ownCloud
German maker of self-hosted, EU-sovereign file sync and sharing software for regulated organizations.
On the record
Checkpoint: Kiteworks' promised OSPO transparency report comparing contribution and adoption trends to Nextcloud
The call
ownCloud still holds real customers like CERN and Bavarian schools, but Kiteworks is running it lean while Nextcloud, its own fork, takes the sovereignty market it once led.
ownCloud lets organizations in Europe and other countries host their own file-sharing system on their own servers, which keeps their data away from U.S. cloud companies like Microsoft and Google. This market is real and growing because some governments and companies are not allowed by law to use American cloud services. However, Nextcloud, a competitor that started as a copy of ownCloud's own code in 2016, has built a stronger community, more features, and has won over major European government customers. The company's new owner, Kiteworks, has been shrinking ownCloud's team and selling off products instead of investing to compete, which suggests ownCloud may have become a cash business rather than a growth priority. The question is whether Kiteworks will turn this around with real investment or continue harvesting what remains.
Why
01
AI pressure: None apparent. No AI product is directly displacing ownCloud yet, but AI features baked into Nextcloud or Microsoft's sovereign clouds could widen the gap fast. Could AI do the core job? Only partly.
02
Bigger players: Nextcloud (fork of ownCloud's own codebase) and Microsoft/Google sovereign cloud offerings. Nextcloud, built from ownCloud's old code, is winning EU government deals like Schleswig-Holstein while ownCloud is folded into Kiteworks and shrinks. Could a giant copy it? No, they are blocked.
03
What protects it. EU data sovereignty rules and the US CLOUD Act still keep Microsoft and Google out of the strictest regulated deployments, leaving room for on-prem players.
What would change this call
Kiteworks publishes (or skips) the promised Q1 2027 OSPO transparency report on ownCloud contributions. Shows whether ownCloud is funded for growth or just maintained for cash.
A marquee EU public institution picks ownCloud over Nextcloud for a new sovereign-cloud contract. Would show ownCloud reclaiming ground in its core sovereignty niche.
Further product or business-unit handoffs from ownCloud/Kiteworks similar to the July 2025 BW-Tech transfer. Would confirm continued shrinking rather than reinvestment in ownCloud.
A marquee EU public institution picks ownCloud over Nextcloud for a new sovereign-cloud contract. Would show ownCloud reclaiming ground in its core sovereignty niche.
Further product or business-unit handoffs from ownCloud/Kiteworks similar to the July 2025 BW-Tech transfer. Would confirm continued shrinking rather than reinvestment in ownCloud.
Key numbers
- Kiteworks raised $456M at $1B+ valuation
- Estimated 2024 revenue ~$9.7M, up from $5.3M
- Headcount fell to ~55-60 from ~70
Named risks
- History of critical exploited vulnerabilities including CVSS 10.0 flaw added to CISA KEV in Nov 2023.
- Losing category leadership to its own 2016 fork Nextcloud in EU public-sector wins.
- Headcount flat to declining under Kiteworks ownership since Nov 2023 acquisition.
- Further product unbundling after July 2025 BW-Tech SMB divestiture.
- No shipped customer-facing AI feature as of July 2026, risking erosion to hyperscaler AI copilots.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Nextcloud | losing to | Won EDPS and Schleswig-Holstein deployments away from SharePoint/ownCloud, reported May 2026 |
| Microsoft (OneDrive/SharePoint) | contesting | Barred by CLOUD Act from full EU sovereignty play but narrowing gap via sovereign cloud offerings |
| Google Workspace | contesting | Same structural CLOUD Act barrier as Microsoft in EU sovereignty market |
| Seafile | contesting | Positioned as lower-maintenance, higher-performance pure file-sync alternative, comparisons through mid-2026 |
| FileCloud | contesting | Frequently benchmarked against ownCloud in enterprise private-cloud comparisons through late 2025 |
Questions people ask
- Who owns ownCloud now?
- U.S. cybersecurity firm Kiteworks acquired ownCloud GmbH in November 2023, alongside sister buys DRACOON and Maytech, as part of its European sovereignty push. Kiteworks itself raised $456M at a $1B+ valuation in August 2024 from Insight Partners and Sixth Street.
- Is ownCloud losing to Nextcloud?
- Yes. Nextcloud, a 2016 fork of ownCloud's own codebase by co-founder Frank Karlitschek, has surpassed ownCloud in community size and app ecosystem (400+ apps) and won marquee EU public-sector deals like the European Data Protection Supervisor and Schleswig-Holstein's SharePoint switch, reported May 2026.
- Could AI replace ownCloud's file-sync product?
- Basic file sync is commoditized and AI-agnostic, and as of July 2026 ownCloud has shipped no customer-facing generative-AI feature itself; parent Kiteworks shipped an AI Data Gateway in October 2024 at the platform level, leaving ownCloud's product exposed to Microsoft and Google AI-integrated copilots.
- Has ownCloud had major security incidents?
- Yes. In November 2023 a CVSS 10.0 flaw (CVE-2023-49103) in ownCloud's graphapi was actively exploited in the wild and added to CISA's Known Exploited Vulnerabilities list. Further incidents followed: a January 2026 credential-theft report and a March 2026 supply-chain compromise via the Trivy scanner (CVE-2026-33634).
- What is ownCloud's biggest competitor?
- Nextcloud, a direct 2016 fork of ownCloud's own original codebase, is its closest and most damaging rival, reportedly ahead in community velocity, app marketplace size, and EU public-sector wins as of mid-2026, despite sharing the same technical lineage.
- Is ownCloud growing or shrinking under Kiteworks?
- Signals point to consolidation, not scaling: headcount has trended flat to down since the November 2023 Kiteworks acquisition, and in July 2025 ownCloud's consumer/SMB SaaS line, ownCloud.online, was handed off entirely to BW-Tech GmbH.
Timeline
- 2026-07-05oCIS v8.1 released and Server 11.0.0 release candidate ships, dropping PHP 7 support
- 2026-05-20Kiteworks launches formal OSPO for ownCloud, relicenses 100+ projects to Apache 2.0
- 2026-03-31Trivy scanner supply-chain compromise (CVE-2026-33634) hits ownCloud build infrastructure
- 2026-01-31Hudson Rock reports credential-theft incident affecting ownCloud users
- 2025-07-16ownCloud.online SMB SaaS operation transferred to BW-Tech GmbH
- 2025-03Kiteworks acquires Zivver, expanding its roll-up of adjacent security vendors
- 2024-08-16Kiteworks raises $456M from Insight Partners and Sixth Street at $1B+ valuation
- 2023-11-29CVSS 10.0 ownCloud graphapi flaw (CVE-2023-49103) exploited, added to CISA KEV
- 2023-11Kiteworks acquires ownCloud GmbH along with DRACOON and Maytech
- 2011ownCloud incorporated as a company after 2010 open-source project launch
Revision history
23 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Learn more about the ownCloud team (2026-05-05)
- DRACOON Will Become Part of the Kiteworks Group
- Cybersecurity unicorn Kiteworks snaps $465M at over $1B valuation (2024-08-16)
- Products, Competitors, Financials, Employees, Headquarters Locations (2026-05-07)
- Cloud Storage made to trust (2026-06-14)
- $9.7M ARR, $9.7M Raised (2024-12-22)
- OwnCloud (2026-05-25)
- The Israeli team that led cyber company Kiteworks to a $1B valuation (2024-08-14)
- ownCloud (2014-04-09)
- ownCloud Security Rating, Vendor Risk Report, and Data Breaches (2026-07-13)
- ownCloud Infinite Scale releases (2026-07-05)
- What happens when you fork twice, get acquired, and keep shipping anyway (2026-04-22)