Leapsome
Leapsome publishes another batch of HR templates and software roundups.
A side-by-side editorial comparison of Horilla and Workable — release velocity, themes, recent moves, and the top alternatives to consider.
Horilla shipped six security releases in three weeks, ending with a no-login RCE.
Horilla's 2.1.x line has become a running security audit. Between 2.1.1 and 2.1.8 the team closed more than a dozen externally reported advisories, from stored XSS and local file reads to salary-redirect and self-approval flaws, capped by an unauthenticated remote code execution in the public recruitment flow.
Workable turns its report builder on interviews, assessments and video screens.
Workable is a recruiting platform growing a full HR suite around its applicant tracking. This week's releases are about reporting: every number in a report now opens the records behind it, referral reports count AI search and Chrome extension sources, widgets can be resized and viewed on a phone, and Enterprise custom reports gain Events, Assessments and Video interview data. Earlier in November came a reworked candidate profile and separate offer approval and delivery steps.
Horilla's 2.1.x line has become a running security audit. Between 2.1.1 and 2.1.8 the team closed more than a dozen externally reported advisories, from stored XSS and local file reads to salary-redirect and self-approval flaws, capped by an unauthenticated remote code execution in the public recruitment flow.
The pattern is consistent: outside researchers are probing the 2.x codebase, and the maintainers are responding fast with detailed advisories and no-migration patches. Most of the flaws are authorization checks that trusted any manager relationship rather than the specific record, which points to a codebase-wide access-control review rather than one-off fixes.
Expect more point releases closing authorization bugs in the remaining HR modules (payroll, attendance, assets) before any feature work resumes on 2.2.
Workable is a recruiting platform growing a full HR suite around its applicant tracking. This week's releases are about reporting: every number in a report now opens the records behind it, referral reports count AI search and Chrome extension sources, widgets can be resized and viewed on a phone, and Enterprise custom reports gain Events, Assessments and Video interview data. Earlier in November came a reworked candidate profile and separate offer approval and delivery steps.
After October's HR-suite additions and early-November recruiter workflow fixes, Workable is now making its hiring data answerable: who spends time interviewing, where assessments stall, which referral channels work. Most of the reporting depth sits on Enterprise plans, which suggests reporting is being used to pull larger customers up a tier.
More data sources in the custom report builder are likely, probably for offers and the AI Recruiting Agent's activity, since those are the recent features not yet reportable. Whether any of this reaches non-Enterprise plans is not stated.
Other HR products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Horilla or Workable.
Leapsome publishes another batch of HR templates and software roundups.
Ashby adds threaded comments to AI Notetaker, so interview debriefs stay next to the transcript.
Ever Gauzy links time logs to invoice lines so the same hours are never billed twice.
Teamtailor shows every time in the reader's own time zone, for recruiters and candidates.
Fountain opens a skills marketplace for its Cue assistant and adds a compliance review queue.
Keka's feed has turned to US payroll and benefits explainers, still with no changelog
See all Horilla alternatives → · See all Workable alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Horilla and Workable are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Horilla and Workable are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other HR products to evaluate alongside.
Top Horilla alternatives in HR are ranked by recent ship velocity. Browse the "Horilla alternatives" section above for the current picks, or visit /alternatives/horilla for the full list with editorial commentary on each.
Top Workable alternatives in HR are ranked by recent ship velocity. Browse the "Workable alternatives" section above for the current picks, or visit /alternatives/workable for the full list with editorial commentary on each.