Craft CMS
Craft 6's alphas keep converting the plugin API, one removal at a time
A side-by-side editorial comparison of OttoKit and Pimcore — release velocity, themes, recent moves, and the top alternatives to consider.
OttoKit keeps widening its WordPress trigger surface one plugin at a time
OttoKit is a WordPress automation layer expanding through integration count rather than platform change. The current update adds two subscription triggers to Easy Digital Downloads - status changed and cancelled - both passing full subscriber and subscription context into a workflow, with optional From/To status filters. The releases behind it follow the same template: a handful of new plugin integrations, some new triggers and actions, and fixes.
Pimcore is shipping a security advisory almost every week.
Pimcore releases on a weekly-to-fortnightly patch cadence across two supported lines - 2026.2.x and the older 12.3.x - and the defining feature of the last two months is the volume of security work. Nearly every release carries at least one GHSA: WebDAV rename permissions, ImageGallery hotspot unserialize, Classificationstore field-name validation, blind SSRF via email test-send, Custom Report field allowlisting. Around it sits ordinary bug fixing in workflows, thumbnails, and data object handling.
OttoKit is a WordPress automation layer expanding through integration count rather than platform change. The current update adds two subscription triggers to Easy Digital Downloads - status changed and cancelled - both passing full subscriber and subscription context into a workflow, with optional From/To status filters. The releases behind it follow the same template: a handful of new plugin integrations, some new triggers and actions, and fixes.
The arc since the AI Agent V2 release in May has been consolidation, not expansion of what the product is. Each digest broadens which WordPress plugins can start or receive a workflow, and the newer entries add finer control inside triggers - status filters here, workflow controls in the previous update - which suggests the integration count is now large enough that selectivity is the constraint users hit.
Expect the cadence to hold: more commerce and membership plugin integrations, with filtering and conditional controls deepening on triggers that already exist. The changelog gives no signal of a second platform-level move on the scale of the AI agent.
Pimcore releases on a weekly-to-fortnightly patch cadence across two supported lines - 2026.2.x and the older 12.3.x - and the defining feature of the last two months is the volume of security work. Nearly every release carries at least one GHSA: WebDAV rename permissions, ImageGallery hotspot unserialize, Classificationstore field-name validation, blind SSRF via email test-send, Custom Report field allowlisting. Around it sits ordinary bug fixing in workflows, thumbnails, and data object handling.
The advisories are not scattered; they cluster on the surfaces where Pimcore accepts structured input from an authenticated user - custom reports, classification stores, WebDAV, grid configuration. The fixes follow a consistent method of allowlisting fields, enforcing permissions at the operation rather than the screen, and refusing to echo raw database errors. Read together, this is a deliberate audit of the admin surface rather than a run of unrelated reports, and it is being done in public one patch at a time.
The audit pattern points at the remaining input-accepting admin surfaces - imports, grid and filter parsers, WebDAV operations beyond MOVE - so expect more advisories of the same shape before the cadence slows.
Other Mkt Auto products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either OttoKit or Pimcore.
Craft 6's alphas keep converting the plugin API, one removal at a time
Two security releases ship the same day, and 6.2 finally clears alpha
Buttondown ships almost daily, and most of it is someone else's bug report closed.
Flodesk just moved its analytics out of the dashboard and into Claude and ChatGPT.
Formidable widens MCP compatibility and locks down signature files
Mailtrap is assembling a full email operations platform, one category step at a time
See all OttoKit alternatives → · See all Pimcore alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. OttoKit and Pimcore are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. OttoKit and Pimcore are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Mkt Auto products to evaluate alongside.
Top OttoKit alternatives in Mkt Auto are ranked by recent ship velocity. Browse the "OttoKit alternatives" section above for the current picks, or visit /alternatives/ottokit for the full list with editorial commentary on each.
Top Pimcore alternatives in Mkt Auto are ranked by recent ship velocity. Browse the "Pimcore alternatives" section above for the current picks, or visit /alternatives/pimcore for the full list with editorial commentary on each.