# Sitecore XP 9.1 End of Life: Where to Rebuild Next

> Sitecore XP 9.1 loses all support on December 31, 2026, eight years after it shipped. Every route forward is a rebuild, so choose the one worth paying for.

Buyer Guide by DXP Scorecard Analyst Team · Published 2026-11-08 · Reviewed 2026-11-08 · Ratings updated 2026-11-08
Source: https://www.dxpscorecard.com/editorials/sitecore-xp-9-1-end-of-life-migration-guide

## The short answer

Sitecore XP 9.1 loses all support on December 31, 2026. Upgrading an eight-year-old estate to XP 10.5 replaces every layer underneath it for a product with no roadmap, so treat it as one rebuild among several. Storyblok and Contentstack rate highest for teams that want nothing left to patch, HubSpot Content Hub suits lead-generation sites that never used xDB, Umbraco and Xperience by Kentico keep .NET teams at a smaller bill, and SitecoreAI keeps the Sitecore partner.

## Key takeaways

- Sitecore XP 9.1 shipped in November 2018. Mainstream Support ended on December 31, 2021, Extended Support on December 31, 2024, and Sustaining support, the last phase, ends on December 31, 2026. After that date Sitecore owes you nothing for this version: no fixes, no incident help, no upgrade assistance.
- Security fixes stopped two years ago. Sustaining support never included them, and the 2025 run of critical Sitecore flaws, one exploited in the wild, covered versions back to 9.0. If your 9.1 site is still public, the controls around it, not the vendor, are what protect it today.
- The upgrade to 10.5 is a rebuild wearing an upgrade's name. Sitecore documents a direct path from 8.1 or later, but eight years of change sit in between: Solr 10 with mandatory authentication, SQL Server 2022 or 2025, Windows Server 2022 or 2025, .NET Framework 4.8.1, a newer Identity Server, new versions of every module, and custom code written against APIs that have moved. The result is a supported copy of a platform Sitecore no longer develops.
- SitecoreAI is not the short route either. It is a headless SaaS with a JavaScript front end, so templates, components, rules, workflows and visitor data are all recreated, and Sitecore ships advice rather than a tool. The effort sits in the same range as moving to any other platform, which is why the choice should be made on fit and cost, not on the logo.
- Most 9.1 estates are simpler than their license. Eight years without an upgrade usually means the personalization, automation and email tools were never adopted in earnest. Read the usage report before the demos: a content-managed website with forms and search has far cheaper destinations than a personalization engine does.

## Our picks at a glance

- **Best .NET suite at mid-market prices:** Xperience by Kentico. Marketing tools built in, monthly releases.
- **Lowest cost for .NET teams:** Umbraco. Free core, formal Sitecore migration program.
- **Best way to stay with Sitecore:** SitecoreAI. Bundled CDP, Agentic Studio, no servers.
- **Best to stop running servers:** Storyblok. Visual editing, published prices, nothing to patch.
- **Best headless with a Sitecore importer:** Contentstack. Official Migration Framework, deep workflows.
- **Best if you over-bought:** HubSpot Content Hub. Marketing site, published pricing, nothing to run.

## Our analysts' take

Sitecore XP 9.1 arrived in November 2018 and was the version many organizations landed on after the long climb from version 8. Then they stayed. Each later release asked for new infrastructure, the site worked, and the renewal arrived every year regardless. On December 31, 2026 the version reaches the end of Sustaining support, the last of Sitecore's three lifecycle phases, and leaves the lifecycle table altogether.

In practice the vendor's protection ended long ago. Extended Support closed on December 31, 2024, and Sustaining support has only ever meant documentation, the knowledge base and help with an upgrade to a version still in Mainstream Support. No security fix for 9.1 has been available at any price for two years, while 2025 brought a string of critical Sitecore flaws, one exploited in the wild, that reached back to version 9.0. What changes on January 1 is the paperwork: there will be no supported version on the contract, and every security questionnaire that lists Sitecore as the patching party becomes untrue.

The reflex is to call a partner and ask for the upgrade. This guide argues against that reflex. A jump from 9.1 to 10.5 replaces the search engine, the database version, the operating system, the .NET runtime, the identity layer and every module, and lands on a release Sitecore sells only to existing customers and no longer adds features to. That is rebuild money. The question is where to spend it, so the eight destinations below are rated budget first, because the cost of moving is what kept these estates on 9.1, then upkeep and speed, because the next platform should never need this decision again.

## What to look for

1. **The total cost of staying versus leaving.** Add the renewal, production hosting at $5,000 to $20,000 a month, the team that runs nine or more server roles and the 10.5 upgrade project, then put it next to a three-year quote for each destination plus its rebuild. On most 9.1 estates the gap pays for the move.
2. **How much of XP you actually used.** Pull twelve months of usage for personalization rules, goals, Marketing Automation plans, Email Experience Manager campaigns and tests. Most eight-year-old estates run a handful or none, and that single fact decides whether you need a suite or a CMS.
3. **Who patches it next year.** Eight years without an upgrade says nobody wants to own one. Prefer a platform where the vendor runs the upgrades, or a .NET platform whose updates are a package bump rather than a project, and name the person or contract that applies them.
4. **Speed to a 2027 go-live.** The site is already unprotected, so the clock is about exposure. Headless and SaaS destinations quote three to six months for a mid-size site, a .NET rebuild about four to six, SitecoreAI nine to fourteen. Choose a path that finishes in 2027.
5. **Whether marketers can work alone.** The Experience Editor on 9.1 is slow, and most page changes still go through a developer. If the rebuild touches the editing experience anyway, decide now whether marketers should build and change pages without a ticket, and test the visual editor on your own templates in the demo.

## The ratings at a glance

Fit score out of 10, weighted for this topic. Ratings run Limited, Fair, Good, Strong, Excellent.

| Rank | Platform | Fit | Budget predictability | Low IT upkeep | Speed to launch | Marketer self-service | Security & compliance | Campaign & growth tools |
|---|---|---|---|---|---|---|---|---|
| 1 | [Storyblok](https://www.dxpscorecard.com/platform/storyblok) | 7.1 | Good | Fair | Strong | Strong | Good | Limited |
| 2 | [Contentstack](https://www.dxpscorecard.com/platform/contentstack) | 6.9 | Good | Good | Good | Good | Strong | Fair |
| 3 | [HubSpot Content Hub](https://www.dxpscorecard.com/platform/hubspot-cms) | 6.8 | Good | Fair | Good | Strong | Strong | Strong |
| 4 | [Umbraco](https://www.dxpscorecard.com/platform/umbraco) | 6.5 | Strong | Fair | Good | Fair | Good | Fair |
| 5 | [Xperience by Kentico](https://www.dxpscorecard.com/platform/xperience-by-kentico) | 5.9 | Fair | Fair | Fair | Good | Good | Fair |
| 6 | [Optimizely SaaS CMS](https://www.dxpscorecard.com/platform/optimizely-saas) | 5.7 | Limited | Good | Fair | Good | Good | Good |
| 7 | [SitecoreAI](https://www.dxpscorecard.com/platform/sitecore-ai) | 5.4 | Limited | Fair | Fair | Strong | Strong | Strong |
| 8 | [Progress Sitefinity](https://www.dxpscorecard.com/platform/sitefinity) | 5.2 | Limited | Fair | Fair | Good | Good | Good |

## The shortlist, reviewed

### 1. Storyblok (Fit 7.1/10)

A SaaS headless CMS built around one of the strongest visual editors on the market: marketers assemble pages on the live site while developers keep a standard React or Vue stack. There is nothing to patch, prices below enterprise are published, and in-app AI agents arrived in 2026.

- **Best for:** Marketing teams whose 9.1 site is a content and campaign website, with a development partner ready to build a modern front end.
- **Watch out for:** No personalization, forms, analytics or email in the product, and live chat and dedicated support sit on the quote-only Premium and Elite plans.
- **What it costs:** Free starter plan, Growth at $99 per month, Growth Plus at $349 per month; Premium and Elite quote-only.
- **Full scorecard:** https://www.dxpscorecard.com/platform/storyblok (Markdown: https://www.dxpscorecard.com/platform/storyblok.md)

### 2. Contentstack (Fit 6.9/10)

The headless platform with an official Sitecore import: the Migration Framework takes a Sitecore export, maps templates to content types and loads the stack. Workflows of up to 20 stages, branches and publish rules keep the governance XP editorial teams expect, and there is never a platform upgrade to plan.

- **Best for:** Enterprises rebuilding the front end on a JavaScript stack that still need strict approval chains, many languages and data residency.
- **Watch out for:** Personalization, forms and email come from partner apps or separate licenses rather than the product, and health and payment data are contractually prohibited.
- **What it costs:** Free plan, Build at $29 per month, Growth at $299 per month plus $25 per extra user; Enterprise quote-only. AI runs on metered credits.
- **Full scorecard:** https://www.dxpscorecard.com/platform/contentstack (Markdown: https://www.dxpscorecard.com/platform/contentstack.md)

### 3. HubSpot Content Hub (Fit 6.8/10)

A fully hosted CMS on HubSpot's CRM with a drag-and-drop page builder, native personalization and A/B testing, SEO tooling and published prices. For a 9.1 estate whose visitor database was never used in anger, it replaces the CMS and adds the marketing automation in one move.

- **Best for:** B2B marketing teams running a lead-generation website who would rather own it themselves than keep a development retainer.
- **Watch out for:** Rigid content modeling, a thin headless story, aggressive feature gating by tier and templates in HubSpot's own HubL language, so leaving later means another rebuild. Not a fit for commerce, intranets or large multi-brand estates.
- **What it costs:** Published. Professional from $450 per month (three seats), Enterprise from $1,500 per month. AI runs on HubSpot Credits.
- **Full scorecard:** https://www.dxpscorecard.com/platform/hubspot-cms (Markdown: https://www.dxpscorecard.com/platform/hubspot-cms.md)

### 4. Umbraco (Fit 6.5/10)

The free .NET CMS with a formal Sitecore migration program. Umbraco claims typical projects go live in about four months at 60 to 70 percent lower total cost, citing Thames Water's move. Your Sitecore developers stay in C#, and Umbraco 18 adds a bring-your-own-model AI layer with an official MCP (Model Context Protocol) server.

- **Best for:** Cost-conscious .NET organizations whose 9.1 site is, underneath, a content-managed website with forms and search.
- **Watch out for:** Personalization, A/B testing and analytics need the paid Engage add-on, from €5,100 a year, there is no SOC 2 report or HIPAA agreement, and enterprise support comes from partners rather than a vendor contract.
- **What it costs:** Free software. Umbraco Cloud from €45 per month, Standard €280, Professional €730.
- **Full scorecard:** https://www.dxpscorecard.com/platform/umbraco (Markdown: https://www.dxpscorecard.com/platform/umbraco.md)

### 5. Xperience by Kentico (Fit 5.9/10)

A mid-market .NET suite with CMS, contact profiles, personalization, forms, email and marketing automation in one product at a fixed subscription, so the parts of XP a 9.1 team did use have a home. A named Refresh has shipped every month of 2026, and SaaS hosting is ISO 27001 certified across 20 Azure regions.

- **Best for:** Mid-market .NET organizations that want XP's marketing basics at a fixed price from a vendor that still ships monthly.
- **Watch out for:** No vendor migration tool from Sitecore, no A/B testing in the product, AI agents still in preview, and a run of high-severity security advisories from May to September 2026.
- **What it costs:** Quote-only. Licensed by channels, tier and cloud level as a fixed subscription, with no consumption spikes.
- **Full scorecard:** https://www.dxpscorecard.com/platform/xperience-by-kentico (Markdown: https://www.dxpscorecard.com/platform/xperience-by-kentico.md)

### 6. Optimizely SaaS CMS (Fit 5.7/10)

The suite closest to what XP marketers do today, run as managed SaaS: Visual Builder for page assembly, native A/B and multivariate testing, and Opal agents. Optimizely courts Sitecore customers with switcher incentives and AI-assisted content audits, and partners quote three to six months for a mid-size site.

- **Best for:** Marketing teams that genuinely ran personalization and tests on 9.1 and want both on a platform the vendor runs.
- **Watch out for:** Quote-only with median contracts near $78,000 a year and auto-renewing terms. Audiences, analytics and email are separate Optimizely products, and the JavaScript SDK shipped three breaking major versions in 2026.
- **What it costs:** Quote-only. Priced on traffic and feature tier, with experimentation and AI as add-ons on credits.
- **Full scorecard:** https://www.dxpscorecard.com/platform/optimizely-saas (Markdown: https://www.dxpscorecard.com/platform/optimizely-saas.md)

### 7. SitecoreAI (Fit 5.4/10)

The successor Sitecore invests in: Page builder, Agentic Studio, a bundled customer data platform and Personalize, all vendor-hosted. The Migration Navigator package assesses your estate and plans the move, but from 9.1 only content carries over, and your partner rebuilds everything else on a Next.js or Angular front end.

- **Best for:** Enterprises with a strong Sitecore partner and genuine personalization ambitions, plus the budget for an enterprise contract and a nine to fourteen month rebuild.
- **Watch out for:** Quote-only, with third-party estimates from about $61,000 to over $500,000 a year, retirements at short notice, and no equivalent for Marketing Automation, Email Experience Manager or Path Analyzer. The live site's hosting on Vercel or Netlify is a separate bill.
- **What it costs:** Quote-only. No published tiers or free plan beyond a 14-day trial; the customer data platform and Personalize are in the base license, and AI usage has a fair-use cap of 50,000 interactions a year.
- **Full scorecard:** https://www.dxpscorecard.com/platform/sitecore-ai (Markdown: https://www.dxpscorecard.com/platform/sitecore-ai.md)

### 8. Progress Sitefinity (Fit 5.2/10)

The closest like-for-like replacement on paper: a .NET CMS with a native customer data platform, personalization, A/B testing, SEO tooling and a HIPAA business associate agreement that names the product. The 2026 Generative CMS release adds brand and SEO agents and an MCP server.

- **Best for:** Marketing-led mid-enterprise teams in regulated industries that want to stay on Microsoft infrastructure with built-in marketing tools.
- **Watch out for:** Quote-only pricing with reported renewal increases of 40 to 100 percent, five security advisories in June 2026 including a maximum-severity flaw, and self-hosted operations as heavy as XP's unless you buy Sitefinity Cloud.
- **What it costs:** Quote-only. Licensed per server or domain, with editor seats in blocks of five. Third-party estimates run $20,000 to $60,000 a year.
- **Full scorecard:** https://www.dxpscorecard.com/platform/sitefinity (Markdown: https://www.dxpscorecard.com/platform/sitefinity.md)

## Why the 10.5 upgrade is the wrong rebuild

Sitecore's upgrade documentation supports a direct move from 8.1 or later to 10.5, and Sustaining support still entitles you to upgrade assistance toward a Mainstream version. Both facts make the upgrade look like the safe default. Look at what the project contains before agreeing to it.

- **Everything underneath changes.** XP 10.5 runs only on Solr 10 with Basic Authentication, SQL Server 2022 or 2025, Windows Server 2022 or 2025 and .NET Framework 4.8.1, with a newer Identity Server and current versions of Sitecore Experience Accelerator, Headless Rendering and every connector. Nothing in your 9.1 infrastructure survives, and eight years of custom code is regression-tested against moved APIs.
- **What you get for it.** Mainstream Support to December 31, 2029 on a product that shipped no new authoring, marketing or AI feature in its latest release, that Sitecore sells only to existing customers, and whose Salesforce, Dynamics 365 and Data Exchange Framework connectors lost vendor support. Sitecore Experience Commerce stopped at 10.3 and does not run on it.
- **When it is still right.** A regulated estate that cannot change vendor inside 2027, or one where xDB personalization and Marketing Automation genuinely run the business and no destination replaces them. Even then, treat 10.5 as a bridge with a written exit decision in 2028, and skip it entirely if the destination is SitecoreAI, where Sitecore says the upgrade brings no benefit.

## Four destinations, sorted by what your 9.1 site really is

The usage report, not the feature list, sorts the shortlist. Most 9.1 estates fall into one of four shapes.

- **A content website on an enterprise license.** Forms, search, a few languages, no personalization rules in production. Umbraco, Storyblok or Xperience by Kentico rebuild it in months at a fraction of the renewal, and the .NET options keep your developers.
- **A lead-generation site feeding a CRM.** If HubSpot or Salesforce already holds the leads, HubSpot Content Hub or Xperience by Kentico bring the CMS and the marketing automation together, and the Sitecore connectors you were about to lose become irrelevant.
- **A personalization engine marketers use.** Rules, goals and tests that genuinely run. Optimizely SaaS CMS gives marketers testing in the product on managed SaaS, SitecoreAI keeps the partner and the vocabulary at enterprise prices, and Sitefinity keeps it on Microsoft infrastructure.
- **A multi-brand or multi-language estate.** Dozens of sites and languages under shared governance. Contentstack brings the Sitecore importer and deep workflows for a headless rebuild; SitecoreAI's site collections are the suite answer. Both are enterprise contracts.

## What to verify before you commit the budget

- **Get the end-of-support statement in writing.** Ask your account representative to confirm that no support, fixes or upgrade assistance exist for 9.1 after December 31, 2026, and what the renewal actually buys in 2027. Your board should hear it from Sitecore.
- **Price the rebuild on three platforms.** Two partner estimates per platform, fixed scope, from the same content inventory. Templates, components and integrations are rebuilt everywhere, so the spread between estimates is the real comparison, and it is usually wider than the spread between licenses.
- **Export the content first.** Content is the only thing that carries over from 9.1. Get a clean export of items, media and languages now, while the site is stable, and check that the destination can load it: Contentstack's importer, Umbraco's migration program or a partner script.
- **Harden the site you are leaving.** A web application firewall in front of content delivery, the content management server behind a VPN, the package installer disabled and every published 9.1 hotfix applied. It is the only patching you have, and it buys the months the rebuild needs.
- **Check the exit on the way in.** Ask every destination how content leaves. Published export APIs and standard front-end frameworks mean the next decision costs less than this one; HubSpot's HubL templates and SitecoreAI's Sitecore-only content moves mean it costs about the same.

## Frequently asked questions

### When does Sitecore 9.1 support end?

Sitecore XP 9.1 reaches the end of Sustaining support on December 31, 2026. Mainstream Support ended on December 31, 2021 and Extended Support on December 31, 2024, so security fixes have not been available for two years. After December 31, 2026 the version leaves Sitecore's lifecycle entirely, with no documentation updates, incident help or upgrade assistance.

### Can we upgrade directly from Sitecore 9.1 to 10.5?

Sitecore's upgrade documentation supports a direct upgrade from 8.1 or later, using the UpdateApp clean-up and SQL upgrade scripts followed by a side-by-side install, and Sustaining support includes assistance with that path. In practice the project replaces Solr, SQL Server, Windows Server, the .NET runtime and every module, and re-tests all custom code, so it is sized like a rebuild.

### Is Sitecore 9.1 still secure?

No security fixes have been issued for 9.1 since Extended Support ended on December 31, 2024, and Sustaining support never included them. A string of critical Sitecore flaws in 2025, one exploited in the wild, affected versions back to 9.0. A web application firewall, network isolation of the content management server and every published hotfix reduce the exposure; they do not remove it.

### Is moving from Sitecore 9.1 to SitecoreAI an upgrade?

No. SitecoreAI is a vendor-hosted headless platform with a JavaScript front end. Content can be moved, but templates, components, personalization rules, workflows and visitor data are rebuilt, and Sitecore sells an assessment and advisory package rather than a migration tool. Sitecore's own guidance says upgrading XP first brings no benefit, so the move is a replatform in the same range of effort as moving to another vendor.

### What is the cheapest alternative to Sitecore XP for a .NET team?

Umbraco has no license fee, published cloud hosting from €45 per month and a formal Sitecore migration program, and claims typical projects go live in about four months. Xperience by Kentico costs more but bundles personalization, forms, email and automation at a fixed subscription. Both keep your developers in C#, and both are rebuilds rather than upgrades.

## How we rated these platforms

Each rating combines the relevant criteria from the DXP Scorecard's independent scorecards into a five-point scale. The Fit score blends these ratings, weighted for this topic, into one number out of 10, and is recalculated whenever a scorecard is updated:

- Budget predictability (32%): Will the price be clear up front, and will it stay reasonable as we grow?
- Low IT upkeep (21%): After launch, how much effort does it take just to keep it running?
- Speed to launch (21%): How fast can we go live, and how big a team does it take?
- Marketer self-service (16%): Can my team build and change pages without filing a ticket?
- Security & compliance (11%): Will legal, security and procurement sign off?

Scorecards and platform inclusion are unsponsored: no vendor pays to appear in this guide or to change a rating. Methodology: https://www.dxpscorecard.com/scoring-framework