Vikunja vs Hive
Side-by-side trajectory, velocity, and editorial themes.
Vikunja crossed the v1.0 finish line and pivoted hard into security hardening.
Vikunja shipped two v1.0 release candidates through late 2025 and early 2026, then jumped to a v2 series whose first widely-tagged point release, v2.2.1, is dominated by security work. The latest release patches multiple SSRF and IDOR vulnerabilities, enforces disabled/locked-account semantics across every auth surface (OIDC, API tokens, CalDAV, LDAP), and adds a shared SSRF-safe HTTP client that webhooks and migrations now route through. User-facing feature work has slowed; the visible energy is in plumbing and audit cleanup.
The arc moves from feature-completion (S3 storage, drag-and-drop project moves, hover previews in late 2025) toward platform credibility — closing security gaps a self-hosted task tool needs to clear before serious team adoption. The rapid version-number jump from v1.0.0-rc4 to v2.2.1 in two months suggests v1.0 shipped and the team tagged a v2 line aimed at addressing accumulated authz debt. Expect the next several releases to keep the security-first posture rather than return to a feature push.
The next release will likely continue closing remaining authz edges (more IDOR audits, additional credential-stripping in API responses) and bundle a translations and dependency sweep. A user-facing feature push probably waits until the security work plateaus.
Hive's quarter is mobile parity, with chat and dashboards getting tidied on the side.
Hive is in a steady incremental polish phase. The dominant thread is pulling more of the desktop experience onto mobile: workflow visibility, time tracking from action cards, Gantt views, and a beefed-up universal search all landed within a week of each other. Chat got a parallel set of refinements (inline video, file gallery, history preservation when members leave), and dashboards picked up median aggregation.
Hive looks focused on closing the desktop-mobile gap rather than opening new product surface area. Each mobile release individually is small, but together they push Hive toward being usable as a primary-not-secondary work surface on phones, which matters most for project managers who actually move around. Expect this cleanup arc to continue for at least another release cycle before strategic capabilities (AI, automation depth) reappear.
Next likely additions on mobile: editing or creating actions/workflows (currently view-only) and richer dashboard interaction. On the desktop side, a feature touching AI or workflow authoring is overdue given the cadence of small fixes.
See more alternatives to Vikunja →
See more alternatives to Hive →