BookStack vs Wiki.js vs Outline

BookStack suits teams that want a fixed shelf and book structure under MIT, Wiki.js suits Git-backed and many-provider setups, and Outline suits teams that accept the Business Source License and can run PostgreSQL and Redis.

On this page

Which self-hosted wiki fits your team: BookStack, Wiki.js or Outline

A team that must host its own documentation and needs a wiki now should decide on three things first: the license terms it can accept, the authentication it must support, and the upkeep it can actually staff. All three tools are viable, and the right choice usually follows from those constraints rather than from feature lists. BookStack fits teams that want MIT licensing with no edition gates on core features and a fixed model of shelves, books, chapters and pages that is easy to explain to non-technical editors. Its supported sign-in options are OIDC, SAML2 and LDAP, and it runs on PHP 8.2 or later with MySQL 8.0 or MariaDB 10.6 or later.

Wiki.js 2.x fits teams that want Git storage sync, a broad list of authentication modules including Keycloak, Okta and generic OpenID, and a choice of database that includes PostgreSQL, which the project recommends. It needs a dedicated domain or subdomain and cannot be mapped to a subfolder, and teams should pin to the stable 2.x line because the 3.0 code in the main repository is beta and not for production use. Outline fits teams that value a modern editor and can accept the Business Source License terms, which bar offering the software as a hosted service to third parties, and that can pay for a Business or Enterprise license if they need SAML. Confirm with the vendor and your legal team how those license terms apply to your use before you commit to any of the three.

Which wiki fits which team situation

This table matches common team situations to the wiki that fits each one best, with the supplied fact behind each choice. Read each row against your own constraints, and treat the confirm notes as items to check before you shortlist.

Team situationBest fitReason and what to confirm
MIT-only licensing policyBookStackBookStack is MIT licensed. Wiki.js is AGPL-3.0 and Outline's community edition is under the Business Source License, which is not OSI-approved. Confirm your policy covers copyleft and source-available terms.
Content must sync to GitWiki.jsWiki.js storage modules include Git, and some modules such as Git synchronize content in both directions. Confirm the sync direction and conflict handling you need in a test instance.
SAML without a paid tierBookStackBookStack supports SAML2 in its listed sign-in options. Outline limits SAML to its Business and Enterprise editions. Confirm the BookStack SAML setup against your identity provider.
No PostgreSQL or Redis skills on the teamBookStackBookStack requires PHP 8.2 or later with MySQL 8.0 or MariaDB 10.6 or later. Outline requires PostgreSQL 14+ and Redis 4+, and its docs say it requires dev-ops experience in production.
Strict shelf, book and chapter structureBookStackBookStack organizes content into shelves, books, chapters and pages. Wiki.js and Outline use different content models, so confirm whether your hierarchy maps cleanly.
Need Outline's collaborative editing and Notion importOutlineOutline's Notion importer is available in all editions from v0.83.0. Confirm that Outline's BSL terms suit your use, since hosting it as a service is prohibited.
Email and password sign-in onlyWiki.jsWiki.js lists LDAP, SAML 2.0, OIDC and TOTP two-factor options, while Outline does not support email and password natively. Confirm whether local accounts are acceptable for your environment.
Air-gapped or offline deploymentWiki.jsWiki.js supports sideloading files for environments without internet access and runs on Linux, Docker and Kubernetes. Confirm sideloading covers every extension and asset you rely on.

How BookStack, Wiki.js and Outline structure content differently

BookStack organizes content in a fixed hierarchy: shelves contain books, books contain chapters, and chapters contain pages. That fixed nesting is the first thing to map when you move documentation in. Each source system's folders, spaces or page trees have to be reshaped into shelves, books and chapters before import, and content that does not fit the hierarchy will need a decision: flatten it, split it, or leave it in the old system. BookStack's role and permission system is applied at these levels, so a shelf, book or chapter that holds sensitive material should be designed deliberately rather than left to inherit whatever the import produced. Confirm the exact permission inheritance behavior against the BookStack documentation for the version you plan to run.

Wiki.js uses a page tree backed by a storage module, and the storage layer is where its content model gets interesting for operators. The supplied documentation lists Git, AWS S3 and DigitalOcean Spaces as storage modules, and states that some modules, such as Git, synchronize content in both directions. That makes a Git-backed Wiki.js a realistic option for teams that want pages reviewed like code, but it also means the repository becomes part of your operating model: who can push, how conflicts are resolved and how the database and repository stay consistent are questions to settle before go-live. Confirm how each storage module handles page paths, attachments and deletions, because those details decide how cleanly content can be moved out again.

Outline is organized around collections, with documents placed inside them and nested as the team needs. Its permission model is built on that collection structure, so the grouping you choose affects who can see and edit material, not just how it looks in the sidebar. Outline's documentation includes a Notion importer available in all editions from v0.83.0, which is useful if your source is Notion, but it does not remove the need to map collections and access rules by hand. Because Outline's community edition is under the Business Source License, the structure you build is still yours to keep, yet any future move to a different wiki will depend on export options you should verify before committing. In each case, sketch the target hierarchy and permission boundaries on paper first, then test one representative space end to end.

Side-by-side capability: license, auth, editors and dependencies

This table compares the license, current release, database needs, editors, sign-in options, MFA, storage, integrations and deployment target of each wiki. Where the supplied facts do not cover a capability, the cell tells you what to confirm with the vendor. The main takeaway is that BookStack and Wiki.js 2.x are fully open source, while Outline's community edition is source-available and gates SAML behind paid editions.

CapabilityBookStackWiki.jsOutline
LicenseMIT licensedAGPL-3.0 for the stable 2.x lineBusiness Source License 1.1, not OSI-approved open source
Current releasev26.09.1, published September 29, 20262.5.316, published October 2, 2026; 3.0 is beta and not for productionv1.11.0, published October 12, 2026
Database requirementsPHP 8.2 or later with MySQL 8.0 or MariaDB 10.6 or laterPostgreSQL recommended; also MySQL 8.0 or later, MariaDB, MS SQL and SQLitePostgreSQL 14 or later and Redis 4 or later are required
EditorsWYSIWYG editor, optional Markdown editor, built-in diagrams.net diagramsNot covered in the supplied facts; confirm editor options with the vendorNot covered in the supplied facts; confirm editor options with the vendor
Authentication methodsOIDC, SAML2 and LDAP sign-inAzure AD, GitHub, Google, Keycloak, LDAP and AD, generic OIDC and OAuth2, Okta, SAML 2.0Google, Microsoft Entra, Slack, OIDC, Discord, GitLab, passkeys, email magic link; SAML only in paid editions
Multi-factor authenticationBuilt-in MFA that can be enforced per roleTOTP two-factor authenticationNo email and password login; confirm built-in MFA options with the vendor
StorageNot covered in the supplied facts; confirm storage options with the vendorGit (synchronizes both directions for some modules), AWS S3, DigitalOcean SpacesLocal or S3-compatible file storage
IntegrationsNot covered in the supplied facts; confirm API and plugin options with the vendorAuthentication and storage modules; no further integration list in the supplied factsGitHub, Linear, Figma, Slack, Jira and webhooks; Notion importer in all editions
Deployment targetOfficial installers for Ubuntu 22.04, 24.04 and 26.04; community Docker setups onlyAny platform that runs Node.js, including Docker and Kubernetes; needs a dedicated domainDocker or from source on Unix-compatible systems; needs a dedicated domain and DevOps experience

What is free and what is paid in each platform

BookStack is released under the MIT license, one of the most permissive open-source licenses in common use. Your organization can run it internally, modify it, and host it for internal users or customers without a license fee or a source disclosure obligation. The project is built on PHP and Laravel, was created by Dan Brown, and is developed with community contributors. Paid support plans and sponsorship are available from the maintainers, so the paid layer is a service rather than a gated edition.

  • License scope: MIT permits internal use, modification and redistribution with the copyright notice kept intact. Nothing in the supplied facts restricts offering BookStack to third parties.
  • Paid support: Support plans come from the maintainers. You pay for response and expertise, not for features.
  • Sponsorship: Sponsorship supports ongoing development and is optional.
  • No feature gating: The supplied facts show no paid edition that unlocks SSO, LDAP, MFA or role controls. OIDC, SAML2, LDAP, MFA and the permission system are listed for the product as released.
  • Recurring cost: Infrastructure, backups, PHP and database upkeep, and any support contract you choose are your costs.

Ask the vendor to confirm in writing that the support plan terms match your deployment size and that no future feature moves behind a paid tier.

What drives the running cost of each wiki

Running cost for these three wikis comes from the components each one needs beside the application, the release cadence you must absorb, and the identity and staff time around it. The cards below separate those drivers so you can ask each vendor or partner for the same line items.

Database and cache dependencies

BookStack runs on MySQL 8.0 or MariaDB 10.6 or later and needs no cache layer in its documented requirements. Wiki.js 2.x recommends PostgreSQL, and the PostgreSQL search module needs the pg_trgm extension. Outline needs PostgreSQL 14 or later and Redis 4 or later, so it adds a second stateful service to back up and patch. Ask who operates each database and cache, what backup and restore testing is included, and whether managed services are priced separately.

Memory and hosting footprint

Outline documents at least 512MB of memory, with 1GB or more recommended, and it needs a dedicated domain. Wiki.js on Linux needs at least 1 GB of RAM and also requires its own domain or subdomain, so it cannot sit under a subfolder of an existing site. Both can run in containers, but Outline also expects dev-ops experience in production. Compare the instance sizes, number of replicas and reverse proxy layers each quote assumes, not only the monthly host fee.

Upgrade and release-line management

Wiki.js 2.x is the stable line, while 3.0 remains a beta marked not for production use, so a 2.x deployment will eventually face a migration decision. Outline ships frequently, with v1.11.0 published on October 12, 2026, and its community edition sits under the Business Source License. BookStack publishes often as well, with v26.09.1 on September 29, 2026. Ask for the upgrade cadence you will carry, how major version moves are priced, and who tests each release against your identity provider.

Authentication provider cost

The sign-in method often sets the bill. BookStack supports OIDC, SAML2 and LDAP without a paid tier named in the supplied facts, and Wiki.js covers Azure AD, Okta, Keycloak, SAML 2.0 and LDAP among its modules. Outline has no email and password sign-in, relies on an external provider, and offers SAML only in its paid Business and Enterprise editions. Ask whether your identity provider licenses, directory sync and SAML features are included, and who maintains the integration after go-live.

Backups and restore testing

Each wiki stores its content in a database plus uploaded files, so backups must cover both. Outline can store files locally or in S3-compatible storage, and Wiki.js can sync content to Git or object storage in some modules, which changes what must be backed up and what can be rebuilt. Ask for the backup scope, restore test frequency, retention period and who signs off on recovery time, because these are recurring operating costs rather than one-time setup.

Staff time and support model

The largest recurring cost is often the person who patches, watches queues and answers questions. Outline's own hosting docs say production use requires dev-ops experience, while BookStack offers official installation scripts for Ubuntu and points to community Docker images, which shifts container support to your team. Ask whether a quote is one-time implementation or a retainer, which upgrades and incidents are covered, and how many hours per month are assumed for routine maintenance.

What implementing each wiki involves

BookStack is the lightest install to plan, with official installation scripts for Ubuntu 26.04, 24.04 and 22.04 and a requirement of PHP 8.2 or later with MySQL 8.0 or MariaDB 10.6 or later. BookStack does not publish official Docker images, so a container-based deployment means choosing a community setup such as LinuxServer.io and owning its image updates yourself. Wiki.js 2.x is the middle path: it runs on Node.js, needs a dedicated domain or subdomain because it cannot sit under a subfolder, and needs at least 1 GB of RAM on Linux. Its recommended database is PostgreSQL 9.5 or later, and the PostgreSQL search module needs the pg_trgm extension, so confirm that extension is permitted in your database environment before you commit. Outline is the heaviest install. Its requirements call for PostgreSQL 14 or later, Redis 4 or later, at least 512MB of memory with 1GB or more recommended, a dedicated domain, and an authentication provider configured before first use, and it runs only on Unix-compatible systems.

Authentication shapes the project plan more than any other step. BookStack supports OIDC, SAML2 and LDAP sign-in, and its role and permission system and MFA enforcement per role should be designed before users are imported. Wiki.js offers a broad set of modules, including Keycloak OpenID Connect, LDAP and Active Directory, SAML 2.0 and Okta, plus TOTP two-factor authentication, so the work is picking one identity source and testing group mapping against it. Outline does not support email and password sign-in at all, so an identity provider is a prerequisite rather than an optional add-on. SAML is only available in the paid Business and Enterprise editions, so if your identity provider requires SAML, ask Outline for a written confirmation of the edition and licence terms before scoping the install. Content import also differs. Outline's Notion importer is available in all editions from v0.83.0, while the other two need an export and conversion step that you should test on a copy of your documentation first.

Ongoing upgrades carry different risk for each wiki. BookStack's release cadence is visible on its GitHub releases page, with v26.09 on September 24, 2026 and v26.09.1 on September 29, 2026, and each upgrade is a PHP and database check as well as an application update. Wiki.js has a split line: the stable 2.x line is at v2.5.316 (October 2, 2026), while 3.0 is a beta marked not for production use, so plan an explicit migration decision rather than letting the package manager move you. Outline's hosting docs state that running it in production requires dev-ops experience, and that means your team needs to own Docker or source builds, database migrations and Redis operations. Ask any implementation partner for a written upgrade runbook, a named test environment and a rollback procedure, and confirm which of those steps are part of a fixed-scope delivery and which are part of an ongoing retainer.

How much effort and cost do self-hosted wikis really need

What drives the cost of running BookStack, Wiki.js or Outline yourself?

Your largest costs are people and infrastructure, not the software license, because all three platforms are free to self-host. Internal staff time covers installation, upgrades, backups, user administration and content migration. Infrastructure covers the application server, the database and, for Outline, Redis and file storage. BookStack needs PHP 8.2 or later with MySQL 8.0 or MariaDB 10.6 or later. Wiki.js 2.x recommends PostgreSQL and needs at least 1 GB of RAM on Linux. Outline needs PostgreSQL 14 or later, Redis 4 or later and at least 512MB of memory, with 1GB or more recommended. Each extra dependency adds patching and monitoring work. Paid support, hosting or a partner engagement adds recurring fees that you should price against your own staff hours.

Can an internal admin run BookStack or Wiki.js without outside help?

Yes, in most teams with a capable Linux administrator, but the answer depends on your environment and on how much you customize. BookStack provides official installation scripts for Ubuntu 26.04, 24.04 and 22.04, and it does not publish official Docker images, so you would rely on community Docker setups or the scripts. Wiki.js runs on Linux, macOS, Windows, Docker and Kubernetes, and it requires a dedicated domain or subdomain that cannot be mapped to a subfolder. Confirm that your admin can own the database, TLS certificates, reverse proxy and upgrade testing. Ask a partner to quote only the parts your team cannot cover in-house, such as an identity integration or a migration, and get that scope in writing before work starts.

Does the Business Source License stop us from using Outline internally?

The license restricts commercial hosting, not internal use. Outline's community edition is licensed under the Business Source License 1.1, which is not an OSI-approved open source license. Per the license file, it forbids using the software for a Document Service, which is a commercial offering that lets third parties create their own teams and documents. Outline's hosting docs also state that selling, reselling or hosting Outline as a service breaches the terms and terminates license rights. For internal documentation, the license terms are narrower than an open source license, so have your legal team read the LICENSE file against your specific use. The change license is Apache License 2.0 with a change date of October 12, 2030. Outline v1.11.0 was published on October 12, 2026.

How much does SAML availability change the choice between these wikis?

It can decide the choice if your identity team requires SAML 2.0 for every application. BookStack supports OIDC, SAML2 and LDAP sign-in in its platform. Wiki.js authentication modules include SAML 2.0, Keycloak OpenID Connect, LDAP and Active Directory, with TOTP two-factor authentication. Outline does not support email and password sign-in natively, and its SAML login is available only in the licensed Business and Enterprise editions. If your directory uses SAML and you do not want to pay for a license, Outline is unlikely to fit without a paid edition. Confirm the current SAML terms with Outline before you commit, and confirm the protocol support you need with each vendor in your own test environment.

How long does a wiki migration take, and what does it depend on?

Duration depends on content volume, structure, permissions and how much cleanup you accept, so no fixed timeline applies across all teams. The main drivers are the number of pages and attachments, whether you need to preserve page history, how well the source system maps to the target structure, and how many people must validate content afterward. Outline's Notion importer is available in all editions from v0.83.0, which helps only if your source is Notion. BookStack's book and chapter model needs a mapping exercise if your source uses flat or deeply nested pages. Ask any partner for a written migration scope that lists source systems, page counts, permission rules and acceptance tests before agreeing to a timeline.

Is Wiki.js 3.0 safe to run in production?

No. Wiki.js 3.0 is in beta, and its README marks it as not for production use. The stable line is Wiki.js 2.x, which lives in the requarks/wiki-v2 repository, where v2.5.316 was published on October 2, 2026. Choosing 2.x now means your team will need a future upgrade plan, because the project's roadmap beyond the current stable line should be confirmed with its maintainers. Ask whether a migration path from 2.x to 3.x will be documented before you commit, and budget time for testing that upgrade in a staging environment before it reaches users.

What should a partner need from our team before quoting a wiki project?

A partner needs a written scope built from facts your team can provide. Prepare a list of the target platform, hosting location, identity provider and protocols, expected user count, source systems, and any compliance evidence you must keep. Name an owner for approvals, data classification and cutover. DeployOpen plans, implements, integrates, hardens, backs up, upgrades and documents self-hosted open-source platforms inside your own infrastructure, and most engagements are fixed-scope with scope, deliverables and timelines agreed in writing before work starts. DeployOpen does not publish a price list, so a quote follows from that written scope. Ask for the scope in writing before work begins.

What recurring work should we budget for after the wiki goes live?

The recurring work is patching, backups, restore testing, certificate renewal, dependency upgrades and user lifecycle management. Each platform adds different items. BookStack requires you to keep PHP and the database current on a supported version. Wiki.js 2.x requires you to track releases from its repository and test upgrades. Outline requires you to maintain PostgreSQL, Redis and file storage, and its docs say it requires dev-ops experience to run in production. Estimate these hours from your own change calendar and recovery objectives. Ongoing support, upgrades and continuous testing are available from DeployOpen as retainers, which you can compare against an internal staffing plan.

What switching wikis later costs

Moving content out of any of these three wikis is a data model project, not a copy job, so the cost is set by how each platform stores pages, attachments, permissions and user identities. BookStack organizes content as shelves, books, chapters and pages, so a migration has to map that hierarchy onto whatever structure the target uses, and chapter-level ordering and shelf grouping rarely survive a direct transfer. Wiki.js stores pages as its own entries and can synchronize content with a Git storage module, which can make the page source easier to carry, but its export and import paths depend on the storage module and the version you run. Outline uses its own document model with collections and nested documents, and its importers are a separate question from its exports. Before any work starts, ask the vendor or your own team to confirm which export formats each platform offers in your version, how attachments and embedded diagrams are packaged, and whether page history is preserved.

Permissions and identities are where switching costs usually grow. BookStack's role and permission system, Wiki.js's authentication modules and Outline's sign-in providers each tie access to a different identity source, so a move means re-creating roles, groups and access rules on the target and re-linking every user account, including MFA enrollment. Outline's community edition does not support email and password sign-in and its SAML login sits in paid editions, which can force an identity change in addition to a content change. Write the switch as a scoped document before work starts: list the content types and volumes in scope, the export and import method for each, the permission model to rebuild, the identity mapping, the cutover window and the redirects for old links. A written scope is also what lets you compare fixed-scope quotes from an implementation partner on equal terms.

How DeployOpen helps choose and implement a team wiki

DeployOpen plans, implements, customizes, integrates, hardens, backs up, upgrades, documents and supports self-hosted open-source platforms inside your own cloud accounts, data centers or air-gapped networks. For a choice between BookStack, Wiki.js and Outline, that means testing each candidate against your identity provider, content structure and hosting constraints before any platform is committed to.

How we scope

  • Written scope names the candidate platforms, the authentication method you need, and the storage and database targets.
  • Scope records which features depend on a paid edition, such as Outline SAML, so licensing is settled before build.
  • Engagements are fixed-scope, with deliverables and timelines agreed in writing before work starts.

How we build

  • We stand up a test instance of the shortlisted wiki in your environment, using your SSO provider and sample content.
  • We check editing, page structure and permission rules against the way your teams write and organize documentation.
  • We confirm dependencies such as MySQL or MariaDB for BookStack, PostgreSQL and Redis for Outline, or Git sync for Wiki.js.

How we hand over

  • Deliverables include installation, configuration and integration documentation written for your administrators.
  • We document backup and restore steps for the database, file storage and any attachments the chosen platform uses.
  • Handover covers upgrade procedures, including how each platform's release line and license terms affect future upgrades.

How we support

  • Ongoing support, upgrades and continuous testing are available as retainers after the initial handover.
  • Retainers can cover version upgrades, such as tracking Wiki.js 2.x while 3.0 remains in beta, and reviewing security updates.
  • Ask any provider to confirm support windows, update responsibilities and backup ownership in writing before signing.

Sources and further reading

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.