← Back to all sparks
M

Mattermost

COLLAB
Velocity6.3

Open-source secure collaboration platform for technical teams.

v11.7 ships rearchitected AI agents and granular ABAC as Mattermost leans hard into regulated buyers.

defensesovereigntyabacai-agentscompliancecoalition-ops
Current state
Mattermost is now openly positioning as a collaboration platform for defense, intelligence, and critical infrastructure rather than a general-purpose team-chat alternative. The v11.7 release pairs Attribute-Based Access Control for Team Admins with a rearchitected Agents v2.0 layer that supports custom AI prompts and user-created agents, signaling that the AI roadmap will run on top of strict access governance rather than alongside it. Editorial output in May is overwhelmingly about sovereignty, coalition operations, and AI governance — the company is telling regulated buyers what to ask vendors during procurement.
Where it's heading
The product is bifurcating from horizontal team chat into a sovereignty-and-governance-first platform aimed at procurement evaluations in defense and regulated finance. Each major release now ships more granular control surfaces (ABAC, coordinated ESR security cadence) underneath user-facing features (AI agents, custom prompts), which is consistent with a market where features only matter if they can pass a compliance review. Expect future releases to keep coupling AI capability to governance primitives rather than shipping AI features on their own.
Prediction
The next minor release likely extends ABAC scope beyond Team Admins (channel-level or integration-level enforcement) and tightens the audit trail around user-created agents, since both are the natural follow-ons for a customer base that procures on control granularity. A coalition or cross-domain feature announcement is also plausible given how heavily April-May messaging leaned on multi-nation operational use cases.

Recent moves

  1. 20h ago

    Sovereignty, Access Controls, and Compliance: Guide & Checklist for Secure Collaboration Tools

    A procurement-oriented checklist post for defense and critical-infrastructure buyers, extending the broader May push to define how regulated organizations should evaluate collaboration tools. No new product capability — sales enablement framed as buyer guidance.

    View source ↗
  2. 5d ago

    Mattermost Desktop App v5.13.6 ESR security update released

    An ESR-channel desktop client patch addressing medium-severity vulnerabilities. Routine but mandatory for the regulated customer base Mattermost is targeting, and the same-day release alongside the server patches shows a coordinated security cadence rather than ad-hoc fixes.

    View source ↗
  3. 5d ago

    Mattermost security updates 11.6.2, 11.5.5, and 10.11.17 (ESR) released

    Coordinated security release across three supported server lines including the 10.x ESR train, addressing medium-to-high severity issues. Continued investment in long-tail ESR maintenance is the kind of operational signal defense and finance procurement teams explicitly check for.

    View source ↗
  4. 6d ago

    Mattermost v11.7: Granular ABAC, Custom AI Prompts, User-Created Agents & More

    ⚡ SPARK

    The marquee release of the May cycle: ABAC controls extended to Team Admins, a rearchitected Agents v2.0, custom AI prompts, and user-created agents. This is the artifact the surrounding thought-leadership posts have been preparing the market for — governance and AI shipping in the same box rather than as separate roadmap items.

    View source ↗
  5. 7d ago

    AI Moved Into Your Collaboration Stack. Does Your Governance Know That?

    A governance-framing post that argues AI inside collaboration platforms is already in scope for security programs, whether those programs realize it or not. Pure positioning content that primes the v11.7 launch two days later.

    View source ↗
  6. 8d ago

    Your Control Plane Is Incomplete — And Your Collaboration Stack Is the Gap

    An essay reframing collaboration tooling as a sovereignty control plane rather than a productivity utility. Continues the May drumbeat aimed at regulated industries and lands two days before v11.7.

    View source ↗