Bitrix24
Bitrix24's blog explains MCP for small teams; still no product releases.
A side-by-side editorial comparison of Easy!Appointments and Twenty — release velocity, themes, recent moves, and the top alternatives to consider.
Easy!Appointments 1.6 lands video conferencing, GDPR tools, and a serious security overhaul across its CalDAV and booking stack.
Easy!Appointments, an open-source self-hosted scheduler, is shipping its 1.6 major version through a long pre-release cycle that has introduced Jitsi and Google Meet integration, CAPTCHA and ALTCHA anti-abuse protection, GDPR features, and a rebuilt CalDAV synchronization stack. The 1.6.1 security hardening pre-release then landed a concentrated batch of serious vulnerability fixes: LDAP injection in directory search, SSRF in CalDAV URL handling, cross-account appointment takeover, provider credential exposure to secretary accounts, and CAPTCHA bypass — a set that suggests the expanded surface area of 1.6.0 brought corresponding security debt.
Twenty 2.58 rebuilds CRM permissions down to the row and adds MCP workflow steps.
Twenty 2.58.0 on November 13 rebuilt how access works: role permissions now compile into row-level rules, legacy per-user permissions are gone and the old workflow object is dropped, all flagged as breaking. The same release adds a workflow step that calls MCP tools, self-service two-factor backup codes and stricter SAML checks. Patches 2.58.1 and 2.58.2 then stopped existing accounts from joining a workspace through SSO without an invitation first.
Easy!Appointments, an open-source self-hosted scheduler, is shipping its 1.6 major version through a long pre-release cycle that has introduced Jitsi and Google Meet integration, CAPTCHA and ALTCHA anti-abuse protection, GDPR features, and a rebuilt CalDAV synchronization stack. The 1.6.1 security hardening pre-release then landed a concentrated batch of serious vulnerability fixes: LDAP injection in directory search, SSRF in CalDAV URL handling, cross-account appointment takeover, provider credential exposure to secretary accounts, and CAPTCHA bypass — a set that suggests the expanded surface area of 1.6.0 brought corresponding security debt.
The 1.6 release line is expanding Easy!Appointments from a simple booking page into a more complete scheduling platform: video conferencing links, richer calendar sync, GDPR compliance tooling, and hardened multi-provider access controls all move it closer to commercial alternatives. The security work in 1.6.1-beta.1 is as important as the features — self-hosted deployments that serve real customer data need these fixes before anyone should run 1.6 in production.
A stable 1.6.1 release is the next step, clearing the pre-release label once the security fixes are confirmed across the beta testing community. After that, the CalDAV and video conferencing integrations will likely expand — CalDAV push notifications or two-way Google Calendar sync are the natural follow-ons.
Twenty 2.58.0 on November 13 rebuilt how access works: role permissions now compile into row-level rules, legacy per-user permissions are gone and the old workflow object is dropped, all flagged as breaking. The same release adds a workflow step that calls MCP tools, self-service two-factor backup codes and stricter SAML checks. Patches 2.58.1 and 2.58.2 then stopped existing accounts from joining a workspace through SSO without an invitation first.
Twenty is hardening the base under its AI and app platform: tighter access rules, SSO and SAML checks, and apps that run under their own grants. Workflows keep gaining ways to call outside tools, now including MCP servers.
Expect follow-up patches as self-hosters hit the 2.58 permission changes, and a fix that lets invited users join SSO-only workspaces.
Other CRM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Easy!Appointments or Twenty.
Bitrix24's blog explains MCP for small teams; still no product releases.
Twenty 2.58.1 stops existing accounts from joining a workspace through SSO alone.
GroupOffice patches its 25.0 and 6.8 lines again, still with no notes.
folk adds a command panel and quick-add tasks after its agent-era repositioning.
folk now pitches itself as the CRM for the agent era.
IntegCRM adds document folders, turning back to client records after two email releases.
See all Easy!Appointments alternatives → · See all Twenty alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Easy!Appointments is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Easy!Appointments is currently shipping more aggressively (velocity 6.3 vs 5.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other CRM products to evaluate alongside.
Top Easy!Appointments alternatives in CRM are ranked by recent ship velocity. Browse the "Easy!Appointments alternatives" section above for the current picks, or visit /alternatives/easyappointments for the full list with editorial commentary on each.
Top Twenty alternatives in CRM are ranked by recent ship velocity. Browse the "Twenty alternatives" section above for the current picks, or visit /alternatives/twenty for the full list with editorial commentary on each.