The DXP Scorecard logo
Independent Platform Evaluation
Scored on implementation experience
Not vendor briefings
Buyer GuideMigration

Sitecore XP 9.1 End of Life: Where to Rebuild Next

Sitecore XP 9.1 loses all support on December 31, 2026, eight years after it shipped. Every route forward is a rebuild, so choose the one worth paying for.

DXP Scorecard Analyst TeamReviewed Ratings updated 12 min read

The short answer

Sitecore XP 9.1 loses all support on December 31, 2026. Upgrading an eight-year-old estate to XP 10.5 replaces every layer underneath it for a product with no roadmap, so treat it as one rebuild among several. Storyblok and Contentstack rate highest for teams that want nothing left to patch, HubSpot Content Hub suits lead-generation sites that never used xDB, Umbraco and Xperience by Kentico keep .NET teams at a smaller bill, and SitecoreAI keeps the Sitecore partner.

Key takeaways

  • Sitecore XP 9.1 shipped in November 2018. Mainstream Support ended on December 31, 2021, Extended Support on December 31, 2024, and Sustaining support, the last phase, ends on December 31, 2026. After that date Sitecore owes you nothing for this version: no fixes, no incident help, no upgrade assistance.
  • Security fixes stopped two years ago. Sustaining support never included them, and the 2025 run of critical Sitecore flaws, one exploited in the wild, covered versions back to 9.0. If your 9.1 site is still public, the controls around it, not the vendor, are what protect it today.
  • The upgrade to 10.5 is a rebuild wearing an upgrade's name. Sitecore documents a direct path from 8.1 or later, but eight years of change sit in between: Solr 10 with mandatory authentication, SQL Server 2022 or 2025, Windows Server 2022 or 2025, .NET Framework 4.8.1, a newer Identity Server, new versions of every module, and custom code written against APIs that have moved. The result is a supported copy of a platform Sitecore no longer develops.
  • SitecoreAI is not the short route either. It is a headless SaaS with a JavaScript front end, so templates, components, rules, workflows and visitor data are all recreated, and Sitecore ships advice rather than a tool. The effort sits in the same range as moving to any other platform, which is why the choice should be made on fit and cost, not on the logo.
  • Most 9.1 estates are simpler than their license. Eight years without an upgrade usually means the personalization, automation and email tools were never adopted in earnest. Read the usage report before the demos: a content-managed website with forms and search has far cheaper destinations than a personalization engine does.

Our picks at a glance

Our analysts’ take

Sitecore XP 9.1 arrived in November 2018 and was the version many organizations landed on after the long climb from version 8. Then they stayed. Each later release asked for new infrastructure, the site worked, and the renewal arrived every year regardless. On December 31, 2026 the version reaches the end of Sustaining support, the last of Sitecore's three lifecycle phases, and leaves the lifecycle table altogether.

In practice the vendor's protection ended long ago. Extended Support closed on December 31, 2024, and Sustaining support has only ever meant documentation, the knowledge base and help with an upgrade to a version still in Mainstream Support. No security fix for 9.1 has been available at any price for two years, while 2025 brought a string of critical Sitecore flaws, one exploited in the wild, that reached back to version 9.0. What changes on January 1 is the paperwork: there will be no supported version on the contract, and every security questionnaire that lists Sitecore as the patching party becomes untrue.

The reflex is to call a partner and ask for the upgrade. This guide argues against that reflex. A jump from 9.1 to 10.5 replaces the search engine, the database version, the operating system, the .NET runtime, the identity layer and every module, and lands on a release Sitecore sells only to existing customers and no longer adds features to. That is rebuild money. The question is where to spend it, so the eight destinations below are rated budget first, because the cost of moving is what kept these estates on 9.1, then upkeep and speed, because the next platform should never need this decision again.

What to look for

  1. 1

    The total cost of staying versus leaving

    Add the renewal, production hosting at $5,000 to $20,000 a month, the team that runs nine or more server roles and the 10.5 upgrade project, then put it next to a three-year quote for each destination plus its rebuild. On most 9.1 estates the gap pays for the move.

  2. 2

    How much of XP you actually used

    Pull twelve months of usage for personalization rules, goals, Marketing Automation plans, Email Experience Manager campaigns and tests. Most eight-year-old estates run a handful or none, and that single fact decides whether you need a suite or a CMS.

  3. 3

    Who patches it next year

    Eight years without an upgrade says nobody wants to own one. Prefer a platform where the vendor runs the upgrades, or a .NET platform whose updates are a package bump rather than a project, and name the person or contract that applies them.

  4. 4

    Speed to a 2027 go-live

    The site is already unprotected, so the clock is about exposure. Headless and SaaS destinations quote three to six months for a mid-size site, a .NET rebuild about four to six, SitecoreAI nine to fourteen. Choose a path that finishes in 2027.

  5. 5

    Whether marketers can work alone

    The Experience Editor on 9.1 is slow, and most page changes still go through a developer. If the rebuild touches the editing experience anyway, decide now whether marketers should build and change pages without a ticket, and test the visual editor on your own templates in the demo.

The shortlist, reviewed

#1Storyblok logo

Storyblok

Headless CMS
7.1/10
Fit score

A SaaS headless CMS built around one of the strongest visual editors on the market: marketers assemble pages on the live site while developers keep a standard React or Vue stack. There is nothing to patch, prices below enterprise are published, and in-app AI agents arrived in 2026.

Best for
Marketing teams whose 9.1 site is a content and campaign website, with a development partner ready to build a modern front end.
Watch out for
No personalization, forms, analytics or email in the product, and live chat and dedicated support sit on the quote-only Premium and Elite plans.
What it costs
Free starter plan, Growth at $99 per month, Growth Plus at $349 per month; Premium and Elite quote-only.
Budget predictabilityGood
Low IT upkeepFair
Speed to launchStrong
Marketer self-serviceStrong
Security & complianceGood
Campaign & growth toolsLimited
#2Contentstack logo

Contentstack

Enterprise DXP
6.9/10
Fit score

The headless platform with an official Sitecore import: the Migration Framework takes a Sitecore export, maps templates to content types and loads the stack. Workflows of up to 20 stages, branches and publish rules keep the governance XP editorial teams expect, and there is never a platform upgrade to plan.

Best for
Enterprises rebuilding the front end on a JavaScript stack that still need strict approval chains, many languages and data residency.
Watch out for
Personalization, forms and email come from partner apps or separate licenses rather than the product, and health and payment data are contractually prohibited.
What it costs
Free plan, Build at $29 per month, Growth at $299 per month plus $25 per extra user; Enterprise quote-only. AI runs on metered credits.
Budget predictabilityGood
Low IT upkeepGood
Speed to launchGood
Marketer self-serviceGood
Security & complianceStrong
Campaign & growth toolsFair
#3HubSpot Content Hub logo

HubSpot Content Hub

Traditional CMS
6.8/10
Fit score

A fully hosted CMS on HubSpot's CRM with a drag-and-drop page builder, native personalization and A/B testing, SEO tooling and published prices. For a 9.1 estate whose visitor database was never used in anger, it replaces the CMS and adds the marketing automation in one move.

Best for
B2B marketing teams running a lead-generation website who would rather own it themselves than keep a development retainer.
Watch out for
Rigid content modeling, a thin headless story, aggressive feature gating by tier and templates in HubSpot's own HubL language, so leaving later means another rebuild. Not a fit for commerce, intranets or large multi-brand estates.
What it costs
Published. Professional from $450 per month (three seats), Enterprise from $1,500 per month. AI runs on HubSpot Credits.
Budget predictabilityGood
Low IT upkeepFair
Speed to launchGood
Marketer self-serviceStrong
Security & complianceStrong
Campaign & growth toolsStrong
#4Umbraco logo

Umbraco

Traditional CMS
6.5/10
Fit score

The free .NET CMS with a formal Sitecore migration program. Umbraco claims typical projects go live in about four months at 60 to 70 percent lower total cost, citing Thames Water's move. Your Sitecore developers stay in C#, and Umbraco 18 adds a bring-your-own-model AI layer with an official MCP (Model Context Protocol) server.

Best for
Cost-conscious .NET organizations whose 9.1 site is, underneath, a content-managed website with forms and search.
Watch out for
Personalization, A/B testing and analytics need the paid Engage add-on, from €5,100 a year, there is no SOC 2 report or HIPAA agreement, and enterprise support comes from partners rather than a vendor contract.
What it costs
Free software. Umbraco Cloud from €45 per month, Standard €280, Professional €730.
Budget predictabilityStrong
Low IT upkeepFair
Speed to launchGood
Marketer self-serviceFair
Security & complianceGood
Campaign & growth toolsFair
#5Xperience by Kentico logo

Xperience by Kentico

Enterprise DXP
5.9/10
Fit score

A mid-market .NET suite with CMS, contact profiles, personalization, forms, email and marketing automation in one product at a fixed subscription, so the parts of XP a 9.1 team did use have a home. A named Refresh has shipped every month of 2026, and SaaS hosting is ISO 27001 certified across 20 Azure regions.

Best for
Mid-market .NET organizations that want XP's marketing basics at a fixed price from a vendor that still ships monthly.
Watch out for
No vendor migration tool from Sitecore, no A/B testing in the product, AI agents still in preview, and a run of high-severity security advisories from May to September 2026.
What it costs
Quote-only. Licensed by channels, tier and cloud level as a fixed subscription, with no consumption spikes.
Budget predictabilityFair
Low IT upkeepFair
Speed to launchFair
Marketer self-serviceGood
Security & complianceGood
Campaign & growth toolsFair
#6Optimizely SaaS CMS logo

Optimizely SaaS CMS

Headless CMS
5.7/10
Fit score

The suite closest to what XP marketers do today, run as managed SaaS: Visual Builder for page assembly, native A/B and multivariate testing, and Opal agents. Optimizely courts Sitecore customers with switcher incentives and AI-assisted content audits, and partners quote three to six months for a mid-size site.

Best for
Marketing teams that genuinely ran personalization and tests on 9.1 and want both on a platform the vendor runs.
Watch out for
Quote-only with median contracts near $78,000 a year and auto-renewing terms. Audiences, analytics and email are separate Optimizely products, and the JavaScript SDK shipped three breaking major versions in 2026.
What it costs
Quote-only. Priced on traffic and feature tier, with experimentation and AI as add-ons on credits.
Budget predictabilityLimited
Low IT upkeepGood
Speed to launchFair
Marketer self-serviceGood
Security & complianceGood
Campaign & growth toolsGood
#7SitecoreAI logo

SitecoreAI

Enterprise DXP
5.4/10
Fit score

The successor Sitecore invests in: Page builder, Agentic Studio, a bundled customer data platform and Personalize, all vendor-hosted. The Migration Navigator package assesses your estate and plans the move, but from 9.1 only content carries over, and your partner rebuilds everything else on a Next.js or Angular front end.

Best for
Enterprises with a strong Sitecore partner and genuine personalization ambitions, plus the budget for an enterprise contract and a nine to fourteen month rebuild.
Watch out for
Quote-only, with third-party estimates from about $61,000 to over $500,000 a year, retirements at short notice, and no equivalent for Marketing Automation, Email Experience Manager or Path Analyzer. The live site's hosting on Vercel or Netlify is a separate bill.
What it costs
Quote-only. No published tiers or free plan beyond a 14-day trial; the customer data platform and Personalize are in the base license, and AI usage has a fair-use cap of 50,000 interactions a year.
Budget predictabilityLimited
Low IT upkeepFair
Speed to launchFair
Marketer self-serviceStrong
Security & complianceStrong
Campaign & growth toolsStrong
#8Progress Sitefinity logo

Progress Sitefinity

Enterprise DXP
5.2/10
Fit score

The closest like-for-like replacement on paper: a .NET CMS with a native customer data platform, personalization, A/B testing, SEO tooling and a HIPAA business associate agreement that names the product. The 2026 Generative CMS release adds brand and SEO agents and an MCP server.

Best for
Marketing-led mid-enterprise teams in regulated industries that want to stay on Microsoft infrastructure with built-in marketing tools.
Watch out for
Quote-only pricing with reported renewal increases of 40 to 100 percent, five security advisories in June 2026 including a maximum-severity flaw, and self-hosted operations as heavy as XP's unless you buy Sitefinity Cloud.
What it costs
Quote-only. Licensed per server or domain, with editor seats in blocks of five. Third-party estimates run $20,000 to $60,000 a year.
Budget predictabilityLimited
Low IT upkeepFair
Speed to launchFair
Marketer self-serviceGood
Security & complianceGood
Campaign & growth toolsGood

Why the 10.5 upgrade is the wrong rebuild

Sitecore's upgrade documentation supports a direct move from 8.1 or later to 10.5, and Sustaining support still entitles you to upgrade assistance toward a Mainstream version. Both facts make the upgrade look like the safe default. Look at what the project contains before agreeing to it.

Everything underneath changes

XP 10.5 runs only on Solr 10 with Basic Authentication, SQL Server 2022 or 2025, Windows Server 2022 or 2025 and .NET Framework 4.8.1, with a newer Identity Server and current versions of Sitecore Experience Accelerator, Headless Rendering and every connector. Nothing in your 9.1 infrastructure survives, and eight years of custom code is regression-tested against moved APIs.

What you get for it

Mainstream Support to December 31, 2029 on a product that shipped no new authoring, marketing or AI feature in its latest release, that Sitecore sells only to existing customers, and whose Salesforce, Dynamics 365 and Data Exchange Framework connectors lost vendor support. Sitecore Experience Commerce stopped at 10.3 and does not run on it.

When it is still right

A regulated estate that cannot change vendor inside 2027, or one where xDB personalization and Marketing Automation genuinely run the business and no destination replaces them. Even then, treat 10.5 as a bridge with a written exit decision in 2028, and skip it entirely if the destination is SitecoreAI, where Sitecore says the upgrade brings no benefit.

Four destinations, sorted by what your 9.1 site really is

The usage report, not the feature list, sorts the shortlist. Most 9.1 estates fall into one of four shapes.

A content website on an enterprise license

Forms, search, a few languages, no personalization rules in production. Umbraco, Storyblok or Xperience by Kentico rebuild it in months at a fraction of the renewal, and the .NET options keep your developers.

A lead-generation site feeding a CRM

If HubSpot or Salesforce already holds the leads, HubSpot Content Hub or Xperience by Kentico bring the CMS and the marketing automation together, and the Sitecore connectors you were about to lose become irrelevant.

A personalization engine marketers use

Rules, goals and tests that genuinely run. Optimizely SaaS CMS gives marketers testing in the product on managed SaaS, SitecoreAI keeps the partner and the vocabulary at enterprise prices, and Sitefinity keeps it on Microsoft infrastructure.

A multi-brand or multi-language estate

Dozens of sites and languages under shared governance. Contentstack brings the Sitecore importer and deep workflows for a headless rebuild; SitecoreAI's site collections are the suite answer. Both are enterprise contracts.

What to verify before you commit the budget

Get the end-of-support statement in writing

Ask your account representative to confirm that no support, fixes or upgrade assistance exist for 9.1 after December 31, 2026, and what the renewal actually buys in 2027. Your board should hear it from Sitecore.

Price the rebuild on three platforms

Two partner estimates per platform, fixed scope, from the same content inventory. Templates, components and integrations are rebuilt everywhere, so the spread between estimates is the real comparison, and it is usually wider than the spread between licenses.

Export the content first

Content is the only thing that carries over from 9.1. Get a clean export of items, media and languages now, while the site is stable, and check that the destination can load it: Contentstack's importer, Umbraco's migration program or a partner script.

Harden the site you are leaving

A web application firewall in front of content delivery, the content management server behind a VPN, the package installer disabled and every published 9.1 hotfix applied. It is the only patching you have, and it buys the months the rebuild needs.

Check the exit on the way in

Ask every destination how content leaves. Published export APIs and standard front-end frameworks mean the next decision costs less than this one; HubSpot's HubL templates and SitecoreAI's Sitecore-only content moves mean it costs about the same.

Frequently asked questions

When does Sitecore 9.1 support end?

Sitecore XP 9.1 reaches the end of Sustaining support on December 31, 2026. Mainstream Support ended on December 31, 2021 and Extended Support on December 31, 2024, so security fixes have not been available for two years. After December 31, 2026 the version leaves Sitecore's lifecycle entirely, with no documentation updates, incident help or upgrade assistance.

Can we upgrade directly from Sitecore 9.1 to 10.5?

Sitecore's upgrade documentation supports a direct upgrade from 8.1 or later, using the UpdateApp clean-up and SQL upgrade scripts followed by a side-by-side install, and Sustaining support includes assistance with that path. In practice the project replaces Solr, SQL Server, Windows Server, the .NET runtime and every module, and re-tests all custom code, so it is sized like a rebuild.

Is Sitecore 9.1 still secure?

No security fixes have been issued for 9.1 since Extended Support ended on December 31, 2024, and Sustaining support never included them. A string of critical Sitecore flaws in 2025, one exploited in the wild, affected versions back to 9.0. A web application firewall, network isolation of the content management server and every published hotfix reduce the exposure; they do not remove it.

Is moving from Sitecore 9.1 to SitecoreAI an upgrade?

No. SitecoreAI is a vendor-hosted headless platform with a JavaScript front end. Content can be moved, but templates, components, personalization rules, workflows and visitor data are rebuilt, and Sitecore sells an assessment and advisory package rather than a migration tool. Sitecore's own guidance says upgrading XP first brings no benefit, so the move is a replatform in the same range of effort as moving to another vendor.

What is the cheapest alternative to Sitecore XP for a .NET team?

Umbraco has no license fee, published cloud hosting from €45 per month and a formal Sitecore migration program, and claims typical projects go live in about four months. Xperience by Kentico costs more but bundles personalization, forms, email and automation at a fixed subscription. Both keep your developers in C#, and both are rebuilds rather than upgrades.

How we rated these platforms

Each rating combines the relevant criteria from our independent scorecards into a five-point scale. The Fit score blends the ratings below, weighted for this topic, into one number out of 10. Ratings are recalculated whenever a scorecard is updated, so the order above always reflects current evidence. The written analysis was last reviewed on November 8, 2026.

Budget predictability32% of Fit
Low IT upkeep21% of Fit
Speed to launch21% of Fit
Marketer self-service16% of Fit
Security & compliance11% of Fit

Scorecards and platform inclusion are unsponsored: no vendor pays to appear in this guide or to change a rating. Full criteria, weights and evidence are in the methodology and on each platform’s scorecard. Spotted something out of date? Tell us.

Still deciding?

Answer seven questions for a shortlist built around your team, or put the top two side by side.