← Back to home
Comparison · HR

Frappe HR vs Horilla

A side-by-side editorial comparison of Frappe HR and Horilla — release velocity, themes, recent moves, and the top alternatives to consider.

Shared themes:hr-softwareopen-source

Frappe HR vs Horilla: at a glance

FeatureFrappe HRHorilla
SectorHRHR
Velocity score5.05.0
Sparks · 30d00
Top themeshr-software, payroll, permissions, open-sourcesecurity, access-control, open-source, hr-software
Last editorial update22h ago28d ago
WebsiteVisit →Visit →

What is Frappe HR?

Frappe HR spends October tightening permissions and payroll edge cases on both v15 and v16.

Frappe HR is in a hardening phase. v16.52.0 lets regional payroll rules add employer contributions to salary slips after structure contributions, and fixes a run of permission errors in expense claims, check-ins, holidays and tax declarations. The v15 line gets matching access checks and a fix for mobile check-outs recorded as check-ins.

Read the full Frappe HR trajectory →

What is Horilla?

Horilla shipped six security releases in three weeks, ending with a no-login RCE.

Horilla's 2.1.x line has become a running security audit. Between 2.1.1 and 2.1.8 the team closed more than a dozen externally reported advisories, from stored XSS and local file reads to salary-redirect and self-approval flaws, capped by an unauthenticated remote code execution in the public recruitment flow.

Read the full Horilla trajectory →

Frappe HR vs Horilla: editorial side-by-side

F5.0

Frappe HR spends October tightening permissions and payroll edge cases on both v15 and v16.

◆ Current state

Frappe HR is in a hardening phase. v16.52.0 lets regional payroll rules add employer contributions to salary slips after structure contributions, and fixes a run of permission errors in expense claims, check-ins, holidays and tax declarations. The v15 line gets matching access checks and a fix for mobile check-outs recorded as check-ins.

◆ Where it's heading

After guided setup for HR-only sites in 16.50, the releases since have been payroll accuracy and permission fixes, with v15 backports following v16 within days. The new regional employer-contribution hook suggests localized payroll is the next feature area.

◆ Prediction

Expect more country-specific payroll rules built on the new employer-contribution hook, alongside continued v15 backports.

H5.0

Horilla shipped six security releases in three weeks, ending with a no-login RCE.

◆ Current state

Horilla's 2.1.x line has become a running security audit. Between 2.1.1 and 2.1.8 the team closed more than a dozen externally reported advisories, from stored XSS and local file reads to salary-redirect and self-approval flaws, capped by an unauthenticated remote code execution in the public recruitment flow.

◆ Where it's heading

The pattern is consistent: outside researchers are probing the 2.x codebase, and the maintainers are responding fast with detailed advisories and no-migration patches. Most of the flaws are authorization checks that trusted any manager relationship rather than the specific record, which points to a codebase-wide access-control review rather than one-off fixes.

◆ Prediction

Expect more point releases closing authorization bugs in the remaining HR modules (payroll, attendance, assets) before any feature work resumes on 2.2.

Alternatives to Frappe HR and Horilla

Other HR products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Frappe HR or Horilla.

See all Frappe HR alternatives → · See all Horilla alternatives →

Recent activity from Frappe HR and Horilla

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 1d agoFrappe HRv15.64.7
  2. 7d agoFrappe HRFrappe HR 16.52: regional employer contributions, permission fixes
  3. 8d agoFrappe HRv15.64.6: access checks across employee, leave and payroll data
  4. 14d agoFrappe HRv15 backport: leave caps respect multi-period allocations
  5. 14d agoFrappe HRFrappe HR 16.51: half-day holiday payroll fixes, faster leave report
  6. 14d agoFrappe HRv15 backport: blocks half-day requests on full leave days
  7. 1mo agoHorilla2.1.8 — Security release
  8. 1mo agoHorilla2.1.5 — Bug-fix release
  9. 1mo agoHorilla2.1.4 — Security release
  10. 1mo agoHorilla2.1.3 — Security and bug-fix release
  11. 1mo agoHorilla2.1.2 — Security patch
  12. 1mo agoHorilla2.1.1 — Security patch

Frequently asked questions

What is the difference between Frappe HR and Horilla?

Both compete on the same themes — hr-software, open-source — within HR. Frappe HR and Horilla are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Frappe HR better than Horilla?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Frappe HR and Horilla are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other HR products to evaluate alongside.

What are the best alternatives to Frappe HR?

Top Frappe HR alternatives in HR are ranked by recent ship velocity. Browse the "Frappe HR alternatives" section above for the current picks, or visit /alternatives/frappe-hrms for the full list with editorial commentary on each.

What are the best alternatives to Horilla?

Top Horilla alternatives in HR are ranked by recent ship velocity. Browse the "Horilla alternatives" section above for the current picks, or visit /alternatives/horilla for the full list with editorial commentary on each.