari extension generally available
Frequently asked questions
What is the difference between KACE and Passbolt?
They serve adjacent needs but don't currently overlap on shipped themes. KACE and Passbolt are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is KACE better than Passbolt?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. KACE and Passbolt are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
What are the best alternatives to KACE?
Top KACE alternatives in Collab are ranked by recent ship velocity. Browse the "KACE alternatives" section above for the current picks, or visit /alternatives/kace for the full list with editorial commentary on each.
What are the best alternatives to Passbolt?
Top Passbolt alternatives in Collab are ranked by recent ship velocity. Browse the "Passbolt alternatives" section above for the current picks, or visit /alternatives/passbolt for the full list with editorial commentary on each.