BookStack
Depends
Confidence: Medium
A strong buy if you're a small team or individual comfortable running and patching your own server . it's free, mature, and well-liked.
Comparison
BookStack vs Wiki.js
BookStack and Wiki.js both land on Depends.
Wiki.js
Depends
Confidence: Medium
Great fit if a technical person will own hosting, upgrades, and patching of a free, powerful wiki.
| Compare | BookStack | Wiki.js |
|---|---|---|
| Verdict | Depends | Depends |
| Best for | Self-hosters and homelab users | Technical self-hosters |
| Who it's not for | Teams with nobody to run and patch a server | Non-technical teams wanting one-click setup |
| Privacy | Active project with frequent security releases . but multiple public CVEs, including auth bypasses and RCE, mean prompt patching is essential.⁸ | Multiple public CVEs including recent authentication bypass (through 2.5.314) and privilege escalation . patch discipline is mandatory. |
| Support quality | Community-driven; no vendor support evidence found | Community support; paid help via hosts |
| Public sentiment | Users consistently praise BookStack's simplicity and structure for small teams, while flagging limited customization and its small-scale fit.¹ | Self-hosters praise its power and flexibility but repeatedly flag it as heavy to run and maintain. |
| Biggest gotcha | Repeated auth-bypass and RCE CVEs . you must patch quickly or stay exposed.⁸ | Running it well needs ongoing ops: upgrades, backups, CVE patching. Recent bypass CVEs hit older versions. |
Pick BookStack when
- Self-hosters and homelab users
- Small teams documenting IT and runbooks
- Confluence refugees wanting free
- Consultants doing client documentation
When BookStack is not a fit
- Teams with nobody to run and patch a server
- Enterprises needing vendor SLAs or enterprise support
- Anyone wanting polished theming or deep visual customization
- Non-technical teams who just want to open a browser and write
Pick Wiki.js when
- Technical self-hosters
- Dev-heavy teams
- Multi-language organizations (56 languages)
- Budget-conscious docs teams
When Wiki.js is not a fit
- Non-technical teams wanting one-click setup
- Startups with nobody to run a server
- Anyone needing vendor SLA support
- Set-and-forget admins . maintenance never ends
Sources
review
- BookStack Software Reviews, Demo & Pricingsoftwareadvice.comreview
- BookStack Reviews 2026 . SelectHubselecthub.comreview
- BookStack: Simple and Free Wiki Software . Hacker Newsnews.ycombinator.comreview
review
official
- BookStack Security Release v26.03.1bookstackapp.comsecurity
- BookStack before 26.05.4 RCE . VulnCheckvulncheck.comsecurity
- CVE-2026-67204: BookStack Auth Bypass . SentinelOnesentinelone.comsecurity
- BookStack v23.10.2 LFR via Blind SSRF . Fluid Attacksfluidattacks.comsecurity
- BookStack company profile . Tracxntracxn.comnews
- Websites using BookStack . BuiltWithtrends.builtwith.comnews
- Wiki.js official sitejs.wikiofficial
- requarks/wiki on GitHubgithub.comofficial
- Wiki.js permissions docsdocs.requarks.ioofficial
- G2 reviews . Wiki.jsg2.comreview