whats-best.ai
Search Sign in

IT Service Management

OTOBO

EU-Made Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Rother OSS GmbH · otobo.io

Compare with GLPI → Report an error on this page Is this your product? →

Link to this page

OTOBO: AI-assisted analysis on whats-best.ai OTOBO: AI-assisted analysis on whats-best.ai (dark)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

OTOBO at a glance

Vendor
Rother OSS GmbH
Headquarters
Not stated on the vendor’s pages as of 1 Nov 2026
Data hosting
Default not stated; pages mention Germany and Switzerland source, captured 1 Nov 2026
Free plan
Not stated on the vendor’s pages as of 1 Nov 2026
Starting price
“Entry 3.900€ pro Jahr” (vendor’s words) source, captured 1 Nov 2026
Panel verdict
The AI panel rates OTOBO 3/5, the mean of 6 judges. OTOBO, from Rother OSS GmbH of Leiblfing, Germany (Amtsgericht Straubing, HRB 12744), is an open-source IT service management platform with published support tiers of Entry 3.900€, Professional 9.900€ and Enterprise 24.500€ pro Jahr, each with unlimited service agents and incidents. how scores are made
As of
Vendor pages captured 1 Nov 2026; evaluated by the panel 2 Nov 2026. all sources

OTOBO alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Change & Configuration Manager

Weighted verdict

Change and configuration manager at a regional bank that answers to BaFin and, since January 2025, to DORA. Chairs the weekly change advisory board and has to show an auditor who approved which change, which services it touched and which incident it caused. Wants change types with real approvals, risk read from a CMDB that knows how systems depend on each other, problem records tied to incidents, and an audit trail that can be exported.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Change & Configuration Manager

Panel median The Change & Configuration Manager This judge’s scores over the panel median. Each label opens its reasoning below.
Scores per criterion, in stars out of 5
Criterion Panel median The Change & Configuration Manager
Service desk, incidents & requests 3 of 5 3 of 5
Change, problem & release management 2 of 5 2 of 5
Assets, CMDB & discovery 3 of 5 3 of 5
Self-service portal & service catalog 3 of 5 3 of 5
Deployment, integrations & multi-client operation 3 of 5 3 of 5
European sovereignty 3.5 of 5 3.5 of 5
Pricing transparency 3 of 5 3 of 5

Service desk, incidents & requests

How this is scored

How tickets come in and get resolved: intake by email, portal, chat, phone and Microsoft Teams or Slack, incidents and service requests told apart, categories, priorities and an impact-urgency matrix, assignment rules and queues, SLAs with escalation and business hours, major incidents, templates and canned responses, a knowledge base for agents, automations and workflows, time tracking on tickets, and reports and dashboards on volume, resolution time and SLA compliance.

0 — Not a ticketing or service desk product; requests cannot be recorded and worked in it.

3 — Tickets from email and a web form with status, priority and assignment; SLAs, automation and reporting are basic or not described.

5 — Multi-channel intake (email, portal, chat or Teams), incidents and service requests told apart, assignment rules and queues, SLAs with escalation and business hours, an agent knowledge base, rule-based automations, and standard reports on volume, resolution time and SLA compliance.

8 — A visual workflow builder for any ticket type, major incident handling with communication to affected users, SLAs per service, customer and contract, skills- or load-based routing, time tracking on tickets, AI suggestions or classification with what they do stated, custom dashboards and scheduled reports, and a mobile app for agents.

10 — A service desk an organisation of thousands runs on: every workflow, form and SLA configurable without code and versioned, omnichannel intake with one history per requester, AI features documented with their data use and limits, operational level agreements and underpinning contracts tracked, and every report reproducible from an exportable ticket history.

Report an error

The Change & Configuration Manager

Intake by email, phone and portal with automatic prioritisation, routing and SLA assignment, calendar-based multi-level escalations, master/slave bundling for major incidents with automatic notification of affected creators, an agent knowledge base, CSAT surveys and KPI dashboards are all documented, and a free load-balancer add-on distributes tickets by workload, priority and service capability. We found no public information on time tracking, AI assistance or an agent mobile app, and the workflow engine itself is listed only as planned, which holds this below the top band. 3 7 12 20

Report an error

Change, problem & release management

How this is scored

The ITIL processes behind the ticket: problem records linked to incidents with root cause and known errors, change requests with standard, normal and emergency types, risk and impact assessment, approvals and a change advisory board, a change calendar with blackout periods, release and deployment records, links between changes, problems, incidents and configuration items, process certifications (PinkVERIFY, PeopleCert/AXELOS) named with their scope, and audit trails that a regulated buyer can show an auditor.

0 — No change or problem management of any kind; only tickets.

3 — A change or problem ticket type with a status and an approval step; change types, risk, calendar and links to incidents are basic or not described.

5 — Problem records linked to incidents with root cause and known errors, change requests with standard, normal and emergency types, multi-step approvals, a change calendar, changes linked to incidents and configuration items, and an audit trail of who approved what.

8 — Risk and impact assessment that reads affected services from the CMDB, a CAB workflow with agenda and decisions recorded, blackout periods and collision detection on the change calendar, release management with deployment tasks, change templates for standard changes, and an ITIL process certification named with the processes it covers.

10 — Change and problem management a regulated organisation can be audited on: every process configurable and versioned, change success and failure rates reported, a full trail from incident through problem and change to release exportable, the mapping to ISO/IEC 20000, ITIL 4 or DORA requirements documented, and certifications published with their scope and date.

Report an error

The Change & Configuration Manager

Change and problem management are named modules tied to incident management, CIs can be mapped to incidents, problem tickets and changes, multi-step approval processes and tamper-proof auditable logging are documented. We found no public information on change types such as standard, normal or emergency, risk assessment reading affected services from the CMDB, a change calendar, a CAB or known-error records, and a forum thread locates change documentation only in the ITSM change package. 3 8 11 13 15 18

Report an error

Assets, CMDB & discovery

How this is scored

What the product knows about the things tickets are about: an asset inventory of hardware, software and licences, a CMDB with configuration item types, attributes and relationships, a service map or dependency view, agent-based or agentless discovery, imports and synchronisation from Active Directory, Entra ID, Intune, SCCM, JAMF or a discovery tool, software licence compliance, contracts, warranties and the asset life cycle, and assets linked to users, tickets and changes.

0 — No asset or configuration data at all; tickets cannot be linked to devices or services.

3 — A list of assets with basic fields that can be linked to a ticket; relationships, discovery and licences are basic or not described.

5 — An asset inventory of hardware and software, a CMDB with configurable CI types and relationships, network discovery or an inventory agent, an import or sync from Active Directory or Entra ID, contracts and warranties per asset, and assets linked to users, tickets and changes.

8 — A visual service and dependency map used for impact analysis, discovery documented for named platforms (Windows, macOS, Linux, network devices, cloud accounts), connectors to named sources (Intune, SCCM, JAMF, VMware, AWS, Azure), software licence compliance and metering, the full asset life cycle from purchase to disposal, and data quality rules for the CMDB.

10 — A CMDB an organisation can trust for audits and outages: a documented data model with reconciliation of several sources, CI history and change tracking, service models from business service to infrastructure, licence optimisation for named vendors, and every CI and relationship exportable and reachable by API.

Report an error

The Change & Configuration Manager

The integrated open-source CMDB ships with predefined, extendable CI classes for location, infrastructure, network, software, contract and workplace, a YAML editor, relationships from CIs to incidents, problems, changes, users and services, a relationship tree, the full lifecycle from procurement to retirement, and continuous import via REST/SOAP from auto-discovery, inventory, asset management, directory services and product databases. What I would need for outage and audit decisions — a service map used for impact analysis, discovery documented per platform, licence compliance and CMDB data-quality rules — we found no public information on. 4 15

Report an error

Self-service portal & service catalog

How this is scored

What employees or clients see: a self-service portal with the service catalog, request forms with fields and approvals per service, ticket status and history for the requester, a searchable knowledge base for end users, announcements and outage notices, a virtual agent or chatbot, password reset or other automated fulfilment, branding and languages, single sign-on for the portal, access from Teams or a mobile app, and satisfaction surveys.

0 — No portal or end-user access of any kind; requests can only be emailed or phoned in.

3 — A web portal where users open tickets and see their status; a catalog, knowledge base and approvals are basic or not described.

5 — A branded portal with a service catalog, request forms with approval steps, an end-user knowledge base with search, ticket status and history, announcements, single sign-on, several languages, and satisfaction surveys after resolution.

8 — A service catalog with conditional forms, costs and delivery times per item, automated fulfilment for named requests (password reset, software install, onboarding), a virtual agent in the portal and in Teams or Slack, deflection measured, portals per client or department, and accessibility (WCAG) stated.

10 — A portal that runs as the front door of the organisation: catalog, forms and fulfilment built without code and reused across IT, HR and facilities, the virtual agent documented with its sources and data use, deflection and satisfaction reported per service, and accessibility conformance published with its level.

Report an error

The Change & Configuration Manager

The portal is documented with a catalog spanning IT, HR, facilities and fleet, entitlement-based visibility, runtime-generated forms per request type, multi-step approvals, ticket status and history for requesters, keyword-driven knowledge base suggestions, a news ticker for major disruptions, single sign-on and automatic CSAT surveys. We found no public information on portal languages, a virtual agent, automated fulfilment such as password reset, or accessibility conformance. 3 5 17 18

Report an error

Deployment, integrations & multi-client operation

How this is scored

How the product is run and connected: a cloud edition and an on-premise or open-source edition with feature parity stated, system requirements and update cadence, a documented REST API and webhooks, integrations with Microsoft 365, Teams, Entra ID, Slack, monitoring tools, RMM and remote support tools, single sign-on (SAML, OIDC) and SCIM, roles and permissions, multi-client or multi-tenant operation with separated data for MSPs, time and contract billing for MSPs, a migration path from other tools, and a public status page.

0 — No documented way to run, connect or administer the product.

3 — Runs as one edition with user roles and an email connection; the API, integrations and other editions are basic or not described.

5 — A documented REST API, integrations with Microsoft 365, Teams and Entra ID or Active Directory, single sign-on, role-based permissions, at least one monitoring or remote support integration, and either an on-premise edition or a stated hosting model with uptime terms.

8 — Cloud and on-premise or open-source editions with feature parity stated, webhooks and an integration marketplace, SCIM provisioning, multi-tenant operation with separated client data for MSPs, time and contract billing, named RMM and monitoring connectors, a documented migration from named tools, and a public status page with uptime history.

10 — Operation at scale and on the customer's terms: open-source code under a named licence or a self-hosted edition with full parity, configuration as code or a staging-to-production transport documented, an API covering every object, high availability and disaster recovery documented, and SLA and support terms published.

Report an error

The Change & Configuration Manager

On-premise operation and a managed cloud service are both offered, the software is 100 per cent open source and installable via Docker with public multilingual documentation, and the OTRS migration path is documented down to version handling, database switches and scheduling; REST/SOAP APIs, Active Directory and LDAP authentication, single sign-on, two-factor, roles, groups and ACLs, multi-client visibility restrictions and an enterprise high-availability cluster are evidenced. We found no public information on webhooks, SCIM provisioning, named monitoring or remote-support connectors, or a public status page. 5 6 7 8 17 19

Report an error

European sovereignty

How this is scored

Who the contracting entity and the parent company are, where tickets, attachments, user directories and CMDB data are stored and processed, and who the subprocessors are (hosting, email delivery, AI features, support and payment tools). Independently sourced by the sovereignty pipeline; a service desk holds personal data about every employee and often credentials and network details, so the whole chain counts, not only the database. An on-premise or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.

0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.

3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.

5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (email delivery, AI features, support access, payment) run through non-EU providers without a stated safeguard, or the vendor is non-EU with an EU data centre option.

8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5, SOC 2) stated — or an on-premise edition documented that keeps every record on the customer's own servers.

10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.

Report an error

The Change & Configuration Manager

The vendor is a German GmbH registered at Amtsgericht Straubing, its own servers for website, email and support portal run in Germany and Switzerland, subprocessors are named with locations and signed data processing agreements (Rapidmail exclusively in Germany, Google, hosting providers), and a documented on-premise open-source edition keeps records on our own servers — the path a bank under DORA would take. We found no public information on where the managed cloud service processes customer data, no stated security certification such as ISO 27001 or BSI C5, and the privacy policy is dated December 2019. 7 9 10 19 20

Report an error

Pricing transparency

How this is scored

Whether a buyer can compute the real annual cost from public pages alone: price per agent, technician or analyst and tier, whether requesters and portal users are free, what counts as an asset or node and how it is priced, which modules (CMDB, change, asset discovery, AI, ESM) cost extra, the on-premise licence or subscription and its maintenance, the free or open-source edition and paid support, minimum term, onboarding and setup.

0 — No public prices at all; every customer is a sales call.

3 — A starting price or a free edition exists, but how cost scales with agents, assets or modules is unclear.

5 — Tiers are public with their price per agent and main inclusions, but at least one commonly needed piece (asset packs, CMDB or discovery, AI features, on-premise licence, onboarding) is unpriced or "on request".

8 — Every tier priced publicly with its scaling rule (agents, assets, clients), add-ons and asset packs priced, the on-premise licence and maintenance or the open-source support plans priced, minimum term and VAT treatment stated.

10 — Complete price computability: annual cost derivable for a given number of agents, assets and modules, cloud or on premise, with every add-on, setup, training, support and overage fee and the cancellation and data-return terms published.

Report an error

The Change & Configuration Manager

All three support tiers are published as flat annual figures — Entry 3.900€ pro Jahr, Professional 9.900€ pro Jahr, Enterprise 24.500€ pro Jahr — with unlimited agents and incidents, per-tier support hours, response times and service-request quotas, while the software itself, the add-ons and forum support are free of charge and pricing is explicitly not agent-based. We found no public information on minimum term, VAT treatment, onboarding, the cost of exceeding a service-request quota, or pricing for the managed service. 6 7 11 12 20

Report an error

European sovereignty — proven facts

0 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Hosting location Not determined ⚠ unverified — uncited Report an error
Hosting options Not determined ⚠ unverified — uncited Report an error
Open source Not determined — uncited Report an error
Data processing agreement Not determined — uncited Report an error
Transfer impact assessment Not determined — uncited Report an error

Questions about OTOBO

Is OTOBO European?

Yes. whats-best.ai classifies OTOBO as EU-Made.

Where does OTOBO store data?

The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention Germany and Switzerland as hosting locations, per the vendor’s page captured 1 Nov 2026.

Does OTOBO have a free plan?

Not stated on the vendor’s pages as of 1 Nov 2026.

What are the best alternatives to OTOBO?

As of 2 Nov 2026, the panel rates ManageEngine ServiceDesk Plus (3.5/5), Xurrent ITSM (3/5) and GLPI (3/5) highest among the other 14 IT Service Management products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is GLPI (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: OTOBO alternatives.

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Do you know more about OTOBO? Tell us Report an error on this page

Sources (20)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor homepage otobo.io Checked 1 Nov 2026 Details →
  2. 2 Features page (ITSM) otobo.io Checked 1 Nov 2026 Details →
  3. 3 Features page (incident management) otobo.io Checked 1 Nov 2026 Details →
  4. 4 Features page (CMDB) otobo.io Checked 1 Nov 2026 Details →
  5. 5 Features page (self-service portal) otobo.io Checked 1 Nov 2026 Details →
  6. 6 Download page (open-source edition) otobo.io Checked 1 Nov 2026 Details →
  7. 7 Support plans page (no prices) otobo.io Checked 1 Nov 2026 Details →
  8. 8 Security / trust page otobo.io Checked 1 Nov 2026 Details →
  9. 9 Legal notice otobo.io Checked 1 Nov 2026 Details →
  10. 10 Privacy policy otobo.io Checked 1 Nov 2026 Details →
  11. 11 Service desk, incidents & requests — found from sitemap otobo.io Checked 1 Nov 2026 Details →
  12. 12 Service desk, incidents & requests — found from sitemap otobo.io Checked 1 Nov 2026 Details →
  13. 13 Change, problem & release management — found from sitemap otobo.io Checked 1 Nov 2026 Details →
  14. 14 Change, problem & release management — found from sitemap otobo.io Checked 1 Nov 2026 Details →
  15. 15 Assets, CMDB & discovery — found from sitemap otobo.io Checked 1 Nov 2026 Details →
  16. 16 Assets, CMDB & discovery — found from sitemap otobo.io Checked 1 Nov 2026 Details →
  17. 17 Self-service portal & service catalog — found from sitemap otobo.io Checked 1 Nov 2026 Details →
  18. 18 Self-service portal & service catalog — found from sitemap otobo.io Checked 1 Nov 2026 Details →
  19. 19 Deployment, integrations & multi-client operation — found from sitemap otobo.io Checked 1 Nov 2026 Details →
  20. 20 Deployment, integrations & multi-client operation — found from sitemap otobo.io Checked 1 Nov 2026 Details →