Rocket.Chat

rocket.chat
Awesome Privacy ➔ Communication ➔ Team Collaboration ➔ Rocket.Chat
Rocket.Chat

Easy-to-deploy, self-hosted team collaboration platform with stable, feature-rich cross-platform client apps. The UI is fast, good looking and intuitive, so very little technical experience is needed for users of the platform. Rocket.Chat's feature set is similar to Slack's, making it a good replacement for any team looking to have greater control over their data.

Avoid

  • slack
  • microsoft teams
  • google chat
  • discord
  • asana
  • trello
  • basecamp

Also Consider

Open Source

Rocket.Chat Source Code

Author

RocketChat

Description

The Secure CommsOS™ for mission-critical operations

#chat#collaboration#foss#free#hacktoberfest#javascript#meteor#mit#real-time#slack#webrtc

Homepage

https://rocket.chat/

License

NOASSERTION

Created

19 May 15

Last Updated

12 Jul 26

Latest version

8.6.1

Primary Language

TypeScript

Size

2,063,198 KB

Stars

45,776

Forks

13,727

Watchers

45,776

Language Usage

Language Usage

Star History

Star History

Top Contributors

Recent Commits

Rocket.Chat Security

7.6/10

Repo Security Summary

Updated 29 Jun 26

  • Maintained 10/10
  • Code-Review 7/10
  • CII-Best-Practices 0/10
  • Packaging N/A
  • Security-Policy 10/10
  • Dangerous-Workflow 10/10
  • Token-Permissions 0/10
  • License 9/10
  • Signed-Releases N/A
  • Branch-Protection 8/10
  • Binary-Artifacts 10/10
  • Pinned-Dependencies 6/10
  • Fuzzing 10/10
  • SAST 7/10

Security Advisories (18)

  • medium Patched CVSS 4.3

    GHSA-4mvx-9h2h-hmg3 Broken Access Control in channels.convertToTeam Allows Unauthorized Conversion of Public Channels into Teams

  • critical Patched

    CVE-2026-55666 Email Parameter Fallback Leads To Account Takeover Within Apple OAuth

  • high Patched CVSS 7.4

    CVE-2026-55759 Apple Sign-In skips JWT claims validation, allowing expired and cross-audience token replay

  • high Patched

    CVE-2026-45677 Lack of SAML Signature Check During Logout Could Lead To DoS

  • critical Patched CVSS 9.1

    CVE-2026-45689 Pre-Auth NoSQL Injection in OAuth2 Token Endpoint leading to Arbitrary User ATO

  • critical Patched CVSS 9.1

    CVE-2026-45688 Pre-Auth NoSQL Injection in CAS Login Handler leading to Arbitrary CAS/SAML User Session Hijack

  • high Patched CVSS 8.5

    CVE-2026-45687 Authenticated Arbitrary Data Export Theft via Mass Assignment in sendFileMessage

  • high Patched

    CVE-2026-46423 SAML signature validation skipped when IdP certificate field is empty

  • medium Patched CVSS 6.7

    CVE-2026-49278 Livechat Visitor Profile Disclosure Leaks Bearer Token and Enables Visitor Impersonation

  • high Patched CVSS 8.1

    CVE-2026-55762 Any Authenticated User Can Permanently Deregister Workspace from Rocket.Chat Cloud via Unprotected `/api/v1/fingerprint` Endpoint

  • medium Patched

    CVE-2026-49277 OAuth access and refresh tokens remain valid after account deactivation

  • low Patched

    CVE-2026-45757 users.deactivateIdle deactivates accounts without revoking existing login tokens

  • low Patched

    CVE-2026-47733 Missing URL protocol sanitization in ImageElement allows javascript: URLs in markdown images

  • high Patched

    CVE-2026-30831 2FA bypass and login of deactivated users via EE ddp-streamer

  • high Patched

    CVE-2026-30833 NoSQL injection in the EE ddp-streamer-service

  • critical Patched

    CVE-2026-28514 Users can login with any password via the EE ddp-streamer-service

  • high Patched CVSS 7.7

    CVE-2026-23477 Unauthorized Access to OAuth App Details (Versions ≤ 6.12.0)

  • medium Patched CVSS 5.4

    GHSA-27jx-236m-3f5j Insecure implementation of websocket notifications

Rocket.Chat Website

Website

Rocket.Chat | Secure CommsOS™ for Mission-Critical Operations

Centralize real-time messaging, voice, video, AI, and apps for secure, reliable and unified communication among internal and external stakeholders.

Redirects

Redirects to https://www.rocket.chat/

Security Checks

All 65 security checks passed

Server Details

  • IP Address 198.202.211.1
  • Location San Francisco, California, United States of America, NA
  • ISP Webflow Inc
  • ASN AS209242

Associated Countries

  • US US
  • FR FR
  • CA CA

Safety Score

Website marked as safe

100%

Blacklist Check

www.rocket.chat was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report at web-check.xyz

Rocket.Chat Android App

APK Info

  • App Rocket.Chat
  • Creation Date 24 Apr 18
  • Last Updated 19 Jul 24
  • Current Version 2.0.4
  • Creator Rocket.Chat
  • Downloads 10,000+ downloads
  • Privacy Report View on Exodus →

De-Googled Compatibility

Native 2.00 / 4 1 ratings
microG 4.00 / 4 2 ratings

Tested on Android 13–14 · Updated 19 Sept 24 · View on Plexus →

Trackers

  • Google Firebase Analytics
  • Google CrashLytics

Permissions

  • Access Network State
  • Internet
  • Vibrate
  • Wake Lock
  • C2d Message
  • Receive

Rocket.Chat iOS App

App Info

Rocket.Chat

Rocket.Chat Secure CommsOS™ is a communication platform that unifies messaging, voice, video, AI, and mission-critical applications—ensuring uncompromising security, compliance, and operational efficiency for governments, defense, and critical infrastructure organizations operating in high-stakes environments. The result is an increase in productivity and customer satisfaction rates. Everyday, tens of millions of users in over 150 countries and in organizations such as Deutsche Bahn, The US Navy and Credit Suisse trust Rocket.Chat to keep their communications completely private and secure. By opting for Rocket.Chat, users also benefit from free audio and video conferencing, guest access, screen and file sharing, LiveChat, LDAP Group Sync, two-factor authentication (2FA), E2E encryption, SSO, dozens of OAuth providers and unlimited users, guests, channels, messages, searches and files. Users can set up Rocket.Chat on cloud or by hosting their own servers on-premises. With thousands of contributors and stars on Github, Rocket.Chat has the world’s largest community of chat developers in the open source communication sector. When you choose Rocket.Chat, you join an ever-growing passionate community that constantly improves our platform with us :) KEY FEATURES: * Open Source Software * Hassle-free MIT license * BYOS (bring your own server) * Multiple Rooms * Direct Messages * Private & Public Channels/Groups * Desktop and Mobile Notifications * 100+ available integrations * Edit and Delete Sent Messages * Mentions * Avatars * Markdown * Emojis * Choose between 3 themes: Light, Dark, Black * Sort conversations alphabetically or group by activity, unread or favourites * Transcripts / History * File Upload / Sharing * I18n - [Internationalization with Lingohub] * Hubot Friendly - [Hubot Integration Project] * Media Embeds * Link Previews * LDAP Authentication * REST-full APIs * Remote Locations Video Monitoring * Native Cross-Platform Desktop Application

Rating

Rated 4.4 out of 5 stars by 3,678 users

Version Info

  • Current Version 4.73.0
  • Last Updated 01 Jun 26
  • First Released 08 Mar 17
  • Minimum iOS Version 15.1
  • Device Models Supported 128

App Details

Screenshots

  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot

Rocket.Chat Reviews

More Team Collaboration

  •
    Element

    Element

     element.io

    Privacy-focused messenger using the Matrix protocol. The Element client allows for group chat rooms, media sharing voice and video group calls.

    Open Source element-hq/element-web
    View Element Report
  • Internet Relay Chat

    Internet Relay Chat

     en.wikipedia.org/wiki/IRC

    An IRC-based solution is another option, being decentralized there is no point of failure, and it's easy to self-host. However it's important to keep security in mind while configuring your IRC instance and ensure that channels are properly encrypted - IRC tends to be better for open communications. There's a variety of clients to choose from - popular options include: The Longe (Web-based), HexChat (Linux), Pidgin (Linux), WeeChat (Linux, terminal-based), IceChat (Windows), XChat Aqua (MacOS), Palaver (iOS) and Revolution (Android).

    Open Source
    View Internet Relay Chat Report
  • Mattermost

    Mattermost

     mattermost.org

    Mattermost has an open source edition, which can be self-hosted. It makes a good Slack alternative, with native desktop, mobile and web apps and a wide variety of integrations.

    Open Source mattermost/mattermost
    View Mattermost Report
  • RetroShare

    RetroShare

     retroshare.cc

    Secure group communications, with the option to be used over Tor or I2P. Fast intuitive group and 1-to-1 chats with text and rich media using decentralized chat rooms, with a mail feature for delivering messages to offline contacts. A channels feature makes it possible for members of different teams to stay up-to-date with each other, and to share files. Also includes built-in forums, link aggregations, file sharing and voice and video calling. RetroShare is a bit more complex to use than some alternatives, and the UI is quite retro, so may not be appropriate for a non-technical team.

    Open Source RetroShare/RetroShare
    View RetroShare Report
  • Zulip

    Zulip

     zulip.com

    Open source team chat organized around topic-based threading, which keeps busy conversations easier to follow than channel-only tools. Can be self-hosted, or used as a paid cloud service. The threading model takes some getting used to.

    Open Source zulip/zulip
    View Zulip Report
View More...

About the Data: Rocket.Chat

Change History

  • Amended (androidApp, iosApp)

API

You can access Rocket.Chat's data programmatically via our API. Simply make a GET request to: 

https://api.awesome-privacy.xyz/v1/services/rocket-chat

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Rocket.Chat

Help your friends compare Team Collaboration, and pick privacy-respecting software and services.
Share Rocket.Chat and Awesome Privacy with your network!

View Team Collaboration (6)
Next →

RetroShare