Bugzilla

Overview

Bugzilla is a free, open-source defect tracker for bugs, issues, enhancements, and other change requests. It is best suited to software organizations that can operate a server and want precise control over workflow and visibility. The trade-off is clear: there is no license fee, but deployment, administration, and support remain with your organization and its community.

Key features

Search combines basic full-text lookup with advanced and time-based queries, making it practical to find a specific defect or build a filtered queue for ongoing work. Users can select which bug-change emails they receive, and scheduled search reports can be delivered as frequently as every fifteen minutes. Teams can therefore tailor notification volume instead of forcing every participant into the same stream.

Administrators can define workflows, statuses, resolutions, and fields, then extend an installation with templates and extensions. This is a substantial advantage for organizations whose review or release process does not fit a fixed template. It also means someone must design, maintain, and govern those customizations; teams wanting a managed, ready-configured service should look elsewhere.

Bug data can produce tables, graphs, and reports, with CSV export for downstream analysis. XML-RPC and JSON-RPC web services support integrations, while Patch Viewer connects with LXR, CVS, and Bonsai. Those interfaces are especially relevant to development groups that need tracker data in existing tools rather than in an isolated application.

Groups can restrict who views or edits bugs, and an insider group can mark attachments and comments private. The project describes Perl taint mode, SQL-injection defenses, cross-site-scripting protections, concealment of group-restricted information, and account locking after several failed password guesses. These controls support sensitive engineering work, although the security and privacy outcome still depends on competent operation of your own server.

Authentication can use Bugzilla's built-in database, LDAP, or web-server methods. Supported databases include MySQL, PostgreSQL, and Oracle, giving organizations options that fit existing infrastructure. Custom workflows, roadmaps, and time tracking are also supported.

Pricing

Bugzilla — free (free and open source; self-hosted server software). This is the complete software at no license cost, with no paid tier described. The apparent saving must be weighed against server hosting, upgrades, configuration, backups, and internal administration. Community support comes through a mailing list and chat rooms; the project does not directly provide commercial support. It is a strong financial fit for organizations with operational expertise, but less suitable when a team needs a vendor accountable for uptime or support response.

Platforms

Bugzilla is web-based and runs on self-hosted deployments across Linux, macOS, and Windows environments. API access is provided through XML-RPC and JSON-RPC services. Because it must be installed on your own server, the platform list describes deployment options rather than a hosted subscription with vendor-managed infrastructure.

Who it's for

Choose Bugzilla when a software organization needs configurable defect workflows, custom fields, controlled visibility, reporting, and integration with established development systems. It also fits teams that already operate compatible databases or authentication services and can take responsibility for maintenance. It is a poor match for buyers seeking a turnkey cloud tracker, direct commercial support, or minimal administration.

Pros and cons

Pros

• No software charge: the free, open-source plan removes per-seat licensing costs.
• Deep process control: administrators can tailor statuses, resolutions, fields, workflows, templates, and extensions.
• Useful reporting and automation: graphs, tables, CSV export, scheduled reports, and frequent email delivery support operational review.
• Granular visibility: groups and insider privacy controls can separate sensitive bugs, comments, and attachments.
• Integration flexibility: APIs and Patch Viewer links support programmatic and development-tool workflows.

Cons

• Self-hosting required: your organization must run and maintain the server rather than relying on a managed service.
• Community-only support: assistance comes through mailing lists and chat, with no direct commercial support from the project.
• Administrative overhead: extensive customization is valuable but requires people to configure and govern it.

Alternatives

Game Bug Tracking Software is the relevant category list for comparing tools focused on game-development defect work.

Issue Tracking Software is the broader category to consult when your needs extend beyond software bugs.

Linear is the better choice for a hosted, multi-platform workflow with a free plan for unlimited members, two teams, and 250 issues, plus paid expansion.

YouTrack suits teams wanting a hosted option, including a free cloud tier for up to 10 users with 30 GB of storage.

Backlog is preferable when a hosted freemium product, Git and Subversion support, and a free tier for 10 users, one project, and 100 MB are priorities.

MantisBT is another free, open-source, self-hosted bug tracker.

Trac is a free, open-source project tool deployed on your own server.

Launchpad is a free option for open-source projects, with commercial plans also offered.

Redmine provides free, GPL v2 open-source self-hosted project management.

Roundup is free software with an MIT license except for noted bundled components.

Verdict

Bugzilla is a strong recommendation for technically capable software organizations that want highly configurable defect tracking, granular access control, and integration without license fees. Look elsewhere if you need hosted convenience, vendor-backed support, or an implementation that requires little ongoing administration.