NocoBase
NocoBase adds an AI knowledge base retrieval API, connecting no-code workflows to external knowledge sources.
A side-by-side editorial comparison of Leantime and Tracecat — release velocity, themes, recent moves, and the top alternatives to consider.
Leantime is stabilizing its big 3.9 rewrite while extending cross-project planning and a mobile API
Leantime is deep in a modernization cycle. The 3.9.0 release rebuilt the app around a native, fail-closed permission engine, a JSON-RPC API, and a consolidated Blueprints domain; the releases since then mostly stabilize that foundation. Recent point releases fix regressions (repeated Bearer/PAT auth fixes) while adding cross-project program views and a mobile app backend.
Tracecat 1.0 stable lands with workspace entitlements, SSRF hardening, and an open-source MCP skills catalog
Tracecat shipped version 1.0.0 stable on September 16, marking the first production-commitment release for the open-source security automation platform. The release draws a commercial boundary via multi-workspace entitlements, blocks SSRF in MCP and LLM agent requests, expands case management with filtered aggregation, and open-sources its preset skills and MCP catalog connectors. The 1.0 stable tag reflects a deliberate signal: the core architecture is settled enough for production commitments.
Leantime is deep in a modernization cycle. The 3.9.0 release rebuilt the app around a native, fail-closed permission engine, a JSON-RPC API, and a consolidated Blueprints domain; the releases since then mostly stabilize that foundation. Recent point releases fix regressions (repeated Bearer/PAT auth fixes) while adding cross-project program views and a mobile app backend.
The work is consolidation over expansion: hardening the new auth/permission and API layers, closing security IDORs domain by domain, and building the surface a mobile app and program-level planning need. The steady stream of small patch releases reflects shaking out regressions from the 3.9.0 refactor rather than opening new product directions.
Expect continued point releases fixing regressions from the permission-engine and JSON-RPC migration, plus buildout of the Leantime Mobile app now that its Bearer-authenticated backend API is landing.
Tracecat shipped version 1.0.0 stable on September 16, marking the first production-commitment release for the open-source security automation platform. The release draws a commercial boundary via multi-workspace entitlements, blocks SSRF in MCP and LLM agent requests, expands case management with filtered aggregation, and open-sources its preset skills and MCP catalog connectors. The 1.0 stable tag reflects a deliberate signal: the core architecture is settled enough for production commitments.
Tracecat is following an open-core model—OSS core, paid multi-tenancy—with 1.0 as the line where that separation becomes contractual. The SSRF hardening in agentic contexts and the open-sourced MCP catalog are complementary moves: more trust for AI agents running in production, more community-contributed integrations via MCP. Case management (aggregation actions, rich text comments) is getting substantial investment, pointing toward a more complete SOC workflow tool.
The next major push will be an expanded MCP connector catalog—now that it's open-source, community PRs will accelerate the integration count. Expect deepening case management automation (aggregation actions are just in; richer query and reporting capabilities follow) alongside further commercial tier differentiation.
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Leantime or Tracecat.
NocoBase adds an AI knowledge base retrieval API, connecting no-code workflows to external knowledge sources.
RentRedi embeds AI into its maintenance workflow end-to-end, handling tenant intake and drafting landlord replies.
Camunda 8.10 alpha cycles through broad platform bug fixes while 8.7 gets routine security patches
Asana embeds AI into Slack threads and closes the rich-text gap with Notion
Rize pivots from solo time tracker to agency operations platform with invoicing, profitability reporting, and a ChatGPT integration.
Hive is building shared AI automation infrastructure into the core of its PM platform.
See all Leantime alternatives → · See all Tracecat alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Leantime and Tracecat are shipping at a similar cadence (velocity 6.3 vs 6.3, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Leantime and Tracecat are shipping at a similar cadence (velocity 6.3 vs 6.3, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
Top Leantime alternatives in PM are ranked by recent ship velocity. Browse the "Leantime alternatives" section above for the current picks, or visit /alternatives/leantime for the full list with editorial commentary on each.
Top Tracecat alternatives in PM are ranked by recent ship velocity. Browse the "Tracecat alternatives" section above for the current picks, or visit /alternatives/tracecat for the full list with editorial commentary on each.