OpenProject vs Rize
Side-by-side trajectory, velocity, and editorial themes.
OpenProject keeps multiple release lines in lockstep with coordinated security backports.
OpenProject is in steady maintenance mode, shipping patch releases across several parallel version lines (17.0 through 17.4). The latest two releases on 2026-06-08 are coordinated security backports addressing a journal-diff visibility bypass (CVE-2026-47193) and private work-package data disclosure (CVE-2026-49355), both surfaced through its EU-Commission-sponsored bug bounty. Feature work landed earlier in the window with 17.3.0's agile-planning and 17.4.0 changes.
The arc is one of a mature open-source PM platform prioritizing security hygiene and backport discipline over new surface area. Recurring CVE fixes from the YesWeHack program suggest an active, externally-audited security posture rather than reactive patching. Feature cadence is secondary to keeping every supported branch patched.
Expect the next releases to continue the pattern of synchronized security/bugfix point releases across the 17.x lines, with the next feature-bearing minor likely building on the 17.3 agile-planning work.
Rize ships a Slack agent and in-app MCP chat — time data becomes a conversation, not a dashboard.
Rize's last two weeks are a coordinated push to make time data accessible by conversation. A Slack Agent lets users query hours, team time, and project status from inside Slack; an in-app MCP Chat does the same inside the Rize web app; and the underlying MCP/API surface picked up profitability and granular event tools so an AI assistant can answer revenue-per-client and billable-utilization questions. Alongside that, the v3.0.7 release bundles Timeline Notes, admin time entry management, Group By in reports, Dia browser support, and database performance work.
Rize is positioning itself as a queryable data plane rather than a tracker you log into. The UI features still ship (Group By, Notes, admin tooling), but the directional bets are all about reaching users where the conversation already happens — Slack today, MCP-compatible tools generally. Profitability and event data joining MCP is the signal that this isn't just a search-your-hours toy; it's a finance-facing surface.
Expect a Teams agent to follow the Slack one, and forecasting/anomaly-style MCP tools built on the new events stream — the kind of thing that turns 'what did I do' into 'where am I likely to overrun.'
See more alternatives to OpenProject →
See more alternatives to Rize →