Tracecat
Tracecat's 1.3 alphas keep reworking agent plumbing: tunnels, multi-org MCP, pluggable runners.
Comparison · PM
Kanboard vs NocoBase
A side-by-side editorial comparison of Kanboard and NocoBase — release velocity, themes, recent moves, and the top alternatives to consider.
Kanboard vs NocoBase: at a glance
What is Kanboard?
Six straight releases of security hardening, now reaching the API's own response shape
Kanboard is a stable, self-hosted PHP kanban board whose release stream is now almost entirely security work. Version 1.2.54 continues that pattern and pushes it further than most: API procedures no longer return private user fields, and changing a password invalidates every existing session and remember-me token. Feature development is close to dormant; the maintenance effort is going into closing whole categories of vulnerability rather than adding surface.
What is NocoBase?
NocoBase's Runner Agent gets conversation management, task links and agent switching mid-thread.
NocoBase ships two beta trains a day, and the latest center on its agent layer and on demo deployments. Beta 10-28.1 lets users manage Runner Agent conversations with task links, queued messages and usage, and swap agents without losing history; it also adds inline form validation and duplicate-submission protection to app templates. Beta 10-28.2 tightens demo mode so shared demo apps block requests with external effects.
Kanboard vs NocoBase: editorial side-by-side
Kanboard
2.5PM
Six straight releases of security hardening, now reaching the API's own response shape
◆ Current state
Kanboard is a stable, self-hosted PHP kanban board whose release stream is now almost entirely security work. Version 1.2.54 continues that pattern and pushes it further than most: API procedures no longer return private user fields, and changing a password invalidates every existing session and remember-me token. Feature development is close to dormant; the maintenance effort is going into closing whole categories of vulnerability rather than adding surface.
◆ Where it's heading
The arc from 1.2.49 through 1.2.54 is a systematic audit that works outward from one surface to the next — LDAP escaping, SSRF, deserialization, CSRF, comment visibility, bulk-operation ownership, and now API response shape and session lifetime. Each release also tightens the deployment story, from trusted-proxy configuration to an nginx config that only lets front controllers execute PHP. New user-facing features arrive rarely and small: opt-in full-text search, RTL support, richer API links.
◆ Prediction
Expect the audit to keep moving through remaining surfaces, with more permission checks in API procedures and continued PHP-version and base-image maintenance. Nothing in these entries points to a new feature direction.
NocoBase
8.8PM
NocoBase's Runner Agent gets conversation management, task links and agent switching mid-thread.
◆ Current state
NocoBase ships two beta trains a day, and the latest center on its agent layer and on demo deployments. Beta 10-28.1 lets users manage Runner Agent conversations with task links, queued messages and usage, and swap agents without losing history; it also adds inline form validation and duplicate-submission protection to app templates. Beta 10-28.2 tightens demo mode so shared demo apps block requests with external effects.
◆ Where it's heading
The platform is being rebuilt as an app-template and agent product on a 3.0 server line: agents can develop app-local plugins, run conversations tied to tasks, and operate inside templated apps with release management. Each beta also publishes a cluster of package tags, so the feed is dense but the substance sits in the dated release notes.
◆ Prediction
Expect the Runner Agent and app-template work to keep landing in daily betas until app-server 3.0 leaves beta; a stable 3.0 announcement is the likely next large step.
Alternatives to Kanboard and NocoBase
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Kanboard or NocoBase.
Camunda
Camunda opens the 8.11 cycle with job-worker fixes and variable metadata across gRPC, REST and MCP.
Todoist
Todoist's 2026 bets are on capture: voice via Ramble, photos and files via Task Capture.
Atarim
Atarim's AI experts now propose changes to live pages as drafts, and the app runs on phones.
Fibery
Fibery's MCP server can now upload local files, so AI assistants can attach screenshots and images.
SmartSuite
SmartSuite adds a scheduled JavaScript runtime with secrets and run history.
See all Kanboard alternatives → · See all NocoBase alternatives →
Recent activity from Kanboard and NocoBase
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoNocoBaseBeta 10-28.2: safer demo mode, agent reply fixes
- 1d agoNocoBaseBeta 10-28.1: Runner Agent conversation management
- 1d agoNocoBase@nocobase/app-template-examples@1.0.0-beta.68
- 1d agoNocoBase@nocobase/app-skills@0.1.0-beta.54
- 1d agoNocoBase@nocobase/app-plugin-users@2.0.0-beta.11
- 1d agoNocoBase@nocobase/app-server@3.0.0-beta.4
- 2mo agoKanboardPassword changes now kill sessions; API stops leaking private fields
- 3mo agoKanboardSecurity fixes and opt-in full-text task search
- 6mo agoKanboardComment visibility rules and timing-safe token checks
- 7mo agoKanboardSSRF protection and safer deserialization
- 8mo agoKanboardAuthorization and CSRF checks across controllers
- 9mo agoKanboardLDAP injection fix and trusted-proxy config
Frequently asked questions
What is the difference between Kanboard and NocoBase?
They serve adjacent needs but don't currently overlap on shipped themes. NocoBase is currently shipping more aggressively (velocity 8.8 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Kanboard better than NocoBase?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. NocoBase is currently shipping more aggressively (velocity 8.8 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
What are the best alternatives to Kanboard?
Top Kanboard alternatives in PM are ranked by recent ship velocity. Browse the "Kanboard alternatives" section above for the current picks, or visit /alternatives/kanboard for the full list with editorial commentary on each.
What are the best alternatives to NocoBase?
Top NocoBase alternatives in PM are ranked by recent ship velocity. Browse the "NocoBase alternatives" section above for the current picks, or visit /alternatives/nocobase for the full list with editorial commentary on each.