GitHub
At Universe, GitHub folds Copilot into Enterprise seats and lets Copilot Fusion pick the model.
Comparison · Collab
HedgeDoc vs Mattermost
A side-by-side editorial comparison of HedgeDoc and Mattermost — release velocity, themes, recent moves, and the top alternatives to consider.
Shared themes:self-hosted
HedgeDoc vs Mattermost: at a glance
What is HedgeDoc?
A collaborative markdown editor on a security-driven maintenance cadence.
HedgeDoc's 1.x line ships every one to two months and is dominated by security response. Recent releases carry seven advisories between them — HTML injection via an email localpart, YAML frontmatter denial of service, CSRF in the Gist export, a rate-limit bypass through CF-Connecting-IP, a permission-value validation gap, missing upload security headers, and script execution in uploaded SVGs. Around those sit configuration knobs for the external-link warning, webp uploads, and rate limits.
What is Mattermost?
Mattermost v12 puts user-scoped permissions, private models and audit trails on every agent action.
Mattermost's feed spent five weeks on security and resilience essays; the last product release was v11.11's data-spillage exposure report. v12 changes that: agents now act with the requesting user's access rather than a shared service account, can run on private models, and leave an audit trail per action. The announcement is short on detail, but the pitch is clear and aimed at defense and regulated buyers.
HedgeDoc vs Mattermost: editorial side-by-side
HedgeDoc
2.5COLLAB
A collaborative markdown editor on a security-driven maintenance cadence.
◆ Current state
HedgeDoc's 1.x line ships every one to two months and is dominated by security response. Recent releases carry seven advisories between them — HTML injection via an email localpart, YAML frontmatter denial of service, CSRF in the Gist export, a rate-limit bypass through CF-Connecting-IP, a permission-value validation gap, missing upload security headers, and script execution in uploaded SVGs. Around those sit configuration knobs for the external-link warning, webp uploads, and rate limits.
◆ Where it's heading
Two threads run in parallel. The perimeter work reduces attack surface and maintenance burden at once: old API endpoints and unused config are deleted, Node 18 support is dropped now that its security window has closed, and features added in one release tend to gain an off switch in the next. The second thread is realtime correctness — concurrent-editing data loss, connections dropped mid-handshake, operations discarded during revision gap recovery — which is the only work aimed at the core editing experience rather than its edges.
◆ Prediction
Expect the 1.x line to continue as security and correctness maintenance, with more legacy endpoints and configuration removed rather than new editing features added.
Mattermost
6.3COLLAB
Mattermost v12 puts user-scoped permissions, private models and audit trails on every agent action.
◆ Current state
Mattermost's feed spent five weeks on security and resilience essays; the last product release was v11.11's data-spillage exposure report. v12 changes that: agents now act with the requesting user's access rather than a shared service account, can run on private models, and leave an audit trail per action. The announcement is short on detail, but the pitch is clear and aimed at defense and regulated buyers.
◆ Where it's heading
The essays on zero trust, data spillage and out-of-band response were building toward this. Mattermost is positioning its AI agents as governed, mission-safe tools inside its classified-environment niche rather than competing on agent breadth. The in-house Matty Code agent shows it also uses agents to build the product itself.
◆ Prediction
Expect v12.x follow-ups that publish admin controls and audit-log detail for agent actions, plus more deployment-focused content aimed at defense buyers.
Alternatives to HedgeDoc and Mattermost
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either HedgeDoc or Mattermost.
SiYuan
SiYuan 3.8.9 reaches RC, adding AI-agent extraction of images embedded in PDFs.
KACE
KACE extends its PHP2SHELL fix to the SDA deployment appliance, six days after disclosure.
AFFiNE
AFFiNE's canaries stay on upkeep: a Swift Collections bump follows CVE and migration fixes.
Teable
Teable's Structured Query v2 now reports across multi-hop relations, with a strict mode against SQL.
Readwise
Readwise splits its bundle into Reader-only and Highlights-only plans and renames its first app.
See all HedgeDoc alternatives → · See all Mattermost alternatives →
Recent activity from HedgeDoc and Mattermost
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 3d agoMattermostMattermost v12 Cross Guard: managed cross-domain transfers
- 6d agoMattermostMattermost v12: Agents Are Doing the Work. Now Control What They Can See. ⚡
- 15d agoMattermostWhere the Response Team Talks After the Gateway Falls
- 23d agoMattermostThe Conversation Is the Operation: Defending Collaboration Infrastructure Like an Intelligence Asset
- 23d agoMattermostTwo Outages, One Vendor, One Lesson in Resilience Planning
- 23d agoMattermostOur Newest Top Contributor Is an AI Agent: 4 Months of Matty Code
- 2mo agoHedgeDocHedgeDoc 1.12.0
- 3mo agoHedgeDocHedgeDoc 1.11.1
- 4mo agoHedgeDocHedgeDoc 1.11.0
- 6mo agoHedgeDocHedgeDoc 1.10.8
- 8mo agoHedgeDocHedgeDoc 1.10.7
- 8mo agoHedgeDocHedgeDoc 1.10.6
Frequently asked questions
What is the difference between HedgeDoc and Mattermost?
Both compete on the same themes — self-hosted — within Collab. Mattermost is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is HedgeDoc better than Mattermost?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Mattermost is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
What are the best alternatives to HedgeDoc?
Top HedgeDoc alternatives in Collab are ranked by recent ship velocity. Browse the "HedgeDoc alternatives" section above for the current picks, or visit /alternatives/hedgedoc for the full list with editorial commentary on each.
What are the best alternatives to Mattermost?
Top Mattermost alternatives in Collab are ranked by recent ship velocity. Browse the "Mattermost alternatives" section above for the current picks, or visit /alternatives/mattermost for the full list with editorial commentary on each.