GitHub
At Universe, GitHub folds Copilot into Enterprise seats and lets Copilot Fusion pick the model.
Comparison · Collab
BookStack vs KACE
A side-by-side editorial comparison of BookStack and KACE — release velocity, themes, recent moves, and the top alternatives to consider.
BookStack vs KACE: at a glance
| Feature | BookStack | KACE |
|---|---|---|
| Sector | Collab | Collab |
| Velocity score | 5.0 | 5.0 |
| Sparks · 30d | 0 | 0 |
| Top themes | self-hosted, security, permissions, documentation | endpoint-management, security-patches, php2shell, windows-11 |
| Last editorial update | 2mo ago | 1d ago |
| Website | Visit → | — |
What is BookStack?
Five security releases in four months, this one closing an import RCE
BookStack's release stream since v26.05 has been almost entirely security patches. This release fixes a range of issues: attachments updatable without permission, XSS through the drawing endpoints, draft endpoints altering non-draft pages, other users' drafts leaking into search results, remote code execution through crafted ZIP imports, and page visibility not updating in recycle-bin scenarios. The feature release it patches, v26.05, added a page contents view, tag API and separately controlled revision permissions.
What is KACE?
KACE extends its PHP2SHELL fix to the SDA deployment appliance, six days after disclosure.
KACE has now patched the critical PHP2SHELL vulnerabilities across both appliances: SMA 15.1 and 15.0 on October 23, and the SDA 9.3 deployment appliance on October 27. SMA also gained official support for Windows 11 26H2 agents and patches, following KACE Cloud's 26H2 support a few days earlier.
BookStack vs KACE: editorial side-by-side
BookStack
5.0COLLAB
Five security releases in four months, this one closing an import RCE
◆ Current state
BookStack's release stream since v26.05 has been almost entirely security patches. This release fixes a range of issues: attachments updatable without permission, XSS through the drawing endpoints, draft endpoints altering non-draft pages, other users' drafts leaking into search results, remote code execution through crafted ZIP imports, and page visibility not updating in recycle-bin scenarios. The feature release it patches, v26.05, added a page contents view, tag API and separately controlled revision permissions.
◆ Where it's heading
The pattern is a substantial feature release followed by a run of point releases that are purely security, each crediting outside reporters. That cadence suggests sustained external scrutiny of the permission and import paths rather than a project shipping features in small increments. Every advisory in this run touches either permission checking or content handling on import and export — the two places where a self-hosted wiki with untrusted editors is most exposed.
◆ Prediction
Nothing in this stream points to the next feature release; on the current pattern the next tag is more likely to be another point release closing reported issues in the same permission and import surfaces.
KACE
5.0COLLAB
KACE extends its PHP2SHELL fix to the SDA deployment appliance, six days after disclosure.
◆ Current state
KACE has now patched the critical PHP2SHELL vulnerabilities across both appliances: SMA 15.1 and 15.0 on October 23, and the SDA 9.3 deployment appliance on October 27. SMA also gained official support for Windows 11 26H2 agents and patches, following KACE Cloud's 26H2 support a few days earlier.
◆ Where it's heading
The changelog is dominated by security response and OS-version coverage, with both SMA branches patched in lockstep. Feature work is limited to agent reliability fixes. KACE behaves like a maintained endpoint-management line rather than one being redirected.
◆ Prediction
Expect November Patch Tuesday content and further cumulative patches on both SMA branches. The entries don't point to new feature work.
Alternatives to BookStack and KACE
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either BookStack or KACE.
SiYuan
SiYuan 3.8.9 reaches RC, adding AI-agent extraction of images embedded in PDFs.
Mattermost
Mattermost v12 puts user-scoped permissions, private models and audit trails on every agent action.
AFFiNE
AFFiNE's canaries stay on upkeep: a Swift Collections bump follows CVE and migration fixes.
Teable
Teable's Structured Query v2 now reports across multi-hop relations, with a strict mode against SQL.
Readwise
Readwise splits its bundle into Reader-only and Highlights-only plans and renames its first app.
See all BookStack alternatives → · See all KACE alternatives →
Recent activity from BookStack and KACE
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 2d agoKACESDA 9.3 hotfix closes PHP2SHELL flaws
- 3d agoKACEKACE SMA Windows 11 26H2 general support
- 6d agoKACEKACE SMA 15.0 Cumulative Patch 5
- 6d agoKACEKACE SMA 15.1 Cumulative Patch 2
- 6d agoKACEKACE Cloud supports Windows 11 26H2 feature updates
- 14d agoKACEOctober 2026 Microsoft Patch Tuesday
- 2mo agoBookStackSecurity release closes a ZIP-import RCE and permission bypasses
- 3mo agoBookStackSecurity release fixes five issues including auth matching
- 3mo agoBookStackURL filtering, redirects and permission checks hardened
- 4mo agoBookStackAttachment metadata leak and file:// export risk closed
- 5mo agoBookStackv26.05 adds page contents view, tag API and revision permissions
- 5mo agoBookStackRate limiting added to MFA verification routes
Frequently asked questions
What is the difference between BookStack and KACE?
They serve adjacent needs but don't currently overlap on shipped themes. BookStack and KACE are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is BookStack better than KACE?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. BookStack and KACE are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
What are the best alternatives to BookStack?
Top BookStack alternatives in Collab are ranked by recent ship velocity. Browse the "BookStack alternatives" section above for the current picks, or visit /alternatives/bookstack for the full list with editorial commentary on each.
What are the best alternatives to KACE?
Top KACE alternatives in Collab are ranked by recent ship velocity. Browse the "KACE alternatives" section above for the current picks, or visit /alternatives/kace for the full list with editorial commentary on each.