NocoBase
NocoBase's Runner Agent gets conversation management, task links and agent switching mid-thread.
Comparison · PM
Kanboard vs Tracecat
A side-by-side editorial comparison of Kanboard and Tracecat — release velocity, themes, recent moves, and the top alternatives to consider.
Kanboard vs Tracecat: at a glance
What is Kanboard?
Six straight releases of security hardening, now reaching the API's own response shape
Kanboard is a stable, self-hosted PHP kanban board whose release stream is now almost entirely security work. Version 1.2.54 continues that pattern and pushes it further than most: API procedures no longer return private user fields, and changing a password invalidates every existing session and remember-me token. Feature development is close to dormant; the maintenance effort is going into closing whole categories of vulnerability rather than adding surface.
What is Tracecat?
Tracecat's 1.3 alphas keep reworking agent plumbing: tunnels, multi-org MCP, pluggable runners.
Tracecat is mid-cycle on 1.3, and nearly every change is agent infrastructure. The alphas route agent MCP and tool calls through tunnels, let one MCP OAuth login cover multiple organizations, trace LLM proxy requests, and raise agent timeouts to two hours. The nightly builds add a session command store, chat steering, and now a pluggable runner for stdio MCP servers.
Kanboard vs Tracecat: editorial side-by-side
Kanboard
2.5PM
Six straight releases of security hardening, now reaching the API's own response shape
◆ Current state
Kanboard is a stable, self-hosted PHP kanban board whose release stream is now almost entirely security work. Version 1.2.54 continues that pattern and pushes it further than most: API procedures no longer return private user fields, and changing a password invalidates every existing session and remember-me token. Feature development is close to dormant; the maintenance effort is going into closing whole categories of vulnerability rather than adding surface.
◆ Where it's heading
The arc from 1.2.49 through 1.2.54 is a systematic audit that works outward from one surface to the next — LDAP escaping, SSRF, deserialization, CSRF, comment visibility, bulk-operation ownership, and now API response shape and session lifetime. Each release also tightens the deployment story, from trusted-proxy configuration to an nginx config that only lets front controllers execute PHP. New user-facing features arrive rarely and small: opt-in full-text search, RTL support, richer API links.
◆ Prediction
Expect the audit to keep moving through remaining surfaces, with more permission checks in API procedures and continued PHP-version and base-image maintenance. Nothing in these entries points to a new feature direction.
Tracecat
6.3PM
Tracecat's 1.3 alphas keep reworking agent plumbing: tunnels, multi-org MCP, pluggable runners.
◆ Current state
Tracecat is mid-cycle on 1.3, and nearly every change is agent infrastructure. The alphas route agent MCP and tool calls through tunnels, let one MCP OAuth login cover multiple organizations, trace LLM proxy requests, and raise agent timeouts to two hours. The nightly builds add a session command store, chat steering, and now a pluggable runner for stdio MCP servers.
◆ Where it's heading
The 1.3 line is making agents long-running, observable, and able to reach private infrastructure. Maintenance releases on 1.1 and 1.2 carried the same breaking org-scoping fix, so older lines are being patched in parallel.
◆ Prediction
Session commands and chat steering in the nightlies look set to land in the next 1.3 alpha as user-facing controls for steering running agent sessions.
Alternatives to Kanboard and Tracecat
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Kanboard or Tracecat.
Camunda
Camunda opens the 8.11 cycle with job-worker fixes and variable metadata across gRPC, REST and MCP.
Todoist
Todoist's 2026 bets are on capture: voice via Ramble, photos and files via Task Capture.
Atarim
Atarim's AI experts now propose changes to live pages as drafts, and the app runs on phones.
Fibery
Fibery's MCP server can now upload local files, so AI assistants can attach screenshots and images.
SmartSuite
SmartSuite adds a scheduled JavaScript runtime with secrets and run history.
See all Kanboard alternatives → · See all Tracecat alternatives →
Recent activity from Kanboard and Tracecat
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 21h agoTracecatNightly: transaction-scoped advisory locks
- 1d agoTracecatNightly: Temporal SDK pinned to 1.32.0
- 1d agoTracecatNightly: Slack, comment and MCP agents use the selected backend
- 1d agoTracecatNightly: shared agent session sink, caller-owned turn results
- 1d agoTracecatNightly: stdio MCP servers get a pluggable runner
- 5d agoTracecatNightly: agent session command store
- 2mo agoKanboardPassword changes now kill sessions; API stops leaking private fields
- 3mo agoKanboardSecurity fixes and opt-in full-text task search
- 6mo agoKanboardComment visibility rules and timing-safe token checks
- 7mo agoKanboardSSRF protection and safer deserialization
- 8mo agoKanboardAuthorization and CSRF checks across controllers
- 9mo agoKanboardLDAP injection fix and trusted-proxy config
Frequently asked questions
What is the difference between Kanboard and Tracecat?
They serve adjacent needs but don't currently overlap on shipped themes. Tracecat is currently shipping more aggressively (velocity 6.3 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Kanboard better than Tracecat?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Tracecat is currently shipping more aggressively (velocity 6.3 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
What are the best alternatives to Kanboard?
Top Kanboard alternatives in PM are ranked by recent ship velocity. Browse the "Kanboard alternatives" section above for the current picks, or visit /alternatives/kanboard for the full list with editorial commentary on each.
What are the best alternatives to Tracecat?
Top Tracecat alternatives in PM are ranked by recent ship velocity. Browse the "Tracecat alternatives" section above for the current picks, or visit /alternatives/tracecat for the full list with editorial commentary on each.