HumHub
A self-hosted enterprise social network for intranets and communities, built around user profiles, Spaces for groups and a large set of add-on modules.
HumHub at a glance
What is HumHub?
HumHub is a PHP application that organizations use as an internal social network, intranet, knowledge base or communication hub. Its structure has four parts: users with their own profiles who follow each other; Spaces, which act as rooms for projects, departments or events; content such as posts, wiki pages, media, events and tasks with multi-level comments; and modules. About 80 modules extend the core, among them LDAP, a REST API, calendar, wiki, OnlyOffice, JWT single sign-on, polls and direct messages. Administrators control profile fields, permissions and email summaries, and translation files cover 43 interface languages.
Good fit if
- You want a company or association intranet where staff post updates, share files and work in group Spaces.
- You need directory integration through LDAP or single sign-on and want to pick features module by module.
Before you adopt it
HumHub follows a dual licensing model: the code is available under AGPL-3.0-only or under a proprietary license. No paid parts were found in this repository. Anyone sending patches has to agree to HumHub's CLA first. Six authors committed in the last 90 days, and none of them dominates. The repository has existed since 2014. There is no official Docker image or compose file here, so plan a conventional PHP installation.
Drafted with AI from the project's README and repository data, then checked against that data on 7 November 2026. Report a correction
How to run HumHub yourself
One-click install
Not listed in Umbrel, TrueNAS, Unraid, CasaOS, Runtipi, Proxmox VE Helper-Scripts and Coolify. Checked against each panel’s app catalog on 12 November 2026.
Ways to install
- Docker files
- None in the repository
- Docker image
- humhub/humhub: 37.3k pulls · x86-64 · 418 MB download
- Compose file
- None in the repository
- Setup effort
- Not rated: no compose file to judge from
- Kubernetes
- No Helm chart in the repository
- Desktop and mobile
- No app builds in GitHub releases
- Interface languages
- 43 languages, including German, French, Spanish, Portuguese, Dutch, Polish, Russian, Ukrainian, Turkish and Japanese
Show all 43
Albanian, Arabic, Aragonese, Basque, Breton, Bulgarian, Catalan, Chinese, Croatian, Czech, Danish, Dutch, Estonian, Finnish, French, German, Greek, Haitian Creole, Hebrew, Hungarian, Japanese, Korean, Latvian, Lithuanian, Norwegian Bokmål, Norwegian Nynorsk, Persian, Polish, Portuguese, Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swahili, Swedish, Thai, Turkish, Ukrainian, Uzbek, Vietnamese, Welsh
Install instructions: humhub.com or the README on GitHub. Docker images and packages are checked weekly.
HumHub health: is it still maintained?
81 of 100, actively developed
Read from GitHub on 12 November 2026. How the score works
HumHub security
Security advisories are the vulnerabilities the maintainers disclosed on GitHub, with the versions that fix them; many advisories can mean careful disclosure as much as weak code. OpenSSF Scorecard checks how a project is developed and released: reviews, protected branches, pinned dependencies, signed releases. It does not audit the code itself.
Latest advisories
- Path traversal in the JavaScript translations endpoint
- Stored XSS via menu entry labels in the top menu, footer menus and People page buttons
- Stored cross-site scripting via the user display name in the friendship confirmation dialog
What each Scorecard check found
- Binary files10 / 10No compiled binaries checked into the repository
- Maintained10 / 10Steady commits and issue activity in the last 90 days
- Security policy10 / 10Explains how to report a vulnerability
- License file9 / 10A license file is present, but not where tools look for it
- Code review4 / 10Some changes are merged without review
- Best-practices badge0 / 10No OpenSSF Best Practices badge
- Fuzzing0 / 10No fuzz testing found
- Static analysis0 / 10No static analysis found
Advisories read from GitHub on 12 November 2026. From the OpenSSF Scorecard of 9 November 2026; checks that do not apply to HumHub are left out.
HumHub license: is it open source?
HumHub uses AGPL-3.0, an open-source license approved by the OSI. Contributors sign a contributor license agreement, which lets the owner relicense their work later.
- February 2014First published on GitHub.
- TodayAGPL-3.0. A contributor license agreement is required.
HumHub for developers
Written in
- PHP 94%
- JavaScript 4%
- SCSS 2%
- CSS <1%
- HTML <1%
- Other <1%
Getting involved
Language shares are GitHub’s count of the code in the repository.
Alternatives to HumHub
- MastodonYour self-hosted, globally interconnected microblogging community 88 health · AGPL-3.0 · 50.6k stars
- PixelFedPhoto Sharing. For Everyone. 80 health · AGPL-3.0 · 7.1k stars
- FlarumSimple forum software for building great communities. 41 health · MIT · 16.4k stars
- MisskeyA completely free and open interplanetary-microblogging platform 81 health · AGPL-3.0 · 11.4k stars
- remark42comment engine 81 health · MIT · 5.6k stars
Questions about HumHub
Is HumHub open source?
Yes. HumHub is published under AGPL-3.0, an OSI-approved open-source license.
Is HumHub still maintained?
Its health score is 81 of 100 (actively developed). It had 252 commits in the last 90 days, the latest on 9 November 2026, and its latest release came out on 9 November 2026.
How do I run HumHub?
You can run it with the Docker image humhub/humhub and in one click from YunoHost. The README on GitHub has the exact steps.
What is HumHub written in?
HumHub is written mainly in PHP (94% of the code), by GitHub’s count of the repository.
What languages is HumHub available in?
The repository has interface translations for 43 languages, including German, French, Spanish, Portuguese, Dutch, Polish, Russian and Ukrainian.
What are the alternatives to HumHub?
Close alternatives in the Social networks & forums category include Mastodon, PixelFed, Flarum.