NocoBase
NocoBase adds an AI knowledge base retrieval API, connecting no-code workflows to external knowledge sources.
A side-by-side editorial comparison of Redmine and Tracecat — release velocity, themes, recent moves, and the top alternatives to consider.
Twenty years in, Redmine is on a disciplined security-patch cadence behind its first major release since 6.0.
Redmine shipped 7.0.0 at the end of June with webhook triggers, a Rails 8 migration, and a header redesign, then followed it eight weeks later with 7.0.1 alongside backports to the 6.1 and 6.0 branches. That August release fixes five security defects, including a session-affecting API flaw and a stored XSS in the Textile formatter, and lands them on all three supported series at once. Alongside the real releases the feed also carries version-index wiki pages captured as entries, which are crawl artifacts rather than releases.
Tracecat 1.0 stable lands with workspace entitlements, SSRF hardening, and an open-source MCP skills catalog
Tracecat shipped version 1.0.0 stable on September 16, marking the first production-commitment release for the open-source security automation platform. The release draws a commercial boundary via multi-workspace entitlements, blocks SSRF in MCP and LLM agent requests, expands case management with filtered aggregation, and open-sources its preset skills and MCP catalog connectors. The 1.0 stable tag reflects a deliberate signal: the core architecture is settled enough for production commitments.
Redmine shipped 7.0.0 at the end of June with webhook triggers, a Rails 8 migration, and a header redesign, then followed it eight weeks later with 7.0.1 alongside backports to the 6.1 and 6.0 branches. That August release fixes five security defects, including a session-affecting API flaw and a stored XSS in the Textile formatter, and lands them on all three supported series at once. Alongside the real releases the feed also carries version-index wiki pages captured as entries, which are crawl artifacts rather than releases.
The maintenance pattern is consistent and easy to read: coordinated multi-branch security releases roughly every two to three months, with the newest series also collecting performance and API work. Redmine 7.0.1 adds project information to the wiki page list API and fixes an OAuth2-related user deletion bug, so the 7.0 branch is absorbing polish rather than new capability. The three-branch support window is holding steady as 5.1 drops off the list.
Expect the next coordinated release to cover 7.0, 6.1, and 6.0 on the same schedule, with continued API and OAuth2 refinement on the 7.0 branch rather than new features before 7.1.
Tracecat shipped version 1.0.0 stable on September 16, marking the first production-commitment release for the open-source security automation platform. The release draws a commercial boundary via multi-workspace entitlements, blocks SSRF in MCP and LLM agent requests, expands case management with filtered aggregation, and open-sources its preset skills and MCP catalog connectors. The 1.0 stable tag reflects a deliberate signal: the core architecture is settled enough for production commitments.
Tracecat is following an open-core model—OSS core, paid multi-tenancy—with 1.0 as the line where that separation becomes contractual. The SSRF hardening in agentic contexts and the open-sourced MCP catalog are complementary moves: more trust for AI agents running in production, more community-contributed integrations via MCP. Case management (aggregation actions, rich text comments) is getting substantial investment, pointing toward a more complete SOC workflow tool.
The next major push will be an expanded MCP connector catalog—now that it's open-source, community PRs will accelerate the integration count. Expect deepening case management automation (aggregation actions are just in; richer query and reporting capabilities follow) alongside further commercial tier differentiation.
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Redmine or Tracecat.
NocoBase adds an AI knowledge base retrieval API, connecting no-code workflows to external knowledge sources.
RentRedi embeds AI into its maintenance workflow end-to-end, handling tenant intake and drafting landlord replies.
Camunda 8.10 alpha cycles through broad platform bug fixes while 8.7 gets routine security patches
Asana embeds AI into Slack threads and closes the rich-text gap with Notion
Rize pivots from solo time tracker to agency operations platform with invoicing, profitability reporting, and a ChatGPT integration.
Hive is building shared AI automation infrastructure into the core of its PM platform.
See all Redmine alternatives → · See all Tracecat alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Tracecat is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Tracecat is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
Top Redmine alternatives in PM are ranked by recent ship velocity. Browse the "Redmine alternatives" section above for the current picks, or visit /alternatives/redmine for the full list with editorial commentary on each.
Top Tracecat alternatives in PM are ranked by recent ship velocity. Browse the "Tracecat alternatives" section above for the current picks, or visit /alternatives/tracecat for the full list with editorial commentary on each.