Tracecat
Tracecat hit 1.0 GA and immediately shipped AI semantic search for security data tables.
A side-by-side editorial comparison of NocoBase and Redmine — release velocity, themes, recent moves, and the top alternatives to consider.
NocoBase is hardening its AI employees and security surfaces while stabilizing the v2 client.
NocoBase is a self-hosted no-code platform shipping parallel alpha (2.4.x) and beta (2.3.x) release tracks. Current work centers on three areas: AI employees (RAG-backed agents that query company data, now with prompt-cache optimization and authenticated knowledge-base retrieval APIs), enterprise integrations (WeCom and DingTalk notification unification, configurable email sync), and v2 client stabilization (form rendering bugs, subtable field behavior, data-source relation fixes). Security hardening is also active — blocking server-side redirects to literal IP addresses and preventing secret env-var exposure in custom request URLs both landed in this window.
Twenty years in, Redmine is on a disciplined security-patch cadence behind its first major release since 6.0.
Redmine shipped 7.0.0 at the end of June with webhook triggers, a Rails 8 migration, and a header redesign, then followed it eight weeks later with 7.0.1 alongside backports to the 6.1 and 6.0 branches. That August release fixes five security defects, including a session-affecting API flaw and a stored XSS in the Textile formatter, and lands them on all three supported series at once. Alongside the real releases the feed also carries version-index wiki pages captured as entries, which are crawl artifacts rather than releases.
NocoBase is a self-hosted no-code platform shipping parallel alpha (2.4.x) and beta (2.3.x) release tracks. Current work centers on three areas: AI employees (RAG-backed agents that query company data, now with prompt-cache optimization and authenticated knowledge-base retrieval APIs), enterprise integrations (WeCom and DingTalk notification unification, configurable email sync), and v2 client stabilization (form rendering bugs, subtable field behavior, data-source relation fixes). Security hardening is also active — blocking server-side redirects to literal IP addresses and preventing secret env-var exposure in custom request URLs both landed in this window.
NocoBase is heading toward an enterprise-ready AI-embedded no-code platform, where AI employees and knowledge bases are first-class building blocks rather than add-ons. The authenticated knowledge-base retrieval API (added in v2.3.0-beta.8) enables knowledge sharing across distributed NocoBase instances — a foundation for multi-tenant enterprise deployments. The WeCom/DingTalk integrations suggest the primary commercial market is enterprise China.
The AI employees feature will mature into a more configurable agent with tool-use controls and knowledge-base scoping. The gap between the alpha and beta release tracks will narrow as the v2 client approaches feature parity with v1.
Redmine shipped 7.0.0 at the end of June with webhook triggers, a Rails 8 migration, and a header redesign, then followed it eight weeks later with 7.0.1 alongside backports to the 6.1 and 6.0 branches. That August release fixes five security defects, including a session-affecting API flaw and a stored XSS in the Textile formatter, and lands them on all three supported series at once. Alongside the real releases the feed also carries version-index wiki pages captured as entries, which are crawl artifacts rather than releases.
The maintenance pattern is consistent and easy to read: coordinated multi-branch security releases roughly every two to three months, with the newest series also collecting performance and API work. Redmine 7.0.1 adds project information to the wiki page list API and fixes an OAuth2-related user deletion bug, so the 7.0 branch is absorbing polish rather than new capability. The three-branch support window is holding steady as 5.1 drops off the list.
Expect the next coordinated release to cover 7.0, 6.1, and 6.0 on the same schedule, with continued API and OAuth2 refinement on the 7.0 branch rather than new features before 7.1.
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either NocoBase or Redmine.
Tracecat hit 1.0 GA and immediately shipped AI semantic search for security data tables.
Hive keeps iterating on proofing and dashboard UX — workmanlike improvements, no pivot.
SmartSuite ships EU data residency, linked record filters, and API control improvements in a dense September release.
Fibery rebuilds its AI agent from scratch and ships OAuth Apps, accelerating its MCP-first agentic platform bet.
Camunda 8.10 enters release candidate as the 8.7 stable branch absorbs a wave of CVE patches.
Atarim exposes its AI agents' memory to users and validates the 5.1 cost cuts, accelerating toward auditable agentic automation.
See all NocoBase alternatives → · See all Redmine alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — self-hosted — within PM. NocoBase is currently shipping more aggressively (velocity 7.5 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. NocoBase is currently shipping more aggressively (velocity 7.5 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
Top NocoBase alternatives in PM are ranked by recent ship velocity. Browse the "NocoBase alternatives" section above for the current picks, or visit /alternatives/nocobase for the full list with editorial commentary on each.
Top Redmine alternatives in PM are ranked by recent ship velocity. Browse the "Redmine alternatives" section above for the current picks, or visit /alternatives/redmine for the full list with editorial commentary on each.