Document360
Document360 opens its knowledge base wider: per-user Zendesk sign-in, feedback APIs and MCP.
Comparison · Collab
Passbolt vs SOGo
A side-by-side editorial comparison of Passbolt and SOGo — release velocity, themes, recent moves, and the top alternatives to consider.
Passbolt vs SOGo: at a glance
What is Passbolt?
Passbolt adds passkeys for MFA and rebuilds autofill detection, with passwordless still to come.
Passbolt 5.17 adds passkeys as a second factor in every edition and rebuilds autofill detection, raising form detection on its internal test set from 74% to 93.4%. It also brings the permission review to moves of resources and folders, as earlier notes promised. The previous release, 5.16, added a read-only Offline Mode in beta for when the server is unreachable.
What is SOGo?
SOGo's 5.12 line keeps shipping security fixes, now with mandatory settings attached.
SOGo, Alinto's self-hosted webmail, calendar and contacts suite, has made most 2026 releases about security. v5.12.11 in September fixed password reset poisoning and several XSS injections, and made a SOGoPasswordRecoveryBaseURLs setting mandatory when password recovery is on, with a warning that the XSS fix may affect webmail display. v5.12.12 in October fixed another major vulnerability and now verifies LDAP TLS certificates by default.
Passbolt vs SOGo: editorial side-by-side
Passbolt
2.5COLLAB
Passbolt adds passkeys for MFA and rebuilds autofill detection, with passwordless still to come.
◆ Current state
Passbolt 5.17 adds passkeys as a second factor in every edition and rebuilds autofill detection, raising form detection on its internal test set from 74% to 93.4%. It also brings the permission review to moves of resources and folders, as earlier notes promised. The previous release, 5.16, added a read-only Offline Mode in beta for when the server is unreachable.
◆ Where it's heading
The access-review arc that began with 5.14 has reached moves, so it is close to complete. The next arc is authentication: passkeys for MFA are stated as a first step, with passkey storage for third-party sites and passwordless sign-in to Passbolt named as follow-ups. Offline Mode and QuickAccess are also being extended resource type by resource type.
◆ Prediction
The next releases should deliver passkey storage as a resource type, with passwordless sign-in after it. Further resource types will move into QuickAccess and Offline Mode, as the 5.17 notes say.
SOGo
2.5COLLAB
SOGo's 5.12 line keeps shipping security fixes, now with mandatory settings attached.
◆ Current state
SOGo, Alinto's self-hosted webmail, calendar and contacts suite, has made most 2026 releases about security. v5.12.11 in September fixed password reset poisoning and several XSS injections, and made a SOGoPasswordRecoveryBaseURLs setting mandatory when password recovery is on, with a warning that the XSS fix may affect webmail display. v5.12.12 in October fixed another major vulnerability and now verifies LDAP TLS certificates by default.
◆ Where it's heading
Fixes are increasingly arriving with secure defaults that break lax configurations, first password recovery URLs and then LDAP certificate checks. Feature work has been absent since 5.12.4 a year ago.
◆ Prediction
Further 5.12.x security releases are likely; operators should expect more defaults that require configuration changes.
Alternatives to Passbolt and SOGo
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Passbolt or SOGo.
Tango
Tango's 2026 releases stay on workflow guides, capped by a rebrand and basic editor shortcuts.
Mumble
Mumble's 1.6 reaches a second release candidate while 1.5 loses macOS binaries.
SiYuan
SiYuan's third 3.8.10 alpha adds a built-in Markdown editor and video looping.
Hibox
Hibox's feed now advertises free nonprofit training rather than product changes.
CommaFeed
After a summer of security patches, CommaFeed 7.4 moves feed fetching to HTTP/2.
See all Passbolt alternatives → · See all SOGo alternatives →
Recent activity from Passbolt and SOGo
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 13d agoPassbolt5.17 adds passkeys for MFA and a rebuilt autofill engine
- 20d agoSOGoSOGo 5.12.12 fixes a vulnerability, enforces LDAP TLS checks
- 1mo agoPassbolt5.16 adds read-only Offline Mode in beta
- 1mo agoSOGoSOGo 5.12.11: reset poisoning and XSS fixed, new required setting
- 2mo agoPassbolt5.15 adds database sessions and closes shared-tag permission bypasses
- 2mo agoSOGoFour more vulnerabilities patched; all prior versions affected
- 2mo agoPassbolt5.14.3 limits the permission dialog to actual secret changes
- 3mo agoPassbolt5.14 adds confirmation prompts before shared-resource edits
- 4mo agoPassbolt5.13 adds in-app switching between Community and Pro
- 5mo agoSOGoPatch undoes 5.12.8 regressions in preferences and mail display
- 5mo agoSOGoTwo CVEs fixed for PostgreSQL user sources
- 5mo agoSOGoFour vulnerabilities: XSS, SQL injection, OpenID impersonation
Frequently asked questions
What is the difference between Passbolt and SOGo?
They serve adjacent needs but don't currently overlap on shipped themes. Passbolt and SOGo are shipping at a similar cadence (velocity 2.5 vs 2.5, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Passbolt better than SOGo?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Passbolt and SOGo are shipping at a similar cadence (velocity 2.5 vs 2.5, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
What are the best alternatives to Passbolt?
Top Passbolt alternatives in Collab are ranked by recent ship velocity. Browse the "Passbolt alternatives" section above for the current picks, or visit /alternatives/passbolt for the full list with editorial commentary on each.
What are the best alternatives to SOGo?
Top SOGo alternatives in Collab are ranked by recent ship velocity. Browse the "SOGo alternatives" section above for the current picks, or visit /alternatives/sogo for the full list with editorial commentary on each.