Rocket

Market position

Positioned as an open-source, sovereignty-oriented alternative to proprietary team chat tools such as Slack and Skype for Business Server, and covered in press comparisons of open-source Slack alternatives. Rocket.Chat was included in The Forrester Wave: Secure Communications Solutions (Q3 2024) and was selected among "Permanent Chat Solutions" in Sweden's Digital Collaboration Platform for the Public Sector report, which also noted it as one of the most user-friendly viable platforms.

Open-source code base with self-hosted, air-gapped and secure cloud deployment options, giving customers control over data location and avoiding vendor lock-in; Matrix-based federation for cross-organization collaboration; extensibility through the Apps-Engine and marketplace; accreditation claims for highly classified networks; WCAG 2.1 Level AA conformance for regulated procurement.

Technology

TypeScript codebase running on Node.js and MongoDB (Wikipedia also lists the Meteor engine), deployable via Docker, Podman, Kubernetes, Launchpad, or air-gapped installations. Extensibility is provided by the open-source Apps-Engine framework, a public app marketplace, REST APIs and SDKs. Fuselage is the company's React design system. Security architecture includes end-to-end encryption, a zero-trust model, identity and access controls, and audit logging.

Go-to-market

Open-source distribution through GitHub and app stores builds a developer and self-hosting community that feeds paid subscriptions, supported by direct enterprise and public-sector sales, cloud marketplaces (Rocket.Chat on AWS), and partnerships such as the Pexip alliance for high-security deployments.

Governments, defense and intelligence agencies, critical infrastructure operators, regulated enterprises and public-sector bodies with strict data protection, sovereignty and compliance requirements; also developers and self-hosting organizations. Named users referenced include Deutsche Bahn, the US Navy, Credit Suisse, the Swedish Electrical Safety Board and eu-LISA.

Geography

Incorporated in Delaware, United States, with a registered address in Wilmington, Delaware, and engineering operations maintained in Brazil (the project originated in Porto Alegre). Users are reported in over 150 countries, with referenced customers in the United States, Sweden and the European Union.

History

Following the 2015 open-source release, the company was incorporated in Delaware while keeping engineering operations in Brazil, and raised external investment to support growth. In 2022 it adopted the Matrix protocol for federation and formed a partnership with Pexip for high-security deployments. In 2024 it appeared in The Forrester Wave: Secure Communications Solutions (Q3 2024), and its end-to-end encryption was independently analyzed by researchers at The University of Osaka (presented at ACSAC) and in an ETH Zurich master's thesis. Product releases continued with stable release 8.4.0 in May 2026 and a v8.5 update accompanied by WCAG 2.1 Level AA conformance.

Risks & controversies

In 2024, two independent research efforts — an academic study from a team based at The University of Osaka presented at ACSAC and a master's thesis at ETH Zurich — reported multiple vulnerabilities affecting the confidentiality and integrity guarantees of Rocket.Chat's end-to-end encryption; subsequent releases addressed several of the reported issues. The Wikipedia article carries a notability warning questioning independent secondary coverage. User reviews of the Android app cite slow loading, missing features such as pinned chats, file upload bugs, and short support windows for older self-hosted server versions.