ZenTao
ZenTao posts a 22.0 beta with no notes in the feed.
A side-by-side editorial comparison of Redmine and Tracecat — release velocity, themes, recent moves, and the top alternatives to consider.
Redmine patches three security flaws in 7.0.2 and gives admins a page listing every webhook.
Redmine 7.0.2 and 6.1.5 shipped at the end of September with three security fixes: private issue subjects exposed through the REST API, private project names and role assignments exposed through group memberships, and a DOM-based XSS on clipboard paste. Rails moves to 8.1.4 and 7.2.4 respectively. The 7.0 line also gets a webhook administration page, SVG icon caching and a fix for UI freezes on very large custom fields.
Tracecat 1.5 alpha patches add sub-cases and lock down agent sandboxes.
Tracecat 1.4.0 went stable with MCP variable tools and case task actions, and 1.5.0-alpha.2 hardened multi-tenant installs with row-level security, database roles and cloud IAM logins. Four alpha.2 patches followed within a day: sub-cases close with their parent and can be used to deduplicate cases, sandboxes start isolated and cannot read loader variables, agents can use more than 50 tools, and several API errors now return proper status codes.
Redmine 7.0.2 and 6.1.5 shipped at the end of September with three security fixes: private issue subjects exposed through the REST API, private project names and role assignments exposed through group memberships, and a DOM-based XSS on clipboard paste. Rails moves to 8.1.4 and 7.2.4 respectively. The 7.0 line also gets a webhook administration page, SVG icon caching and a fix for UI freezes on very large custom fields.
The security cadence holds, and the two API leaks continue a run of defects where private data escapes through an include or list path. The 7.0 branch keeps absorbing polish around its headline webhook feature rather than adding new capability. This release names only the 7.0 and 6.1 series, where August's also covered 6.0.
Expect another coordinated security release on the same two-to-three-month rhythm, with continued webhook and performance work on 7.0. Whether 6.0 returns to the coordinated set is unclear from these entries.
Tracecat 1.4.0 went stable with MCP variable tools and case task actions, and 1.5.0-alpha.2 hardened multi-tenant installs with row-level security, database roles and cloud IAM logins. Four alpha.2 patches followed within a day: sub-cases close with their parent and can be used to deduplicate cases, sandboxes start isolated and cannot read loader variables, agents can use more than 50 tools, and several API errors now return proper status codes.
The 1.5 line is about making Tracecat safe to run for many tenants and many agents at once. The patch run splits between tenant isolation fixes and case management features for handling duplicate alerts.
Expect more alpha.2.x patches and then a 1.5.0 release candidate that bundles the tenant isolation work with sub-case handling.
Other PM products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Redmine or Tracecat.
ZenTao posts a 22.0 beta with no notes in the feed.
Asana lets Division admins run their own custom roles, on top Enterprise plans only.
NocoBase's v3 beta lets apps ship their own CLI, separate from Agents.
Productboard's v2 documents API now keeps plain web addresses and emoji as ordinary text.
Hive turns reporting into a planning tool: shared inputs, grouped values, per-person drill-downs.
SmartSuite adds tracked changes to SmartDocs, so policy edits need an approver.
See all Redmine alternatives → · See all Tracecat alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Tracecat is currently shipping more aggressively (velocity 6.3 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Tracecat is currently shipping more aggressively (velocity 6.3 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other PM products to evaluate alongside.
Top Redmine alternatives in PM are ranked by recent ship velocity. Browse the "Redmine alternatives" section above for the current picks, or visit /alternatives/redmine for the full list with editorial commentary on each.
Top Tracecat alternatives in PM are ranked by recent ship velocity. Browse the "Tracecat alternatives" section above for the current picks, or visit /alternatives/tracecat for the full list with editorial commentary on each.