New check

Comparison

Directus vs PocketBase

Directus and PocketBase both land on Depends.

Directus

Depends

Confidence: Medium

Buy it if you have a developer and want an open-source backend/CMS layered over your own SQL database.

Read the full report

PocketBase

Depends

Confidence: Medium

Use it if you are a solo dev or small team shipping a self-contained app and you can self-host and self-support.

Read the full report

Directus versus PocketBase
Compare	Directus	PocketBase
Verdict	Depends	Depends
Best for	SQL-backed headless CMS projects	Solo devs and hackathons
Who it's not for	Teams without a developer to run and patch it	Products needing multi-server or horizontal scale
Privacy	Several public CVEs from 2021-2026, including a 2025 auth bypass; Directus publishes a public vulnerability tracker.^⁶	No known public vulnerabilities found in the sources reviewed.¹²
Support quality	No support evidence found	Volunteer-run, no maintenance promises
Public sentiment	Review evidence is thin, but the available G2 feedback praises flexible relational data modeling without proprietary lock-in.^¹	Hobbyists and hackathon teams rave about shipping speed; the main worry is the volunteer-only maintenance model.¹⁴
Biggest gotcha	CVE-2025-55746 auth bypass . self-hosters must patch promptly^⁶	Settings including SMTP and S3 credentials sit in plain JSON; server access control is everything¹²

Pick Directus when

SQL-backed headless CMS projects
API-first app backends
Self-hosters wanting database control
Teams replacing custom admin panels

When Directus is not a fit

Teams without a developer to run and patch it
Simple blogs or marketing sites . a simpler CMS wins
Buyers wanting managed support and predictable SaaS pricing
Non-technical editors who only need a content tool

Pick PocketBase when

Solo devs and hackathons
Small self-contained web and mobile apps
Prototypes and internal tools
Single-server deployments

When PocketBase is not a fit

Products needing multi-server or horizontal scale
Teams needing SLAs, contracts, or paid support
SSR-heavy server-rendered apps
Mission-critical apps wanting a funded vendor

Sources

Directus Reviews 2026 . G2g2.com
review
directus/directus on GitHubgithub.com
official
Directus Recognized as Top 10 Headless CMS . MarTechCubemartechcube.com
news
Directus: Open-Source Headless CMS . FocusReactivefocusreactive.com
review
CVE-2025-27089 . NVDnvd.nist.gov
security
CVE-2025-55746 . SentinelOnesentinelone.com
security
Stored XSS in Directus . Black Duckblackduck.com
security
A Year of Self-Hosting . dev.todev.to
review
Tools we use . ImpactMarket docsdocs.impactmarket.com
official
Directus Competitive Landscape . ForesightIQforesightiq.co
news
PocketBase official sitepocketbase.io
official
PocketBase going to production docspocketbase.io
official
PocketBase documentation mirrorpocketbase-pocketbase.mintlify.app
official
Reddit r/programming threadreddit.com
review
B4X forum discussionb4x.com
review
GIGAZINE coverage including TrailBase comparisongigazine.net
news