iCIMS
iCIMS adds recruiting how-tos to its feed; still no product news
Comparison · HR
Horilla vs Frappe HR
A side-by-side editorial comparison of Horilla and Frappe HR — release velocity, themes, recent moves, and the top alternatives to consider.
Shared themes:open-sourcehr-software
Horilla vs Frappe HR: at a glance
What is Horilla?
Horilla shipped six security releases in three weeks, ending with a no-login RCE.
Horilla's 2.1.x line has become a running security audit. Between 2.1.1 and 2.1.8 the team closed more than a dozen externally reported advisories, from stored XSS and local file reads to salary-redirect and self-approval flaws, capped by an unauthenticated remote code execution in the public recruitment flow.
What is Frappe HR?
Frappe HR 16.53.2 locks the org chart to its own data and stops duplicate interview emails.
Frappe HR ships on two lines: v16 adds features and v15 receives backported fixes. v16.53.0 brought Compensatory Leave Requests to the PWA and right-to-left layout to the web app; v16.53.1 limited who can see approvers on leave, expense and shift requests. v16.53.2 on November 11 restricts the hierarchy chart to organizational chart data and stops interview forms from re-notifying people when nothing changed.
Horilla vs Frappe HR: editorial side-by-side
Horilla
5.0HR
Horilla shipped six security releases in three weeks, ending with a no-login RCE.
◆ Current state
Horilla's 2.1.x line has become a running security audit. Between 2.1.1 and 2.1.8 the team closed more than a dozen externally reported advisories, from stored XSS and local file reads to salary-redirect and self-approval flaws, capped by an unauthenticated remote code execution in the public recruitment flow.
◆ Where it's heading
The pattern is consistent: outside researchers are probing the 2.x codebase, and the maintainers are responding fast with detailed advisories and no-migration patches. Most of the flaws are authorization checks that trusted any manager relationship rather than the specific record, which points to a codebase-wide access-control review rather than one-off fixes.
◆ Prediction
Expect more point releases closing authorization bugs in the remaining HR modules (payroll, attendance, assets) before any feature work resumes on 2.2.
Frappe HR 16.53.2 locks the org chart to its own data and stops duplicate interview emails.
◆ Current state
Frappe HR ships on two lines: v16 adds features and v15 receives backported fixes. v16.53.0 brought Compensatory Leave Requests to the PWA and right-to-left layout to the web app; v16.53.1 limited who can see approvers on leave, expense and shift requests. v16.53.2 on November 11 restricts the hierarchy chart to organizational chart data and stops interview forms from re-notifying people when nothing changed.
◆ Where it's heading
The pattern is steady: a feature release roughly weekly on v16, then a patch, then matching v15 backports. Permission tightening has been a recurring theme since October, and payroll edge cases keep getting corrected. Large new modules are not visible in recent entries.
◆ Prediction
Expect v16.54.0 within about a week with another small PWA or payroll addition, and further access-check fixes on employee records. A bigger shift is not signalled by the entries.
Alternatives to Horilla and Frappe HR
Other HR products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Horilla or Frappe HR.
Leapsome
Leapsome publishes another batch of HR templates and software roundups.
Ashby
Ashby adds threaded comments to AI Notetaker, so interview debriefs stay next to the transcript.
Ever Gauzy
Ever Gauzy links time logs to invoice lines so the same hours are never billed twice.
Teamtailor
Teamtailor shows every time in the reader's own time zone, for recruiters and candidates.
Workable
Workable turns its report builder on interviews, assessments and video screens.
See all Horilla alternatives → · See all Frappe HR alternatives →
Recent activity from Horilla and Frappe HR
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 3d agoFrappe HRFrappe HR 16.53.2 locks org chart data, quiets interviews
- 10d agoFrappe HRv15 backports: zero Additional Salary, single-day leave fixes
- 10d agoFrappe HRFrappe HR 16.53.1: approver visibility limits, payroll fixes
- 15d agoFrappe HRFrappe HR 16.53: compensatory leave in PWA, RTL web app
- 16d agoFrappe HRv15.64.7
- 23d agoFrappe HRFrappe HR 16.52: regional employer contributions, permission fixes
- 1mo agoHorilla2.1.8 — Security release
- 2mo agoHorilla2.1.5 — Bug-fix release
- 2mo agoHorilla2.1.4 — Security release
- 2mo agoHorilla2.1.3 — Security and bug-fix release
- 2mo agoHorilla2.1.2 — Security patch
- 2mo agoHorilla2.1.1 — Security patch
Frequently asked questions
What is the difference between Horilla and Frappe HR?
Both compete on the same themes — open-source, hr-software — within HR. Horilla and Frappe HR are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Horilla better than Frappe HR?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Horilla and Frappe HR are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other HR products to evaluate alongside.
What are the best alternatives to Horilla?
Top Horilla alternatives in HR are ranked by recent ship velocity. Browse the "Horilla alternatives" section above for the current picks, or visit /alternatives/horilla for the full list with editorial commentary on each.
What are the best alternatives to Frappe HR?
Top Frappe HR alternatives in HR are ranked by recent ship velocity. Browse the "Frappe HR alternatives" section above for the current picks, or visit /alternatives/frappe-hrms for the full list with editorial commentary on each.