Founded: 2017 | Current Version: 5.9.0 (February 2026) | License: AGPL-3.0 | Headquarters: Portugal
This page documents the complete history and evolution of Passbolt, from its founding as an open-source password manager to becoming an enterprise-grade secret management platform with SOC 2 Type II compliance.
2025-2026 marked Passbolt’s most significant transformation period with 10+ major releases (versions 5.0-5.9), achieving SOC 2 Type II compliance, completing three security audits, and securing $8M Series A funding. The platform evolved from a team password manager to an enterprise-grade secret management solution.
| Metric | Value |
|---|---|
| Daily Active Users | 700,000+ |
| Organizations | 50,000+ |
| New Releases | 9 (v5.0 - v5.8) |
| Security Audits | 3 (Quarkslab, Cure53, Johanson Group) |
| Uptime | 99.97% |
| New Contributors | 443 |
| Funding | $8M Series A |
Release Date: February 2026
Key Features:
Release Date: December 10, 2025
Key Features:
Technical Improvements:
💡 Impact: Organizations can now implement fine-grained access control with custom roles like “Manager” and “Auditor” without granting full admin privileges.
Release Date: November 2025
Key Features:
Technical Improvements:
🔍 Use Case: Compliance officers can now track who changed what credential and when, meeting SOC 2 and GDPR audit requirements.
Release Date: October 8, 2025
Key Features:
Technical Improvements:
🔐 Security Impact: Key rotation enables forward secrecy – former employees cannot decrypt metadata after rotation.
Release Date: September 24, 2025
Key Features:
Technical Improvements:
🏢 Enterprise Impact: Large organizations can now deploy Passbolt in high-availability configurations with automatic user provisioning.
Release Date: August 2025
Key Features:
Technical Improvements:
Release Date: July 2025
Key Features:
Technical Improvements:
🔑 DevOps Impact: Custom fields enable storing API endpoints, environment names, and other metadata alongside credentials.
Release Date: June 2025
Key Features:
Technical Improvements:
🎨 UX Impact: Teams can now visually organize credentials with custom icons and colors, improving usability.
Release Date: May 2025
Key Features:
Technical Improvements:
Release Date: April 15, 2025
Key Features:
Technical Improvements:
🎯 Milestone: Version 5.0 represented the biggest UI redesign in Passbolt history, making secret management more accessible to non-technical users.
Versions 4.11 & 4.12
Key Improvements:
| Date | Event |
|---|---|
| January 2025 | $8M Series A funding led by Airbridge |
| February 2025 | Joined PHP Foundation as company member |
| March 2025 | FOSDEM 2025 participation |
| April 2025 | Version 5.0 released – major UI redesign |
| June 2025 | Quarkslab penetration test completed |
| July 2025 | Cure53 cryptographic review completed |
| September 2025 | SOC 2 Type II audit by Johanson Group |
| October 2025 | 50,000+ organizations milestone |
| December 2025 | 700K daily active users |
| Year | Milestone |
|---|---|
| 2017 | Passbolt founded, initial open-source release |
| 2018 | Browser extensions launched (Chrome, Firefox) |
| 2019 | Docker deployment support added |
| 2020 | Mobile apps released (iOS, Android) |
| 2021 | Professional edition launched with SSO |
| 2022 | Kubernetes/Helm support added |
| 2023 | Cloud (EU-hosted) service launched |
| 2024 | API-centric architecture introduced |
Date: June 2025
Scope: Full application security assessment
Result: No critical vulnerabilities found
Key Findings:
Date: July 2025
Scope: OpenPGP implementation and key management
Result: Cryptographic controls validated
Key Findings:
Date: September 2025
Scope: Security, availability, and confidentiality controls
Result: SOC 2 Type II compliance achieved
Controls Validated:
| Metric | 2024 | 2025 | Growth |
|---|---|---|---|
| Contributors | 1,200 | 1,643 | +37% |
| New Contributors (2025) | – | 443 | – |
| GitHub Stars | 8,500 | 12,000+ | +41% |
| Docker Pulls | 5M | 10M+ | +100% |
| Round | Date | Amount | Lead Investor |
|---|---|---|---|
| Seed | 2019 | Undisclosed | Angels |
| Series A | January 2025 | $8M | Airbridge |
| Component | 2017-2020 | 2021-2023 | 2024-2025 |
|---|---|---|---|
| PHP Version | 7.2 | 8.0 | 8.2 |
| Database | MySQL 5.7 | MariaDB 10.5 | MariaDB 10.11 + Galera |
| Frontend | jQuery | Vue.js | Modern ES6+ |
| Deployment | LAMP | Docker | Kubernetes + Helm |
| Encryption | RSA 2048 | RSA 3072 | RSA 4096 + EdDSA |
2017-2020: Monolithic LAMP Stack
┌─────────────────────────────┐
│ Apache + PHP + MySQL │
│ All-in-one deployment │
└─────────────────────────────┘
2021-2023: Containerized
┌─────────────────────────────┐
│ Docker Compose │
│ App + DB separated │
└─────────────────────────────┘
2024-2025: Cloud-Native
┌─────────────────────────────┐
│ Kubernetes │
│ Microservices-ready │
│ HA with Galera Cluster │
└─────────────────────────────┘
| Quarter | Planned Features |
|---|---|
| Q1 2026 | Enhanced mobile apps, biometric authentication |
| Q2 2026 | AI-powered security insights, anomaly detection |
| Q3 2026 | Advanced secrets rotation, JIT access improvements |
| Q4 2026 | Version 6.0 – Next-generation UI, enhanced API |
Any questions?
Feel free to contact us. Find all contact information on our contact page.