Should You Use an Open Source CMS for Your Website?


Open Sources CMS graphic

So you want a new website and you need to choose a content management system (CMS)—a software platform that lets you easily manage and run your website. You’ve heard a lot about choosing an “open-source” CMS, but what does that even mean?

Basically, an open source CMS is a content management system built with source code that is accessible to all rather than being owned and managed by a single company. Anyone can use or modify it to create whatever functionality they desire.

As of December 2021, there were more than 71 million live websites using a CMS, and approximately 74% of those websites are built on an open source platform.

WordPress is by far the most popular open source CMS—WordPress has 65% CMS market share, powers 43% of the entire internet, and is used by websites including The New York Times, The Walt Disney Company, and Sony.

Joomla, the second most popular open source CMS, is known for its combination of power, flexibility, and ease of use, and is especially well-suited for ecommerce sites and social networking. Sites that use Joomla include IKEA, Harvard University, and the Guggenheim Museum.

Drupal is a more complex and powerful option that offers almost unlimited customization, but requires more advanced technical knowledge to build and maintain. Organizations that use Drupal for their websites include Tesla, the NCAA, and NASA.

Regardless which system you choose, using an open source CMS has both positives and negatives.

Open Source CMS Pros

  1. An open source CMS can be more cost-effective. The actual software is free to download and use, and if you are creating a very basic website with little to no customization, using an open source CMS can be cheaper than going with a custom option.
  2. Open source systems are frequently updated. Open source CMS platforms are supported by a large community of developers, which is always working to improve the code. Bugs and security vulnerabilities are usually fixed quickly, and the CMS is always adding new features and improving functionality.
  3. An open source CMS is portable. If you’re hiring a third-party developer or web development agency to build your site, the main benefits of using an open source platform is the accessibility of the code. With an open source platform, you should have access to all the code if you ever need to make changes to your site or hosting environment.
  4. Using an open source CMS lets you benefit from a large community of developers. If you use an open source solution, you reap the benefits of a huge virtual “staff” of developers, all working to improve the product you use. Thousands of developers create new templates and plugins and provide input to make the platform work better.    

Open Source CMS Cons

  1. Customization of an open source CMS can be costly. While the software itself is free, making specific customizations will require a developer, so if you want your open-source site to have a very specific design or functionality that isn’t offered out-of-the-box in a template or plugin, the cost can actually be higher than using a custom CMS that offers the built-in functionality and features you require.
  2. Open source code is often targeted by hackers. Perhaps the biggest downside of using an open source CMS is security. Websites using an open source CMS are attractive targets to hackers, since a single security vulnerability can be used to launch large-scale attacks. While developers are always working to close any security loopholes, the fact that the code is accessible to anyone means that developers with bad intentions have free rein to examine the code for vulnerabilities and exploit any flaws they find. According to the Website Threat Research Report, about 94% of hacked websites are using WordPress.
  3. You need someone to monitor and install updates and provide customer support. As mentioned above, a large and active developer community ensures that any bugs or security flaws in the open source code is quickly fixed, but your website won’t update automatically—you need to monitor available updates and install them in a timely fashion to keep your system safe and performing as smoothly as possible. In its latest report, Sucuri found that about 56% of hacked open source sites were running out-of-date versions, and therefore were not protected by current security patches.   
  4. Finding a good open source developer can be tricky. Yes, there are thousands of open source CMS developers. But as with anything, quality and experience vary widely, so you’ll need to put some effort into finding a developer with the skill set, experience, and work ethic you need for your project and ongoing customer support.