shouldiuse.io

Categories

VERDICT

Should I use Discourse?

One platform. Any community. - discourse.gnome.org

Depends. Buy it if you run a real community that needs long-form, threaded discussion and you can spare admin time. Skip it if you want lightweight chat or a simple comment box — Discord or an embedded comments tool does that for less.

Confidence

Medium. Based on ~20 public sources; many snippets were truncated, so no verbatim user quotes could be extracted.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Paid hostingNot disclosed in reviewed sources

Best for

  • Open-source project communities
  • Customer support forums
  • Long-form threaded discussion
  • Teams wanting self-hostable community software

Not for

  • Small teams that just need group chat — Discord or Slack is simpler
  • Anyone wanting a simple comment section on a blog or docs
  • Teams with nobody to own admin, moderation, and upgrades
  • Casual self-hosters unwilling to patch promptly — older installs have known holes

Gotchas - check before you buy

high

Self-hosters must patch promptly — several 2025–2026 CVEs require upgrades.

medium

Buyers have questioned hosted pricing since 2014; self-hosting trades dollars for admin time.

medium

Older self-hosted instances specifically called out as vulnerable by security researchers.

Pros and cons

Pros

  • Open source and self-hostable
  • G2 reviewers describe it as easy to use
  • Runs an active HackerOne bug bounty program
  • Free hosted plan exists alongside paid options
  • Widely adopted — 7,401 companies tracked using it

Cons

  • Hosted pricing drew buyer complaints
  • Critics call it a missed open-goal among forum software
  • Multiple XSS and auth-bypass CVEs in 2025–2026
  • Older self-hosted installs flagged as risky by researchers

Sources & method

Analyzed 9/29/2026 - 12 sources - Active bug bounty and published security policy, but multiple XSS, auth-bypass, and access-control CVEs reported in 2025–2026.

official x3review x3security x3news x3
  • CVE-2026-59830 — Display name XSS, Cross-site scripting via display name
  • CVE-2026-72725 — Stored XSS, Stored cross-site scripting on the platform
  • CVE-2026-27454 — Auth bypass, Authentication bypass vulnerability
  • CVE-2026-29072 — Improper access control, Access control flaw reported July 2026

Key stats

  • Value for money: 3/5

    Rating

  • $0

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 3/5. Hosted pricing complaints are documented by buyers
  • Ease of use: 4/5. G2 reviewers call it easy to use
  • Feature depth: 4/5. Full community suite; alternatives benchmark against it
  • Support quality: 3/5. Active official meta support forum; quality unverified
  • Security posture: 3/5. Bug bounty exists but repeated recent CVEs
  • 68 G2 reviews listed on G2
  • 7,401 Companies using it per TheirStack data
  • Yes Free tier free hosted plan + open-source self-hosting
  • Active Bug bounty HackerOne program as of Feb 2026

Pricing

Free

$0

  • Free hosted plan for qualifying communities
  • Open-source self-hosted edition

Paid hosting

Not disclosed

  • Managed hosting, scaling, and support
  • Check discourse.org/pricing for current tiers

Security

Active bug bounty and published security policy, but multiple XSS, auth-bypass, and access-control CVEs reported in 2025–2026.

  • CVE-2026-59830 — Display name XSSCross-site scripting via display name⁹
  • CVE-2026-72725 — Stored XSSStored cross-site scripting on the platform
  • CVE-2026-27454 — Auth bypassAuthentication bypass vulnerability
  • CVE-2026-29072 — Improper access controlAccess control flaw reported July 2026

What users say

G2 reviewers describe Discourse as easy to use, while some Hacker News commenters criticize its forum software direction.

Alternatives

Compare Discourse with each alternative.

  • Discord

    Free realtime chat; better for casual, fast-moving communities

  • Flarum

    Lighter open-source forum with fewer moving parts

  • NodeBB

    Alternative open-source forum; mixed stability reports

  • Talkyard

    Forum plus chat hybrid positioned against Discourse

Companies that use it

  • GNOME
Full analysis

Based on ~20 public sources; many snippets were truncated, so no verbatim user quotes could be extracted.

Serious forum for serious communities — great for GNOME-scale open source, overkill for small teams wanting quick chat.

Methodology

Based on ~20 public sources; many snippets were truncated, so no verbatim user quotes could be extracted.

Sources

  1. Discourse Reviews, G2g2.com
    review
  2. Discourse reviews on Trustpilottrustpilot.com
    review
  3. Should You Build Your Community On Discourse?feverbee.com
    review
  4. Discourse was a missed open-goal (Hacker News)news.ycombinator.com
    news
  5. Discourse pricing (official)discourse.org
    official
  6. Discourse Free Plan (official)discourse.org
    official
  7. Why is hosting so expensive? (meta)meta.discourse.org
    official
  8. Discourse HackerOne bounty policyhackerone.com
    security
  9. CVE-2026-59830 Discourse XSSsentinelone.com
    security
  10. Discourse CVE tracker (OpenCVE)app.opencve.io
    security
  11. Companies that use Discourse (TheirStack)theirstack.com
    news
  12. Flarum as an open-source alternative (It's FOSS)itsfoss.com
    news

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.