Blogs
Insights on secure data exchange, digital sovereignty, and open source — from the team that built the platform.
The New ownCloud Marketplace: Git Is the App Store
The new ownCloud Marketplace is live. 13 Web Extensions, 42 apps, 324 releases, 36 publishers and counting. Zero backend. Zero database. Zero server-side processing. The Git repository is the source of truth. The catalogue is static JSON. Publishing an app is a pull request. Git is the app store.
Kiteworks Open Source Program Office (ownCloud)
Kiteworks empowers organizations to manage risk in every send, share, receive, and save of sensitive content, protecting over 200 million end users across thosuands of global enterprises and government agencies. The Kiteworks Open Source Program Office is the steward of ownCloud, the open-source platform for sovereign secure data exchange, file synchronization, and collaboration. Built from the ground up in Go with zero database dependency, ownCloud Infinite Scale scales from a single binary to million-user deployments. Guided by a published governance charter and Apache 2.0 licensing, the OSPO ensures ownCloud remains a transparent, community-driven digital commons.
The New ownCloud Marketplace: Git Is the App Store
The new ownCloud Marketplace is live. 13 Web Extensions, 42 apps, 324 releases, 36 publishers and counting. Zero backend. Zero database. Zero server-side processing. The Git repository is the source of truth. The catalogue is static JSON. Publishing an app is a pull request. Git is the app store.
oCIS MCP Server v1.0.0: Your AI Assistant Just Got a Key to ownCloud
The oCIS MCP Server v1.0.0 is out. An open source bridge between ownCloud Infinite Scale and any MCP-compatible AI assistant: 80 tools across users, spaces, files, shares, federated OCM, and multi-step workflows. Apache 2.0. Self-hosted. The AI works on your authentication, against your infrastructure, with your data staying where it is.
ownCloud Web 12.4.1 is out
ownCloud Web 12.4.1 ships with a priority fix: an embed mode postMessage vulnerability that let a malicious page forge authenticated file writes without user interaction. If you run embed mode, update. Seven bugfixes round out the release, four of them in vault mode.
Desktop Client 7.1 and ownCloud Server: what happened and how to roll back to 6.x
If your ownCloud Server (ownCloud Classic/oc10) sync stopped working after upgrading the Desktop Client to 7.1, the issue isn’t your credentials or your server. The 7.x client only speaks to ownCloud Infinite Scale. The 6.x config you need is still on disk. A tested rollback procedure for Linux, Windows, and macOS is published.
ownCloud web-extensions Repo Is Now Apache 2.0. We’re Going All In.
When we launched the OSPO in May, we said Apache 2.0 was the target licence. Today the first repo crosses the line. web-extensions has been relicensed from AGPL-3.0, with REUSE compliance and CI licence checks built in. A relicensing decision made now, before the dependency graph gets complicated, is worth a hundred conversations about compatibility later.
A Critical Vulnerability in libvips: What ownCloud Users and Operators Need to Know
The Kiteworks OSPO and the ownCloud and Kiteworks security research teams have identified a critical vulnerability in libvips.
If you run ownCloud Infinite Scale (oCIS), or any infrastructure that processes images, please take note.
The latest version of ownCloud Infinite scale has already addressed this issue on the application level.
ownCloud GitHub Organization: Housekeeping and Alumni Program
Community Update: Restructuring our GitHub organization to better serve you.
We’re restructuring the ownCloud GitHub organization.
This post explains what’s changing, why, and what it means for you.
oCIS “Curie” is complete and you should update to 8.0.3 now
If you’re running any oCIS (ownCloud Infinite Scale) version, please update to 8.0.3; The latest patch, released on May 11th 2026, contains security fixes.
Kiteworks Launches the ownCloud Open Source Program Office — Formalizing Governance, Retiring the CLA, and Committing to Sovereign, Open, Federated File Sharing for the Enterprise
The relaunch of the original open-source, self-hosted File Sync and Share platform brings a published governance charter, relicensing to Apache 2.0, a DCO-based contribution model, and an AI-assisted contribution policy—together with new releases of ownCloud Infinite Scale, ownCloud Classic on PHP 8.3, and a new MCP Server.
Tomorrow, we put it all in writing. See you on the other side.
Founded 2010. Forked 2016. Acquired 2023. Forked 2025. Shipped throughout.
Now: governance, a manifesto, and a codebase that’s yours.
The Kiteworks OSPO for ownCloud launches May 5.
Open source EFSS is not a stepping stone to a sales call
You chose open source for a reason. We respect that reason.
Why oCIS isn’t a funnel, a trial, or a hobbled community edition.
How a school cloud with millions of users runs on software you can fork tomorrow
One of Europe’s largest EFSS deployments (1.8 million users) runs on the same oCIS you can fork tomorrow.
No enterprise edition. No paywall. Same code.
Digital sovereignty is not a label you buy from a hyperscaler
Digital sovereignty is not a data center location. It’s control.
Why the hyperscalers’ “sovereign cloud” branding fails the test, and how oCIS doesn’t.
What two forks and a Lessons Learned document can teach you about trust
Most open source projects bury their history. Ours is published.
What two forks can teach you about how trust actually works.
Twelve documents, zero marketing slop: anatomy of an open source manifesto
Editing matters more than writing.
Anatomy of an open source manifesto in twelve documents, with the corporate slop cut and the operational policies added.