Skip to main content

ITSM and Help Desk

IT service management (ITSM) and help desk platforms provide centralised systems for receiving, tracking, resolving, and reporting on service requests, incidents, problems, and changes. These platforms form the operational core of IT service delivery, enabling structured workflows, service level management, knowledge capture, and performance measurement. For mission-driven organisations, platform selection affects staff productivity, service quality, compliance capability, and total cost of ownership.

This page covers dedicated ITSM and ticketing platforms with at least incident and request management capabilities. Platforms focused exclusively on customer relationship management appear in CRM Platforms. Asset and configuration management databases are covered in ITSM and Help Desk where integrated, and standalone CMDB solutions are addressed separately. Monitoring and alerting platforms that generate tickets but do not manage the full ticket lifecycle appear in Security and Monitoring.

Assessment methodology

Tool assessments derive from official vendor documentation, published API references, release notes, and technical specifications as of January 2026. Feature availability varies by product tier, deployment model, and region. Verify current capabilities directly with vendors during procurement. Community-reported information is excluded; only documented features are assessed.

Requirements taxonomy

This taxonomy defines evaluation criteria for ITSM and help desk platforms. Requirements are organised by functional area and weighted by typical priority for mission-driven organisations. Adjust weights based on your specific operational context.

Functional requirements

Core capabilities that define what the platform must do.

Ticket and request management

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
F1.1Multi-channel intakeAccept tickets via email, web portal, API, chat, and phone integrationFull: 5+ channels native. Partial: 3-4 channels. Limited: email and web onlyReview channel documentation; test each intake methodEssential
F1.2Ticket classificationCategorise tickets by type, priority, impact, urgency, and custom taxonomiesFull: unlimited custom fields, conditional logic, auto-classification. Partial: fixed categories. Limited: basic priority onlyConfigure test taxonomy; verify field dependenciesEssential
F1.3Assignment and routingRoute tickets to queues, groups, or individuals based on rulesFull: skill-based routing, round-robin, load balancing, escalation rules. Partial: manual or basic rules. Limited: manual onlyConfigure routing rules; measure distribution accuracyEssential
F1.4Ticket lifecycle managementTrack tickets through defined states with configurable workflowsFull: custom workflows per ticket type, state machine design. Partial: fixed workflow with limited customisation. Limited: open/closed onlyDesign multi-stage workflow; verify state transitionsEssential
F1.5Parent-child relationshipsLink related tickets hierarchically for problem-incident associationFull: unlimited hierarchy, bulk operations, cascade status. Partial: single parent-child. Limited: flat linking onlyCreate ticket hierarchy; test bulk operationsImportant
F1.6Merge and splitCombine duplicate tickets or split complex requestsFull: merge with history preservation, split with relationship. Partial: merge only. None: not supportedTest merge scenarios; verify audit trailImportant
F1.7Collision detectionPrevent simultaneous editing and alert agents to concurrent accessFull: real-time locking, activity indicators. Partial: save-time conflict detection. None: last-save-winsSimulate concurrent editing; verify conflict handlingImportant
F1.8Bulk operationsApply actions to multiple tickets simultaneouslyFull: bulk edit all fields, bulk assign, bulk close with notes. Partial: limited bulk actions. Limited: single-ticket operationsSelect 50 tickets; apply bulk changesImportant

Service level management

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
F2.1SLA definitionConfigure response and resolution targets by priority, type, or customerFull: multiple SLA policies, calendar-aware, multi-metric. Partial: single SLA per priority. Limited: global targets onlyConfigure tiered SLAs; verify calculation accuracyEssential
F2.2Business hours calendarsDefine working hours, holidays, and time zones for SLA calculationFull: multiple calendars, per-team assignment, global holidays. Partial: single calendar. Limited: 24/7 onlyConfigure regional calendars; verify SLA pause/resumeEssential
F2.3SLA breach alertingNotify before and upon SLA violationFull: configurable warning thresholds, escalation chains. Partial: breach notification only. Limited: reporting onlySet warning at 80%; verify notification timingEssential
F2.4SLA reportingTrack SLA performance metrics over timeFull: compliance trends, breach analysis, team comparison. Partial: current status only. Limited: no SLA reportingGenerate monthly SLA report; verify metric accuracyEssential
F2.5Operational level agreementsInternal SLAs between teams for multi-tier supportFull: OLA tracking separate from customer SLA. Partial: combined tracking. None: customer SLA onlyConfigure OLA between Tier 1 and Tier 2; track separatelyImportant

Self-service and portal

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
F3.1End-user portalWeb interface for users to submit and track requestsFull: branded portal, request forms, status tracking, history. Partial: basic submission. Limited: email onlyConfigure portal; test user journey from submission to closureEssential
F3.2Service cataloguePublished menu of available services with request formsFull: categorised catalogue, approval workflows, fulfilment tracking. Partial: basic service list. Limited: generic request formBuild 10-item catalogue; test request-to-fulfilment flowImportant
F3.3Knowledge base integrationSurface relevant articles during ticket creationFull: AI-suggested articles, deflection metrics, embedded search. Partial: manual search. Limited: separate knowledge baseSubmit request; verify article suggestions appearImportant
F3.4Mobile self-serviceNative or responsive mobile access for end usersFull: native apps or responsive design, full functionality. Partial: limited mobile features. None: desktop onlyTest ticket submission and tracking on mobile devicesImportant
F3.5Multi-language portalPortal interface in multiple languagesFull: UI and content localisation, RTL support. Partial: UI translation only. Limited: single languageConfigure portal in 3 languages; verify content displayContext-dependent

ITIL process support

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
F4.1Incident managementDedicated workflow for service restorationFull: impact/urgency matrix, major incident process, post-incident review. Partial: incident type without workflow. Limited: no distinction from requestsConfigure incident workflow; test major incident escalationEssential
F4.2Problem managementRoot cause analysis and known error trackingFull: problem records, known error database, linked incidents. Partial: basic problem logging. None: not supportedCreate problem from recurring incidents; document known errorImportant
F4.3Change managementControlled process for implementing changesFull: RFC workflow, CAB approval, change calendar, risk assessment. Partial: basic change tracking. None: not supportedSubmit change request; test approval workflow and schedulingImportant
F4.4Service request fulfilmentDistinct workflow for standard pre-approved requestsFull: catalogue-driven, automated fulfilment, approval routing. Partial: manual fulfilment. Limited: mixed with incidentsConfigure automated software provisioning requestImportant
F4.5Release managementCoordinate deployments with change and configurationFull: release records, deployment planning, CI associations. Partial: release tracking only. None: not supportedPlan release with multiple changes; track deployment statusDesirable
F4.6Configuration managementMaintain configuration item data and relationshipsFull: integrated CMDB, impact analysis, dependency mapping. Partial: basic asset records. None: not supportedCreate CI hierarchy; link to incident; verify impact displayImportant

Automation and workflow

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
F5.1Trigger-based automationExecute actions when conditions are metFull: complex conditions, multiple actions, event-driven. Partial: simple if-then rules. Limited: no automationConfigure auto-assignment rule; verify executionEssential
F5.2Scheduled automationTime-based actions on ticketsFull: scheduled jobs, maintenance windows, recurring tasks. Partial: basic scheduling. Limited: manual onlyCreate weekly stale-ticket cleanup; verify executionImportant
F5.3Approval workflowsMulti-stage approval routingFull: parallel/sequential approvers, delegation, timeout escalation. Partial: single-level approval. Limited: no approvalConfigure 3-level approval; test delegation and timeoutImportant
F5.4Email notificationsAutomated communication to stakeholdersFull: templated notifications, conditional triggers, rich text. Partial: basic notifications. Limited: manual emailConfigure notification for each status change; verify deliveryEssential
F5.5Webhook triggersSend data to external systems on eventsFull: configurable webhooks per event, payload customisation. Partial: limited events. None: no webhooksConfigure webhook for ticket creation; verify payloadImportant

Reporting and analytics

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
F6.1Built-in reportsPre-configured operational reportsFull: 20+ standard reports, exportable, schedulable. Partial: basic reports. Limited: minimal reportingReview report library; verify data accuracyEssential
F6.2Custom report builderCreate reports without codeFull: drag-drop builder, calculated fields, cross-object. Partial: filter-based customisation. Limited: fixed reports onlyBuild custom report joining tickets and agents; export to CSVEssential
F6.3DashboardsVisual operational displaysFull: customisable dashboards, real-time refresh, role-based. Partial: fixed dashboards. Limited: no dashboardsCreate queue-specific dashboard; verify auto-refreshEssential
F6.4Data exportExtract data for external analysisFull: scheduled exports, API access, multiple formats. Partial: manual export. Limited: no exportExport 6 months of ticket data; verify completenessEssential
F6.5Trend analysisHistorical performance trackingFull: configurable periods, comparison views, anomaly detection. Partial: basic trending. Limited: point-in-time onlyCompare Q4 2024 vs Q4 2025 ticket volumes; verify accuracyImportant

Technical requirements

Infrastructure, deployment, and integration capabilities.

Deployment and hosting

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
T1.1Self-hosted deploymentInstall on organisation-controlled infrastructureFull: documented installation, container support, air-gap capable. Partial: on-premises option with limitations. None: SaaS onlyReview installation documentation; verify offline installContext-dependent
T1.2Cloud/SaaS deploymentVendor-managed hosted serviceFull: production-ready SaaS, regional options. Partial: limited regions. None: self-hosted onlyReview SaaS documentation; verify regional availabilityContext-dependent
T1.3Container deploymentDocker or Kubernetes deployment optionFull: official images, Helm charts, orchestration support. Partial: community containers. None: traditional install onlyDeploy using official container imagesImportant
T1.4High availabilityRedundancy and failover capabilityFull: documented HA architecture, automated failover. Partial: manual failover. Limited: single instanceReview HA documentation; verify failover procedureImportant
T1.5Horizontal scalingAdd capacity by adding nodesFull: stateless design, documented scaling. Partial: limited scaling options. Limited: vertical scaling onlyReview scaling documentation; verify load distributionImportant

Scalability and performance

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
T2.1Concurrent usersSupport simultaneous agent sessionsDocument supported concurrent users; note tier limitationsReview capacity documentation; load test if possibleEssential
T2.2Ticket volumeHandle ticket creation and query ratesFull: 10,000+ tickets/day documented. Partial: limits documented. Limited: undocumentedReview scalability documentation; verify limitsEssential
T2.3Search performanceFast full-text search across ticket historyFull: sub-second search, indexed attachments. Partial: basic search. Limited: slow searchSearch 100,000+ ticket archive; measure response timeImportant
T2.4Attachment handlingStore and retrieve file attachmentsFull: configurable limits, virus scanning, inline preview. Partial: size-limited. Limited: no attachmentsUpload 25MB attachment; verify retrieval and previewImportant

Integration architecture

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
T3.1REST APIProgrammatic access to platform data and functionsFull: comprehensive coverage, documented, versioned. Partial: limited endpoints. None: no APIReview API documentation; verify endpoint coverageEssential
T3.2API authenticationSecure API access methodsFull: OAuth 2.0, API keys, service accounts. Partial: basic auth only. Limited: no authentication optionsConfigure OAuth integration; verify token handlingEssential
T3.3Webhook supportReceive events from external systemsFull: configurable endpoints, signature verification. Partial: limited events. None: no inbound webhooksConfigure inbound webhook; verify event processingImportant
T3.4Pre-built integrationsNative connectors to common systemsList integrations for: identity providers, monitoring, chat, email, CRMReview integration catalogue; verify maintenance statusImportant
T3.5Custom field extensibilityAdd organisation-specific data fieldsFull: unlimited custom fields, all data types, conditional display. Partial: limited fields. Limited: no custom fieldsCreate 20 custom fields; verify in forms and reportsEssential

Security requirements

Authentication, authorisation, and data protection capabilities.

Authentication and access control

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
S1.1Multi-factor authenticationRequire second factor for loginFull: multiple MFA methods, policy enforcement. Partial: optional MFA. None: password onlyEnable MFA; test TOTP and recovery codesEssential
S1.2Single sign-onFederated authentication via SSOFull: SAML 2.0 and OIDC, multiple IdP support. Partial: single protocol. None: local auth onlyConfigure SSO with Microsoft Entra ID or KeycloakEssential
S1.3Role-based access controlPermission assignment through rolesFull: custom roles, granular permissions, inheritance. Partial: fixed roles. Limited: admin/user onlyCreate custom role; verify permission boundariesEssential
S1.4Queue-based accessRestrict agent access to specific queuesFull: queue membership, view restrictions. Partial: global access. None: all agents see allConfigure queue restrictions; verify agent visibilityImportant
S1.5Field-level securityControl visibility of specific fields by roleFull: per-field permissions. Partial: object-level only. None: all-or-nothingHide salary field from non-HR agents; verify restrictionImportant
S1.6Session managementControl session duration and concurrent loginsFull: configurable timeouts, session visibility, forced logout. Partial: fixed settingsConfigure 8-hour session timeout; verify enforcementImportant

Data protection

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
S2.1Encryption at restData encrypted in storageFull: AES-256, documented key management. Partial: encryption optional. None: unencryptedReview encryption documentation; verify implementationEssential
S2.2Encryption in transitData encrypted during transmissionFull: TLS 1.2+ enforced. Partial: TLS available. None: HTTP allowedTest with SSL analyser; verify TLS versionEssential
S2.3Audit loggingComprehensive activity loggingFull: all operations logged, immutable, exportable. Partial: limited logging. None: no audit trailReview audit log for ticket creation, edit, delete; verify completenessEssential
S2.4Data maskingRedact sensitive information in displaysFull: configurable masking rules. Partial: manual redaction. None: no maskingConfigure PII masking; verify in agent interfaceImportant
S2.5Data residencyControl data storage locationFull: selectable regions, contractual guarantees. Partial: limited regions. None: undisclosedReview data residency documentation; verify contractuallyEssential

Security certifications

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
S3.1SOC 2 Type IIIndependent security auditFull: current certification available. Partial: Type I only. None: no SOCRequest SOC 2 report; verify scope and dateImportant
S3.2ISO 27001Information security managementFull: current certification. None: not certifiedRequest certificate; verify scopeImportant
S3.3GDPR complianceEU data protection complianceFull: DPA available, data processing records. Partial: privacy policy onlyReview DPA terms; verify controller/processor relationshipEssential

Operational requirements

Day-to-day administration and maintenance considerations.

Administration

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
O1.1Admin interface qualityUsability of administrative toolsFull: comprehensive web UI, logical organisation. Partial: limited admin UI. Poor: command-line onlyNavigate admin interface; assess task completion timeImportant
O1.2Configuration as codeVersion-controllable configurationFull: export/import, GitOps support. Partial: partial export. None: UI onlyExport configuration; restore to test environmentDesirable
O1.3Environment managementDevelopment, staging, production separationFull: environment cloning, config promotion. Partial: manual setup. None: single environmentClone production to staging; verify data separationImportant
O1.4Branding and customisationWhite-label and visual customisationFull: logo, colours, themes, custom CSS. Partial: logo only. Limited: no brandingApply organisation branding; verify across portal and emailsImportant

Backup and recovery

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
O2.1Automated backupRegular data backup capabilityFull: configurable schedule, encryption, retention. Partial: manual backup. None: no backup capabilityConfigure daily backup; verify backup completenessEssential
O2.2Point-in-time recoveryRestore to specific momentFull: granular PITR. Partial: daily snapshots. Limited: latest backup onlyTest restore to specific timestamp; verify data accuracyImportant
O2.3Disaster recoveryDocumented recovery proceduresFull: tested DR runbook, RTO/RPO documented. Partial: general guidance. None: undocumentedReview DR documentation; verify RTO claimsImportant

Support and maintenance

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
O3.1Documentation qualityTechnical documentation completenessFull: comprehensive, current, searchable. Partial: incomplete. Poor: minimalAssess documentation during evaluation; check update datesEssential
O3.2Release cadenceUpdate frequency and predictabilityFull: published roadmap, regular releases. Partial: irregular releasesReview release history; check roadmap visibilityImportant
O3.3Breaking change policyAdvance notice for incompatible changesFull: deprecation notices, migration guides. Partial: limited noticeReview changelog history; assess versioning policyImportant
O3.4Community health (FOSS)Open source project vitalityAssess: contributor count, commit frequency, issue response timeReview GitHub statistics; assess governanceImportant for FOSS

Data management requirements

Data portability and lifecycle management.

Import and migration

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
D1.1Data import formatsSupported import file typesList: CSV, JSON, XML, native formats from competitorsReview import documentation; test sample importImportant
D1.2Migration toolsUtilities for migrating from other platformsList supported source systems; note official vs community toolsReview migration documentation; assess complexityImportant
D1.3Historical data importImport tickets with original timestampsFull: preserve creation/update dates, agents, status history. Partial: current state onlyImport historical tickets; verify timestamp preservationImportant

Export and portability

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
D2.1Complete data exportExport all organisation dataFull: tickets, attachments, users, configuration. Partial: tickets only. Limited: no exportExport complete dataset; verify attachment retrievalEssential
D2.2Export formatsAvailable export formatsList: CSV, JSON, XML, PDF, native formatReview export options; test format qualityEssential
D2.3Attachment exportRetrieve stored filesFull: bulk export with metadata. Partial: individual download. None: lockedExport attachments; verify file integrityEssential

Commercial requirements

Pricing, licensing, and vendor considerations.

Pricing and licensing

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
C1.1Pricing transparencyClarity of cost structureFull: published pricing, calculator. Partial: quote required. Poor: opaqueReview public pricing; request detailed quoteImportant
C1.2Nonprofit programmeDiscounted or donated licencesFull: established programme, significant discount. Partial: ad-hoc. None: standard pricingResearch programme; verify eligibilityImportant
C1.3Licensing modelHow licences are countedDocument: per-agent, per-user, per-ticket, concurrent, unlimitedClarify model; calculate for projected growthEssential
C1.4Open source licence (FOSS)Source code licence termsDocument licence; note copyleft implicationsReview licence; assess modification and distribution rightsEssential for FOSS

Vendor assessment

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
C2.1Organisation stabilityFinancial and operational healthAssess: funding, revenue model, customer base, longevityResearch company/project historyImportant
C2.2Jurisdictional factorsLegal jurisdiction and implicationsDocument: HQ location, data centre locations, applicable lawsReview legal documentation; assess CLOUD Act exposureImportant
C2.3Exit pathAbility to migrate awayAssess: data export completeness, format openness, documentationTest full data export; evaluate migration complexityEssential

Accessibility requirements

IDRequirementDescriptionAssessment criteriaVerification methodTypical priority
A1.1WCAG 2.1 complianceWeb accessibility conformanceFull: Level AA documented. Partial: Level A. None: no statementReview accessibility statement; test with screen readerImportant
A1.2Keyboard navigationFull functionality without mouseFull: complete keyboard access. Partial: limited. None: mouse requiredNavigate agent interface with keyboard onlyImportant
A1.3Screen reader compatibilityWorks with assistive technologyFull: tested and documented. Partial: basic compatibilityTest with NVDA or VoiceOverImportant

Assessment methodology

Tools are assessed against each requirement using the following scale:

RatingSymbolDefinition
Full supportRequirement fully met with documented, production-ready capability
Partial supportRequirement partially met; limitations documented in notes
Minimal supportBasic capability exists but significant gaps
Not supportedCapability not available
Not applicable-Requirement not relevant to this tool
Not assessed?Insufficient documentation to assess

Additional notation:

  • $ indicates feature requires paid tier
  • E indicates enterprise tier only
  • P indicates plugin or extension required
  • C indicates community-provided (not vendor-supported)

Functional capability comparison

Ticket and request management

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
F1.1Multi-channel intake
F1.2Ticket classification
F1.3Assignment and routing
F1.4Ticket lifecycle
F1.5Parent-child relationships
F1.6Merge and split
F1.7Collision detection
F1.8Bulk operations

Assessment notes:

  • osTicket F1.2: Fixed category structure; custom fields available but taxonomy less flexible than alternatives
  • osTicket F1.4: Predefined workflow states; limited customisation without code modification
  • iTop F1.1: Strong on web and email; chat integration via third-party; phone integration requires configuration
  • RT F1.7: No real-time collision detection; displays concurrent ticket access but no locking

Service level management

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
F2.1SLA definition●P●P
F2.2Business hours●P●P
F2.3SLA breach alerting◐P●P
F2.4SLA reporting◐P●P
F2.5OLA support◐P●$●$●$

Assessment notes:

  • osTicket: SLA functionality requires Service Level Agreements plugin (free); basic compared to dedicated ITSM platforms
  • RT: SLA features via RT::Extension::SLA (community-maintained); requires Perl expertise to configure
  • OTOBO F2.5: Full OLA support with ITSM packages installed
  • Commercial platforms F2.5: OLA tracking in premium tiers only

Self-service and portal

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
F3.1End-user portal
F3.2Service catalogue
F3.3Knowledge base integration◐P
F3.4Mobile self-service
F3.5Multi-language portal●P

Assessment notes:

  • Zammad F3.2: Knowledge base included; formal service catalogue with workflow requires additional configuration
  • osTicket F3.3: FAQ module included; knowledge base plugin adds contextual suggestions
  • RT F3.4: Responsive design but no native mobile apps; mobile experience functional but limited
  • iTop/OTOBO F3.4: Responsive design; mobile usability varies by complexity of forms

ITIL process support

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
F4.1Incident management
F4.2Problem management●$
F4.3Change management◐P●$
F4.4Service request fulfilment
F4.5Release management●$●$
F4.6Configuration management○P●$●$

Assessment notes:

  • Zammad: Designed as customer service platform; ITIL processes achievable through workflow customisation but not native
  • osTicket: Ticket-centric design; ITIL terminology not native; achievable through custom fields and workflows
  • iTop: Full ITIL 4 coverage; integrated CMDB is primary strength; processes tightly coupled with configuration items
  • RT: General-purpose ticket system; ITIL extensions available via RT::Extension modules
  • OTOBO: Fork of OTRS with full ITSM packages; comprehensive ITIL coverage

Automation and workflow

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
F5.1Trigger-based automation
F5.2Scheduled automation◐P
F5.3Approval workflows◐P
F5.4Email notifications
F5.5Webhook triggers●P

Assessment notes:

  • osTicket F5.1: Basic automation through actions and filters; less flexible than alternatives
  • Zammad F5.3: Simple approval via groups; multi-stage approval workflows not native
  • RT: Scrips provide powerful automation; steep learning curve for complex workflows

Technical capability comparison

Deployment and hosting

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
T1.1Self-hosted●E
T1.2Cloud/SaaS
T1.3Container deployment●C●C◐C--
T1.4High availability
T1.5Horizontal scaling

Deployment details:

ToolSelf-hosted infrastructureContainer supportMinimum resourcesCloud regions
ZammadLinux (Ubuntu 22.04+, Debian 12+), PostgreSQL 14+, Redis, ElasticsearchOfficial Docker images, Docker Compose, Helm chart4 CPU, 8GB RAM, 40GB storageEU (via Zammad GmbH SaaS)
osTicketLinux or Windows, PHP 8.2+, MySQL 8+Community Docker images2 CPU, 2GB RAM, 10GB storageVarious (via osTicket Cloud)
iTopLinux, PHP 8.1+, MySQL 8+ or MariaDB 10.5+Community Docker images2 CPU, 4GB RAM, 20GB storageEU (via Combodo SaaS)
RTLinux, Perl 5.18+, PostgreSQL, MySQL, or MariaDBCommunity Docker, partial support2 CPU, 4GB RAM, 20GB storageUS (via Best Practical)
OTOBOLinux (RHEL 9+, Debian 12+), PostgreSQL 14+, Redis, ElasticsearchOfficial Docker images, recommended deployment4 CPU, 8GB RAM, 50GB storageEU (via Rother OSS)
JSMSaaS (Cloud) or Data Center (self-hosted)Official containers for Data CenterDC: 8 CPU, 16GB RAMUS, EU, APAC (multiple regions)
FreshserviceSaaS onlyN/AN/AUS, EU, APAC, India
ZendeskSaaS onlyN/AN/AUS, EU, APAC

Assessment notes:

  • JSM T1.1: Data Center edition allows self-hosting; minimum 500 users for Data Center licensing
  • osTicket T1.3: Multiple community Docker images available; no official images
  • iTop/RT T1.3: Community containers exist; not officially maintained
  • OTOBO T1.3: Docker is recommended deployment method; well-documented

Integration architecture

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
T3.1REST API
T3.2API authenticationOAuth 2.0, API tokenAPI keyAPI key, basic authToken, OAuthToken, OAuth 2.0OAuth 2.0, API tokenOAuth 2.0, API keyOAuth 2.0, API token
T3.3Webhook support●P
T3.4Pre-built integrations20+10+30+15+40+200+1,000+1,500+
T3.5Custom field extensibility

API details:

ToolAPI documentationRate limitsVersioningSDK availability
Zammaddocs.zammad.org/en/latest/apiConfigurable (self-hosted)URL versioningRuby, Python (community)
osTicketdocs.osticket.comConfigurable (self-hosted)None documentedPHP, Python (community)
iTopitophub.io/wiki/page?id=latest:advancedtopics:rest_jsonConfigurable (self-hosted)Not versionedPython, PHP (community)
RTdocs.bestpractical.com/rt/latest/RT/REST2.htmlConfigurable (self-hosted)URL versioning (REST2)Perl (official), Python (community)
OTOBOdoc.otobo.orgConfigurable (self-hosted)Web service versioningPerl (official)
JSMdeveloper.atlassian.com100-1000/min by tierDate versioningJava, Python, JS (official)
Freshserviceapi.freshservice.com50-1000/min by tierURL versioning (v2)Python, Ruby, JS (community)
Zendeskdeveloper.zendesk.com400-700/min by tierDate versioningPython, Ruby, PHP, JS (official)

Security capability comparison

Authentication and access control

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
S1.1MFA●P●P●P
S1.2SSO (SAML/OIDC)●P●P
S1.3RBAC
S1.4Queue-based access
S1.5Field-level security●$●$
S1.6Session management

Authentication methods:

ToolMFA methodsSSO protocolsIdP tested
ZammadTOTP, Security keys (WebAuthn)SAML 2.0, OAuth 2.0, OpenID ConnectKeycloak, Azure AD, Okta
osTicketTOTP (via plugin)SAML 2.0, OAuth 2.0 (via plugins)Azure AD, Google (plugins)
iTopTOTP (via extension)SAML 2.0 (native), OpenID Connect (extension)Azure AD, ADFS
RTTOTP (via extension)SAML 2.0, LDAP (extensions)Various via modules
OTOBOTOTPSAML 2.0, OAuth 2.0, OpenID ConnectKeycloak, Azure AD
JSMTOTP, WebAuthn, Duo, AuthySAML 2.0, OpenID ConnectAll major IdPs
FreshserviceTOTP, SMSSAML 2.0, OAuth 2.0All major IdPs
ZendeskTOTP, SMSSAML 2.0, OpenID ConnectAll major IdPs

Data protection

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
S2.1Encryption at rest●*●*●*●*●*
S2.2Encryption in transit
S2.3Audit logging
S2.4Data masking
S2.5Data residency●*●*●*●*●*

*Self-hosted: encryption and residency controlled by deployment configuration

Assessment notes:

  • FOSS platforms S2.1/S2.5: Encryption at rest and data residency are deployment-controlled; organisations using self-hosted options control these directly
  • osTicket S2.3: Basic logging; comprehensive audit trail requires customisation
  • Data masking: Commercial platforms offer configurable masking; FOSS platforms require custom implementation

Security certifications

ToolSOC 2 Type IIISO 27001GDPR DPAVPAT/Accessibility
Zammad (SaaS)
osTicket (SaaS)
iTop (SaaS)
RT (SaaS)
OTOBO (SaaS)
JSM
Freshservice
Zendesk

Assessment notes:

  • Self-hosted FOSS deployments: certifications depend on hosting organisation’s own compliance posture
  • Commercial SaaS platforms maintain certifications for their infrastructure
  • FOSS vendors with SaaS offerings (Zammad, iTop, OTOBO) have varying certification coverage

Operational capability comparison

Backup and recovery

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
O2.1Automated backup●*●*●*●*●*
O2.2Point-in-time recovery●*●*●*●*●*
O2.3Disaster recovery●*●*●*●*●*

*Self-hosted: backup and DR are deployment responsibilities; documentation provided for database and file backup

Assessment notes:

  • FOSS platforms provide documentation for backup procedures; implementation is operator responsibility
  • Commercial SaaS platforms include backup and DR in service

Support comparison

ToolDocumentation qualityCommunity supportPaid support optionsResponse time (paid)
Zammad● GoodActive forum, GitHubSupport contracts via Zammad GmbH4-48 hours
osTicket◐ BasicActive forumProfessional support via osTicket8-48 hours
iTop● GoodActive forumSupport via Combodo4-24 hours
RT● ComprehensiveMailing lists, forumEnterprise support via Best Practical4-24 hours
OTOBO● GoodActive forumSupport via Rother OSS4-24 hours
JSM● ExcellentCommunity forumsIncluded in subscription1-24 hours by tier
Freshservice● ExcellentCommunity forumsIncluded in subscription1-24 hours by tier
Zendesk● ExcellentCommunity forumsIncluded in subscription1-24 hours by tier

Data management comparison

Import and export

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
D1.1Import formatsCSV, JSON, APICSV, APICSV, XML, APICSV, APICSV, XML, APICSV, APICSV, APICSV, API
D1.2Migration toolsFrom OTRS, Zendesk, KayakoGeneric CSVFrom various (documented)Custom scriptsFrom OTRSFrom multiple platformsFrom multiple platformsFrom multiple platforms
D1.3Historical import
D2.1Complete export
D2.2Export formatsJSON, CSVCSVCSV, XMLTab-delimited, CSVCSV, XMLCSVCSV, JSONJSON, CSV
D2.3Attachment export

Migration complexity from common platforms:

Source platformZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
OTRS● Native◐ Manual◐ Manual◐ Manual● Native◐ Manual● Official● Official
Zendesk● Native◐ Manual◐ Manual◐ Manual◐ Manual● Official● Official-
Freshdesk◐ Manual◐ Manual◐ Manual◐ Manual◐ Manual◐ Manual● Official● Official
Jira SM◐ Manual◐ Manual◐ Manual◐ Manual◐ Manual-● Official● Official
ServiceNow◐ Manual◐ Manual◐ Manual◐ Manual◐ Manual◐ Manual● Official● Official

Commercial comparison

Pricing models

ToolTypeModelFree tierNonprofit programmeTypical cost (10 agents)Typical cost (50 agents)
ZammadOpen sourceFree + optional support/SaaS● Full productN/A£0 (self-hosted)£0 (self-hosted)
osTicketOpen sourceFree + optional SaaS● Full productN/A£0 (self-hosted)£0 (self-hosted)
iTopOpen sourceFree + enterprise extensions● Full productN/A£0 (self-hosted)£0 (self-hosted)
RTOpen sourceFree + optional support● Full productN/A£0 (self-hosted)£0 (self-hosted)
OTOBOOpen sourceFree + optional support/SaaS● Full productN/A£0 (self-hosted)£0 (self-hosted)
JSMCommercialPer-agent subscription● 3 agents● 75% discount£600-1,500/mo£2,500-5,000/mo
FreshserviceCommercialPer-agent subscription✗ 21-day trial● Via TechSoup£700-1,700/mo£3,000-7,000/mo
ZendeskCommercialPer-agent subscription✗ 14-day trial● Via Tech Impact£800-2,000/mo£3,500-8,000/mo

Cost notes:

  • Self-hosted costs exclude infrastructure (servers, database, storage, backup, SSL certificates)
  • Typical infrastructure cost for self-hosted: £50-300/month for 10 agents; £150-800/month for 50 agents
  • Commercial platform costs vary by tier; ranges shown cover entry to mid-tier plans
  • Enterprise features and premium support add 50-200% to base commercial costs

Detailed pricing: Commercial platforms

Jira Service Management Cloud

TierPrice (per agent/month)Key featuresLimitations
Free£0Basic ITSM, 3 agents max2GB storage, no SLA, limited automation
Standard£17.65Full ITSM, unlimited customers250GB storage
Premium£44.27Advanced ITSM, AI, AssetsUnlimited storage, 99.9% SLA
EnterpriseCustomUnlimited instances, advanced securityMinimum spend applies

Nonprofit programme: 75% discount through Atlassian Community License; requires registered charity status.

Freshservice

TierPrice (per agent/month)Key featuresLimitations
Starter£14Basic ITSM, 300 assetsNo change management, basic reporting
Growth£39Full ITSM, workflow automation500 orchestrations/month
Pro£78Advanced ITSM, project management5,000 orchestrations/month
Enterprise£99AI, sandbox, advanced analyticsUnlimited orchestrations

Nonprofit programme: Discounts available through TechSoup; discount level varies by region.

Zendesk

TierPrice (per agent/month)Key featuresLimitations
Suite Team£45Basic ticketing, messaging50 AI-assisted answers/month
Suite Growth£75SLA, automation, analytics100 AI-assisted answers/month
Suite Professional£95Skills-based routing, side conversations500 AI-assisted answers/month
Suite EnterpriseCustomSandbox, advanced securityMinimum seats apply

Nonprofit programme: Up to 50% discount through Tech Impact/Benevity; requires verification.

Vendor details

ToolOrganisationFoundedHQ locationBusiness model
ZammadZammad Foundation / Zammad GmbH2016GermanyOpen source foundation + commercial entity
osTicketEnhancesoft2006United StatesOpen source + hosted service
iTopCombodo2010FranceOpen source + enterprise services
RTBest Practical Solutions1999United StatesOpen source + commercial support
OTOBORother OSS GmbH2020GermanyOpen source (OTRS fork) + services
JSMAtlassian2002Australia (US HQ)Public company, SaaS + Data Center
FreshserviceFreshworks2010United States (India origin)Public company, SaaS
ZendeskZendesk (now private)2007United StatesPrivate equity-owned, SaaS

Jurisdictional considerations:

  • US-headquartered (osTicket, RT, JSM, Freshservice, Zendesk): Subject to US CLOUD Act; government can compel data access regardless of storage location
  • German/EU-headquartered (Zammad, OTOBO): GDPR as primary framework; no CLOUD Act exposure
  • French-headquartered (iTop): GDPR as primary framework; no CLOUD Act exposure
  • Self-hosted options: Jurisdictional concerns mitigated by organisational control of infrastructure

Accessibility comparison

Req IDRequirementZammadosTicketiTopRTOTOBOJSMFreshserviceZendesk
A1.1WCAG 2.1 compliance◐ Partial○ Limited○ Limited○ Limited◐ Partial● AA● AA● AA
A1.2Keyboard navigation
A1.3Screen reader
A1.4VPAT available

Assessment notes:

  • Commercial platforms invest significantly in accessibility compliance; VPATs available on request
  • FOSS platforms have variable accessibility; Zammad and OTOBO lead among open source options
  • Organisations with accessibility requirements should evaluate agent and portal interfaces during trial

Detailed tool assessments

Zammad

Type
Open source
Licence
AGPL-3.0. Requires source disclosure if modified versions are distributed or provided as a service to third parties.
Current version
6.5 (April 2025); 7.0 in development
Deployment options
Self-hosted (Linux), Docker, Kubernetes, SaaS
Source repository
github.com/zammad/zammad
Documentation
docs.zammad.org

Overview

Zammad is a web-based open source helpdesk and customer service platform developed by Zammad GmbH in Germany, with source code owned by the independent Zammad Foundation. Originally created by Martin Edenhofer (founder of OTRS), Zammad provides a modern ticketing system with emphasis on multichannel communication, real-time updates, and user experience. The platform uses Ruby on Rails with PostgreSQL, Elasticsearch for search, and Redis for caching.

Zammad focuses on customer service and support desk use cases rather than full ITIL compliance. The interface is modern and intuitive, requiring minimal training for agents. The system handles email, chat, phone (via CTI integration), Twitter, Facebook, and Telegram natively. Real-time updates via WebSockets create a responsive agent experience.

Capability assessment for ITSM

Zammad excels at ticket management, multichannel intake, and agent productivity. The knowledge base integrates with ticket creation for article suggestions. Workflow automation through triggers and schedulers handles routing, escalation, and notifications effectively.

For formal ITIL processes, Zammad requires configuration. While incident, request, and basic problem management work through ticket types and custom workflows, native change management, release management, and CMDB are not included. Organisations requiring formal ITIL alignment should consider OTOBO or iTop, or plan for significant customisation.

Key strengths:

  • Modern, responsive interface reduces agent training time
  • Strong multichannel support including social media and chat
  • Active open source community with regular releases
  • German/EU hosting available; GDPR-friendly deployment
  • Two-factor authentication and SSO built-in

Key limitations:

  • Limited native ITIL process support; requires workflow customisation
  • No integrated CMDB or asset management
  • Formal change management requires custom implementation
  • Enterprise features (reporting, advanced automation) require SaaS or development

Deployment and operations

Self-hosted requirements:

Operating system: Ubuntu 22.04+, Debian 12+, RHEL 8+ (with EPEL)
Database: PostgreSQL 14+ (PostgreSQL only from v7.0)
Runtime: Ruby (bundled), Node.js (bundled)
Dependencies: Elasticsearch 8.x, Redis 7+
Minimum resources: 4 CPU, 8GB RAM, 40GB storage
Recommended (100 agents): 8 CPU, 16GB RAM, 100GB storage

Deployment complexity: Medium. Package installation straightforward; Elasticsearch and Redis add operational overhead.

Operational overhead: Medium. Elasticsearch requires monitoring and index management. Regular updates released; upgrade process documented.

Upgrade path: Regular releases (approximately monthly). Major versions (6.x to 7.x) require migration steps. Breaking changes documented in release notes.

Integration capabilities

API coverage: Comprehensive REST API covering tickets, users, organisations, tags, and system configuration. GraphQL API in development.

Key integrations:

IntegrationTypeStatusDocumentation
Microsoft Entra IDSSONativedocs.zammad.org
LDAP/Active DirectoryAuthenticationNativedocs.zammad.org
KeycloakSSONativedocs.zammad.org
CTI (various)PhoneNativedocs.zammad.org
Exchange/Office 365CalendarNativedocs.zammad.org
i-doitCMDBCommunityExternal

Cost analysis

Direct costs:

  • Licence: Free (AGPL-3.0)
  • SaaS: From €5/agent/month (hosted by Zammad GmbH)
  • Support: Available through Zammad GmbH; pricing on request

Infrastructure costs (self-hosted):

ScaleInfrastructure estimateNotes
Small (10 agents)£100-200/monthSingle server with separate PostgreSQL
Medium (50 agents)£300-500/monthApplication + database servers, Elasticsearch cluster
Large (200+ agents)£800-1,500/monthHA deployment, dedicated Elasticsearch

Hidden costs:

  • Elasticsearch expertise or managed service
  • SSL certificate management
  • Backup infrastructure

Organisational fit

Best suited for:

  • Customer service and support desk operations
  • Organisations prioritising modern UX and multichannel support
  • Teams wanting EU-hosted open source solution
  • Environments where formal ITIL compliance is not required

Less suitable for:

  • Organisations requiring formal ITIL change and release management
  • Environments needing integrated CMDB
  • Teams requiring enterprise reporting without development

Migration considerations:

  • Native import from OTRS, Zendesk, Kayako, Freshdesk
  • CSV/API import for other platforms
  • Full data export available

osTicket

Type
Open source
Licence
GPL-2.0. Permits modification and distribution; derivative works must use compatible licence.
Current version
1.18.2 (February 2025)
Deployment options
Self-hosted (Linux/Windows), SaaS
Source repository
github.com/osTicket/osTicket
Documentation
docs.osticket.com

Overview

osTicket is a widely-deployed open source support ticket system developed by Enhancesoft. First released in 2003, osTicket provides essential ticketing functionality with low resource requirements and straightforward deployment. The platform uses PHP with MySQL, making it deployable on standard LAMP/LEMP stacks and most shared hosting environments.

osTicket focuses on core ticketing rather than comprehensive ITSM. The system handles email, web portal, and API intake, with plugins adding additional channels. Custom forms and fields allow adaptation to various use cases. The extensive plugin ecosystem (some free, some commercial) extends functionality.

Capability assessment for ITSM

osTicket provides solid ticket management for help desk operations. Tickets flow through customisable statuses with assignment, collaboration, and response capabilities. The FAQ module offers basic knowledge management. Custom forms enable organisation-specific data capture.

For ITIL processes, osTicket is limited. The platform does not distinguish incident from service request natively, and problem, change, and release management are not included. The SLA plugin adds service level tracking. Organisations requiring ITIL alignment should consider alternatives or plan significant customisation.

Key strengths:

  • Low resource requirements; runs on shared hosting
  • Simple installation and administration
  • Long track record and extensive deployment base
  • Plugin ecosystem extends core functionality
  • Low barrier to entry for basic help desk

Key limitations:

  • Limited native ITIL support; no change or problem management
  • Basic automation compared to alternatives
  • No integrated CMDB
  • Plugin quality varies; some commercial, some unmaintained
  • Interface dated compared to modern platforms

Deployment and operations

Self-hosted requirements:

Operating system: Linux or Windows with web server
Web server: Apache 2.4+ or IIS 8+
Database: MySQL 8+ or MariaDB 10.4+
Runtime: PHP 8.2-8.4
Dependencies: PHP extensions (imap, json, mbstring, etc.)
Minimum resources: 1 CPU, 2GB RAM, 10GB storage

Deployment complexity: Low. Standard PHP application; installs via web wizard.

Operational overhead: Low. Minimal maintenance required for basic operation.

Upgrade path: Regular releases. Upgrade via file replacement; database migrations automatic.

Integration capabilities

API coverage: REST API for ticket, user, and organisation operations. Adequate for basic integrations.

Key integrations:

IntegrationTypeStatusDocumentation
OAuth2 (Azure, Google)AuthenticationPluginosticket.com
LDAPAuthenticationCoredocs.osticket.com
S3AttachmentsPluginosticket.com
VariousPluginsCommunityosticket.com

Cost analysis

Direct costs:

  • Licence: Free (GPL-2.0)
  • Plugins: Various (free and commercial)
  • SaaS: From $15/agent/month (via osTicket Cloud)

Infrastructure costs (self-hosted):

ScaleInfrastructure estimateNotes
Small (10 agents)£20-50/monthShared hosting or small VPS
Medium (50 agents)£100-200/monthDedicated server or VPS
Large (200+ agents)£300-600/monthMultiple servers with load balancing

Hidden costs:

  • Commercial plugins if required
  • Custom development for ITIL processes

Organisational fit

Best suited for:

  • Small teams needing basic ticket management
  • Organisations with limited IT resources
  • Environments where simple email-to-ticket workflow suffices
  • Budget-constrained deployments

Less suitable for:

  • ITIL-aligned IT service management
  • Complex workflow automation requirements
  • Organisations requiring integrated asset/configuration management
  • Teams needing modern, responsive interface

iTop

Type
Open source
Licence
AGPL-3.0. Requires source disclosure for modifications; commercial extensions available under separate licence.
Current version
3.2.2 LTS (2025); 3.3 STS branch active
Deployment options
Self-hosted (Linux), SaaS
Source repository
github.com/Combodo/iTop
Documentation
itophub.io

Overview

iTop (IT Operational Portal) is an open source ITSM platform developed by Combodo in France. The platform differentiates itself through its CMDB-centric architecture: configuration items and their relationships form the foundation, with ticket management built around configuration data. This design supports impact analysis, dependency mapping, and service-aware incident management.

iTop provides comprehensive ITIL coverage including incident, problem, change, and release management. The low-code CMDB allows organisations to model their specific infrastructure and services without programming. Extensions available through iTop Hub add capabilities including SLA management, reporting, and integrations.

Capability assessment for ITSM

iTop’s CMDB is its primary strength. Organisations can model complex infrastructure with configuration items, relationships, and impact rules. When incidents occur, the system displays affected CIs and downstream impacts. Change management links changes to affected configurations, enabling impact assessment before implementation.

The ticketing system supports full ITIL processes with separate workflows for incidents, service requests, problems, and changes. The service catalogue defines available services linked to SLAs and supporting CIs. The interface is functional but dated compared to modern platforms; Combodo’s development focuses on capability rather than aesthetic refinement.

Key strengths:

  • Comprehensive CMDB with relationship modelling
  • Full ITIL process coverage in open source version
  • Impact analysis links incidents and changes to affected services
  • Low-code customisation via ITSM Designer (commercial extension)
  • French/EU vendor; GDPR-friendly

Key limitations:

  • Interface dated; learning curve for new users
  • Mobile experience limited
  • Documentation extensive but assumes technical knowledge
  • Some advanced features require commercial extensions
  • Performance tuning required for large CMDB

Deployment and operations

Self-hosted requirements:

Operating system: Linux (RHEL/CentOS, Debian, Ubuntu)
Web server: Apache 2.4+ with mod_php or PHP-FPM
Database: MySQL 8+ or MariaDB 10.5+
Runtime: PHP 8.1+
Dependencies: Graphviz (for impact diagrams)
Minimum resources: 2 CPU, 4GB RAM, 20GB storage
Recommended (50 agents): 4 CPU, 8GB RAM, 100GB storage

Deployment complexity: Medium. Standard PHP application; CMDB configuration requires planning.

Operational overhead: Medium. Database performance critical for large CMDB; periodic optimisation required.

Upgrade path: LTS branch (3.2.x) supported for 2 years; STS branch (3.3.x) for early features. Upgrade wizard handles database migrations.

Integration capabilities

API coverage: REST/JSON API for all objects; comprehensive CRUD operations on any CI or ticket type.

Key integrations:

IntegrationTypeStatusDocumentation
LDAP/ADAuthenticationNativeitophub.io
SAML 2.0SSONativeitophub.io
Nagios/IcingaMonitoringExtensioniTop Hub
AnsibleAutomationExtensioniTop Hub
TeemIPIP ManagementOfficialcombodo.com

Cost analysis

Direct costs:

  • Licence: Free (AGPL-3.0)
  • Extensions: Many free; advanced extensions commercial
  • ITSM Designer (low-code): Commercial licence
  • Support: Through Combodo partners

Infrastructure costs (self-hosted):

ScaleInfrastructure estimateNotes
Small (10 agents)£80-150/monthSingle server deployment
Medium (50 agents)£200-400/monthSeparate database server
Large (200+ agents)£500-1,000/monthClustered with optimised database

Hidden costs:

  • ITSM Designer if low-code customisation needed
  • Database performance optimisation expertise

Organisational fit

Best suited for:

  • Organisations requiring CMDB-centric ITSM
  • IT departments managing complex infrastructure
  • Environments where impact analysis is critical
  • Teams seeking full ITIL coverage in open source

Less suitable for:

  • Simple help desk requirements (over-engineered)
  • Organisations prioritising modern UX
  • Mobile-first environments
  • Teams without database administration capability

Request Tracker (RT)

Type
Open source
Licence
GPL-2.0. Permits modification and distribution under compatible terms.
Current version
6.0.2 (October 2025); 5.0.9 maintenance
Deployment options
Self-hosted (Linux), Cloud RT (managed service)
Source repository
github.com/bestpractical/rt
Documentation
docs.bestpractical.com

Overview

Request Tracker (RT) is a mature open source ticket tracking system developed by Best Practical Solutions since 1996. RT serves diverse use cases from IT help desk to security incident response (via RT for Incident Response). The platform uses Perl with PostgreSQL, MySQL, or Oracle, and runs on Apache with mod_perl or Plack/Starman.

RT emphasises flexibility and extensibility. The system’s “scrips” (scripts triggered by ticket events) enable complex automation. Custom fields, lifecycle states, and workflows accommodate varied requirements. The RT ecosystem includes extensions for SLA management, approvals, assets, and integrations.

Capability assessment for ITSM

RT provides comprehensive ticket management with configurable lifecycles and workflows. Different queues can have different workflows, enabling separation of incident, request, and other ticket types. The scrip system handles complex automation including notifications, field updates, and external integrations.

RT for Incident Response (RTIR) extends RT specifically for security teams with incident states, constituencies, and investigation workflows. For general ITSM, RT requires configuration and extension installation to match platforms with native ITIL coverage.

Key strengths:

  • Mature codebase with 25+ years of development
  • Highly flexible workflow and automation system
  • Strong security incident response variant (RTIR)
  • Comprehensive audit trail and history
  • Active commercial support from Best Practical

Key limitations:

  • Perl expertise required for customisation
  • Interface functional but not modern
  • Extensions required for ITIL processes
  • Steeper learning curve than alternatives
  • Limited mobile experience

Deployment and operations

Self-hosted requirements:

Operating system: Linux (RHEL/CentOS, Debian, Ubuntu)
Web server: Apache with mod_perl or nginx with Plack
Database: PostgreSQL 13+ (recommended), MySQL 8+, MariaDB
Runtime: Perl 5.18+
Dependencies: Various CPAN modules
Minimum resources: 2 CPU, 4GB RAM, 20GB storage

Deployment complexity: Medium-High. Perl environment setup; CPAN dependency management.

Operational overhead: Medium. Stable in production; upgrades require attention to extension compatibility.

Upgrade path: Major versions (5.x to 6.x) require review of extensions. LTS available for enterprises.

Cost analysis

Direct costs:

  • Licence: Free (GPL-2.0)
  • Cloud RT: Managed service pricing on request
  • Support: Enterprise support from Best Practical

Infrastructure costs (self-hosted):

ScaleInfrastructure estimateNotes
Small (10 agents)£80-150/monthSingle server
Medium (50 agents)£200-400/monthSeparate database
Large (200+ agents)£500-1,000/monthClustered deployment

Organisational fit

Best suited for:

  • Organisations with Perl expertise
  • Security teams (RT for Incident Response)
  • Environments requiring extensive customisation
  • Long-term stable deployments

Less suitable for:

  • Teams without Perl skills
  • Organisations prioritising modern UX
  • Simple help desk requirements
  • Mobile-centric environments

OTOBO

Type
Open source
Licence
GPL-3.0. Permits modification and distribution; derivative works under compatible licence.
Current version
11 (2025)
Deployment options
Self-hosted (Linux), Docker, SaaS
Source repository
github.com/RotherOSS/otobo
Documentation
doc.otobo.org

Overview

OTOBO is an open source ITSM platform forked from OTRS Community Edition in 2020 by Rother OSS GmbH after OTRS AG restricted the open source version. OTOBO maintains compatibility with OTRS workflows and configurations while adding features and maintaining the open source development model. The platform uses Perl with PostgreSQL, Redis, and Elasticsearch.

OTOBO provides comprehensive ITSM functionality through core ticketing and optional ITSM packages. The modular architecture allows organisations to enable features as needed. Docker is the recommended deployment method, simplifying installation and updates.

Capability assessment for ITSM

OTOBO’s ITSM packages provide full ITIL coverage including incident, problem, change, and configuration management. The CMDB (via ITSMConfigurationManagement) links CIs to services and tickets. Version 11 introduced a redesigned CMDB with tree views, formula fields, and improved CI access controls.

The workflow engine handles complex processes with states, transitions, and automated actions. Generic agents (scheduled automation) and event-based notifications provide comprehensive automation. The customer portal supports self-service and service catalogue presentation.

Key strengths:

  • Full ITIL process coverage with ITSM packages
  • Modern CMDB redesign in version 11
  • Docker deployment simplifies operations
  • Active development and regular releases
  • German/EU vendor; GDPR-friendly
  • Migration path from OTRS

Key limitations:

  • Perl-based; customisation requires Perl knowledge
  • Interface improved but not as modern as some alternatives
  • ITSM packages add complexity
  • Elasticsearch required for search performance

Deployment and operations

Self-hosted requirements:

Operating system: Linux (RHEL 9+, Debian 12+, Ubuntu 22.04+)
Container: Docker and Docker Compose (recommended)
Database: PostgreSQL 14+
Dependencies: Redis 7+, Elasticsearch 8.x
Minimum resources: 4 CPU, 8GB RAM, 50GB storage
Recommended (50 agents): 8 CPU, 16GB RAM, 200GB storage

Deployment complexity: Low-Medium. Docker deployment well-documented; traditional install more complex.

Operational overhead: Medium. Elasticsearch and Redis require monitoring; Docker simplifies updates.

Upgrade path: Regular releases; Docker deployment enables straightforward container updates.

Integration capabilities

API coverage: Web services (REST/SOAP) for comprehensive ticket and CI operations; GenericInterface for custom integrations.

Key integrations:

IntegrationTypeStatusDocumentation
LDAP/ADAuthenticationNativedoc.otobo.org
SAML/OAuthSSONativedoc.otobo.org
Nagios/IcingaMonitoringPackageotobo.io
GrafanaDashboardsCommunitygithub.com/zammad
FAQKnowledge basePackageotobo.io

Cost analysis

Direct costs:

  • Licence: Free (GPL-3.0)
  • Packages: Most free; some commercial
  • SaaS: Through Rother OSS; pricing on request
  • Support: Through Rother OSS and partners

Infrastructure costs (self-hosted):

ScaleInfrastructure estimateNotes
Small (10 agents)£100-200/monthDocker host with PostgreSQL
Medium (50 agents)£300-500/monthSeparate database and Elasticsearch
Large (200+ agents)£800-1,500/monthClustered deployment

Organisational fit

Best suited for:

  • OTRS migrations seeking open source continuity
  • Organisations requiring full ITIL coverage
  • Environments comfortable with Docker deployment
  • Teams seeking EU-hosted open source ITSM

Less suitable for:

  • Simple help desk requirements
  • Organisations without Perl/Linux expertise
  • Teams requiring extensive mobile access
  • Environments preferring simpler architecture

Jira Service Management

Type
Commercial
Licence
Proprietary; subscription-based
Current version
Cloud (continuous updates); Data Center 11.3 LTS (December 2025)
Deployment options
Cloud (SaaS), Data Center (self-hosted)
Vendor
Atlassian
Documentation
support.atlassian.com/jira-service-management-cloud

Overview

Jira Service Management (JSM) is Atlassian’s ITSM platform, evolved from Jira Service Desk. JSM builds on Jira’s project and issue tracking foundation, adding ITSM-specific workflows, customer portal, SLA management, and integration with Atlassian’s ecosystem (Confluence, Opsgenie, Statuspage). The platform serves IT, HR, legal, and other service teams.

JSM Cloud receives continuous updates with AI features and advanced automation. Data Center edition provides self-hosted deployment for organisations with data residency or infrastructure control requirements, though Atlassian encourages cloud adoption.

Capability assessment for ITSM

JSM provides comprehensive ITSM with incident, problem, change, and request management. Integration with Opsgenie (included in Premium/Enterprise) adds on-call scheduling, alerting, and incident response. Assets (Premium+) provides CMDB functionality with discovery and dependency mapping.

The platform excels when combined with other Atlassian tools: Confluence for knowledge base, Jira Software for development team integration, and Statuspage for communication. Automation rules handle complex workflows. The Atlassian Marketplace offers 1,000+ apps for extended functionality.

Key strengths:

  • Deep integration with Atlassian ecosystem
  • Advanced automation and AI features
  • Comprehensive on-call and alerting (Premium+)
  • Large marketplace for extensions
  • Strong knowledge base via Confluence
  • Development team integration

Key limitations:

  • Pricing scales quickly with agents and tiers
  • Data Center minimum 500 users
  • US-headquartered; CLOUD Act applies to SaaS
  • Asset/CMDB requires Premium tier
  • Learning curve for non-Atlassian users

Deployment and operations

Cloud: Fully managed; no infrastructure management required.

Data Center requirements:

Operating system: Linux (RHEL 8+, Ubuntu 20.04+)
Database: PostgreSQL 13-16
Runtime: Java 11 (bundled)
Search: OpenSearch or Elasticsearch
Minimum resources: 8 CPU, 16GB RAM, 100GB storage
Recommended: 16+ CPU, 32GB RAM, SSD storage

Deployment complexity: Cloud: Low. Data Center: Medium-High; requires Atlassian expertise.

Operational overhead: Cloud: Low (managed). Data Center: Medium-High; backup, updates, performance tuning.

Cost analysis

Cloud pricing:

TierPrice (per agent/month)Key features
Free£03 agents, basic ITSM
Standard£17.65Unlimited agents, full ITSM
Premium£44.27AI, Assets, Opsgenie, advanced SLA
EnterpriseCustomUnlimited instances, advanced security

Nonprofit programme: 75% discount via Atlassian Community License; registered charities and qualifying nonprofits.

Data Center: Annual licence based on user tiers; minimum 500 users; starts ~$42,000/year.

Organisational fit

Best suited for:

  • Organisations already using Atlassian products
  • Development-heavy environments needing dev/IT integration
  • Teams requiring advanced on-call and alerting
  • Enterprises with budget for Premium tier

Less suitable for:

  • Small teams (pricing)
  • Organisations avoiding US cloud providers
  • Simple help desk requirements
  • Budget-constrained nonprofits (despite discount)

Freshservice

Type
Commercial SaaS
Licence
Proprietary; subscription-based
Current version
Continuous updates (SaaS)
Deployment options
Cloud only
Vendor
Freshworks
Documentation
support.freshservice.com

Overview

Freshservice is a cloud-based ITSM platform from Freshworks, designed for straightforward deployment and ease of use. The platform provides ITIL-aligned processes with a modern interface and gamification elements to encourage adoption. Freshservice emphasises quick time-to-value with pre-configured workflows and AI-assisted features.

Freshworks’ product suite includes Freshdesk (customer service), Freshsales (CRM), and other tools that integrate with Freshservice. The platform serves IT, HR, and facilities teams with a unified approach to service management.

Capability assessment for ITSM

Freshservice provides comprehensive ITSM with incident, problem, change, and release management. The service catalogue enables self-service with approval workflows. Asset management includes discovery and software licence tracking. Project management (Pro tier+) enables project ticket integration.

The platform excels at usability; agents can be productive with minimal training. Workflow automation handles routing, escalation, and notifications. AI features assist with categorisation and knowledge article suggestions. The mobile apps provide full functionality for remote agents.

Key strengths:

  • Intuitive interface; minimal training required
  • Quick deployment with pre-configured workflows
  • Integrated asset management with discovery
  • Strong mobile experience
  • Freddy AI for automation and insights
  • Extensive integration marketplace

Key limitations:

  • SaaS only; no self-hosted option
  • US-headquartered; CLOUD Act applies
  • Advanced features (project management, AI) require higher tiers
  • Pricing increases significantly with tier and agents
  • Customisation depth limited compared to FOSS

Cost analysis

TierPrice (per agent/month)Key features
Starter£14Basic ITSM, 300 assets
Growth£39Full ITSM, orchestration
Pro£78Project management, analytics
Enterprise£99AI, sandbox, SLA management

Nonprofit programme: Discounts via TechSoup; varies by region.

Organisational fit

Best suited for:

  • Organisations prioritising ease of use
  • Teams needing quick deployment
  • IT departments wanting integrated asset management
  • Environments comfortable with SaaS

Less suitable for:

  • Organisations requiring self-hosted deployment
  • Entities avoiding US cloud providers
  • Budget-constrained organisations (smaller teams)
  • Environments needing deep customisation

Zendesk

Type
Commercial SaaS
Licence
Proprietary; subscription-based
Current version
Continuous updates (SaaS)
Deployment options
Cloud only
Vendor
Zendesk (private equity-owned since 2022)
Documentation
developer.zendesk.com

Overview

Zendesk is a leading customer service and support platform used by organisations across industries. While primarily positioned for customer service, Zendesk’s flexibility enables internal IT help desk use. The platform provides omnichannel support, AI-powered automation, and extensive integration options.

Zendesk was acquired by private equity in 2022, transitioning from public company to private ownership. The platform continues active development with focus on AI features and enterprise capabilities.

Capability assessment for ITSM

Zendesk provides strong ticket management with multichannel support (email, chat, voice, social, messaging). The platform supports ITIL-style workflows through ticket types, automations, and macros. Knowledge base (Zendesk Guide) integrates with ticket creation for article suggestions.

For formal ITIL processes, Zendesk requires configuration. The platform lacks native change management, problem management, and CMDB. Organisations requiring these capabilities should consider Zendesk in combination with other tools, or evaluate ITSM-specific platforms.

Key strengths:

  • Leading omnichannel support platform
  • Extensive AI features for automation
  • Large integration marketplace (1,500+ apps)
  • Strong analytics and reporting
  • Mature, stable platform

Key limitations:

  • Customer service focus; ITIL processes require configuration
  • No native CMDB or asset management
  • No change/problem management without extensions
  • SaaS only; no self-hosted option
  • US-headquartered; CLOUD Act applies

Cost analysis

TierPrice (per agent/month)Key features
Suite Team£45Basic ticketing, messaging
Suite Growth£75SLA, automation
Suite Professional£95Advanced routing, side conversations
Suite EnterpriseCustomSandbox, advanced security

Nonprofit programme: Up to 50% discount via Tech Impact; verification required.

Organisational fit

Best suited for:

  • Customer service operations
  • Organisations already using Zendesk for external support
  • Environments prioritising omnichannel support
  • Teams needing strong analytics

Less suitable for:

  • ITIL-aligned IT service management
  • Organisations requiring change/problem management
  • Entities needing CMDB integration
  • Environments requiring self-hosted deployment

Selection guidance

Decision framework

+------------------+
| ITSM platform |
| needed? |
+--------+---------+
|
+----------------------------+-------------------------+
| |
Full ITIL Help desk /
coverage needed? Customer support
| |
+------------+------------+ +------------+------------+
| | | |
Yes No Internal IT External CS
| | | |
+-----+-----+ +------+------+ +------+------+ +------+------+
| | | | | | | |
Self-hosted SaaS Self-hosted SaaS Self-hosted SaaS Self-hosted SaaS
| | | | | | | |
iTop JSM Zammad JSM Zammad JSM Zammad Zendesk
OTOBO Fresh- osTicket Fresh- osTicket Fresh- osTicket Fresh-
RT service service service service

Recommendations by organisational context

For organisations with minimal IT capacity

Primary recommendation: Freshservice (Starter) or osTicket (self-hosted)

Rationale: Freshservice provides quick deployment with minimal administration; pre-configured workflows reduce setup time. For organisations with existing web hosting and budget constraints, osTicket provides essential ticketing with low overhead.

Alternative: Zammad SaaS provides modern interface with straightforward administration; German hosting addresses EU data residency concerns.

Avoid: iTop, OTOBO, RT without dedicated IT staff; complexity exceeds benefit for simple requirements.

For organisations with established IT capacity

Primary recommendation: OTOBO or iTop (self-hosted) for full ITIL; Zammad for service desk focus

Rationale: OTOBO and iTop provide comprehensive ITIL coverage with CMDB integration. Docker deployment (OTOBO) simplifies operations. Organisations with Perl or PHP expertise can customise extensively.

Alternative: Jira Service Management (Cloud) if Atlassian ecosystem already deployed; Premium tier for Assets and advanced features.

Avoid: Basic platforms that require significant customisation to meet ITIL requirements.

For organisations with specific constraints

Data sovereignty/EU requirements:

  • Recommended: Zammad, OTOBO, or iTop (German/French vendors; self-hosted or EU SaaS)
  • Avoid: US-headquartered SaaS (Zendesk, Freshservice) for sensitive data

CMDB-centric operations:

  • Recommended: iTop (CMDB is foundational); JSM with Assets (Premium)
  • Avoid: Zammad, osTicket, Zendesk (no native CMDB)

Security incident response:

  • Recommended: Request Tracker with RTIR
  • Alternative: OTOBO with ITSM packages

Maximum budget constraint:

  • Recommended: osTicket (lowest resource requirements); Zammad (balanced capability/simplicity)
  • Avoid: Commercial platforms without nonprofit discounts

Migration paths

FromToComplexityApproachTimeline
OTRSOTOBOLowNative migration tools1-2 weeks
OTRSZammadMediumImport wizard2-4 weeks
ZendeskZammadLowNative import1-2 weeks
ZendeskJSMMediumAtlassian migration tools2-4 weeks
ServiceNowJSMHighCustom migration1-3 months
ServiceNowOTOBOHighAPI-based migration1-3 months
AnyFreshserviceMediumFreshworks migration service2-6 weeks
AnyZendeskMediumZendesk migration service2-6 weeks

Resources and references

Official documentation

ToolDocumentationAPI referenceCommunity
Zammaddocs.zammad.orgdocs.zammad.org/en/latest/apicommunity.zammad.org
osTicketdocs.osticket.comdocs.osticket.comosticket.com/forum
iTopitophub.ioitophub.io/wikiitophub.io/forum
RTdocs.bestpractical.comdocs.bestpractical.comforum.bestpractical.com
OTOBOdoc.otobo.orgdoc.otobo.orgotobo.io/community
JSMsupport.atlassian.comdeveloper.atlassian.comcommunity.atlassian.com
Freshservicesupport.freshservice.comapi.freshservice.comcommunity.freshworks.com
Zendesksupport.zendesk.comdeveloper.zendesk.comsupport.zendesk.com
StandardRelevanceSource
ITIL 4Service management frameworkaxelos.com
ISO/IEC 20000IT service managementiso.org
WCAG 2.1Accessibility compliancew3.org/WAI

See also