Twenty
Twenty 2.52 lets apps run their own account-connection flows and adds inbox sharing.
A side-by-side editorial comparison of Easy!Appointments and Twenty — release velocity, themes, recent moves, and the top alternatives to consider.
Easy!Appointments 1.6 lands video conferencing, GDPR tools, and a serious security overhaul across its CalDAV and booking stack.
Easy!Appointments, an open-source self-hosted scheduler, is shipping its 1.6 major version through a long pre-release cycle that has introduced Jitsi and Google Meet integration, CAPTCHA and ALTCHA anti-abuse protection, GDPR features, and a rebuilt CalDAV synchronization stack. The 1.6.1 security hardening pre-release then landed a concentrated batch of serious vulnerability fixes: LDAP injection in directory search, SSRF in CalDAV URL handling, cross-account appointment takeover, provider credential exposure to secretary accounts, and CAPTCHA bypass — a set that suggests the expanded surface area of 1.6.0 brought corresponding security debt.
Twenty 2.53 lets apps lock field permission actions, a day after role-aware relation pickers.
Twenty shipped 2.53.0 and 2.53.1 on Oct 28, a day after 2.52.0. The 2.53.0 notes list only docs translations; 2.53.1 lets applications disable field permission actions on the fields they own. 2.52 had made relation pickers offer only targets the current role may update, and 2.51 replaced BlockNote with TipTap and put custom roles behind a billing entitlement.
Easy!Appointments, an open-source self-hosted scheduler, is shipping its 1.6 major version through a long pre-release cycle that has introduced Jitsi and Google Meet integration, CAPTCHA and ALTCHA anti-abuse protection, GDPR features, and a rebuilt CalDAV synchronization stack. The 1.6.1 security hardening pre-release then landed a concentrated batch of serious vulnerability fixes: LDAP injection in directory search, SSRF in CalDAV URL handling, cross-account appointment takeover, provider credential exposure to secretary accounts, and CAPTCHA bypass — a set that suggests the expanded surface area of 1.6.0 brought corresponding security debt.
The 1.6 release line is expanding Easy!Appointments from a simple booking page into a more complete scheduling platform: video conferencing links, richer calendar sync, GDPR compliance tooling, and hardened multi-provider access controls all move it closer to commercial alternatives. The security work in 1.6.1-beta.1 is as important as the features — self-hosted deployments that serve real customer data need these fixes before anyone should run 1.6 in production.
A stable 1.6.1 release is the next step, clearing the pre-release label once the security fixes are confirmed across the beta testing community. After that, the CalDAV and video conferencing integrations will likely expand — CalDAV push notifications or two-way Google Calendar sync are the natural follow-ons.
Twenty shipped 2.53.0 and 2.53.1 on Oct 28, a day after 2.52.0. The 2.53.0 notes list only docs translations; 2.53.1 lets applications disable field permission actions on the fields they own. 2.52 had made relation pickers offer only targets the current role may update, and 2.51 replaced BlockNote with TipTap and put custom roles behind a billing entitlement.
Releases are arriving almost daily now, and the visible changes keep landing on roles and permissions, both in the CRM UI and in what installed applications can control. The SDK is tagged in lockstep with each server version, so the app platform and the permission model are evolving together.
Expect 2.53.x patches with more app-level permission controls; the published notes are too thin to say what else 2.53 contains.
Other CRM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Easy!Appointments or Twenty.
Twenty 2.52 lets apps run their own account-connection flows and adds inbox sharing.
IntegCRM keeps building out invoicing, bookings, forms and email for service businesses.
folk ships a French interface weeks after moving its data storage to Europe.
GroupOffice patches its current 26.0 line and the older 25.0 line on the same afternoon.
Close takes Chloe Chat out of beta for every customer, a month after OIDC SSO.
Corteza 2026.9.0 goes final after a week of single-fix candidates.
See all Easy!Appointments alternatives → · See all Twenty alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Easy!Appointments is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Easy!Appointments is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other CRM products to evaluate alongside.
Top Easy!Appointments alternatives in CRM are ranked by recent ship velocity. Browse the "Easy!Appointments alternatives" section above for the current picks, or visit /alternatives/easyappointments for the full list with editorial commentary on each.
Top Twenty alternatives in CRM are ranked by recent ship velocity. Browse the "Twenty alternatives" section above for the current picks, or visit /alternatives/twenty-crm for the full list with editorial commentary on each.