Adobe Experience Manager is the most complete enterprise suite among the platforms we score.
Both are full enterprise suites aimed at multi-brand organizations. AEM is stronger on digital asset management, multi-site inheritance and the depth of its first-party marketing stack. SitecoreAI bundles its customer data platform and personalization into one SaaS product and suits teams with Microsoft .NET skills rather than AEM's Java specialists.
Full Comparison →Optimizely overtook Adobe at the top of Gartner's 2026 DXP Magic Quadrant, and its SaaS CMS is simpler to run, with no upgrade projects and industry-leading experimentation. AEM still wins on asset management, multi-site governance and compliance breadth, and on its AI developer tooling.
Full Comparison →Contentful is an API-first headless CMS that JavaScript teams can launch quickly at a fraction of AEM's cost. AEM offers what Contentful leaves to integrations: a visual page builder, an enterprise DAM, managed site hosting and multi-site inheritance. Choose AEM for a governed marketing suite and Contentful for a lighter structured content hub.
Full Comparison →Acquia packages Drupal with managed hosting, multi-site tooling and its own DAM, built on open-source skills that are easier and cheaper to hire. AEM goes further on asset management, personalization within the Adobe stack and AI agents. Acquia carries lower lock-in because Drupal content and code can move to another host.
Full Comparison →Our analysts rate 8 platforms as replacements, with a recommendation for who should move and who should stay. Ratings updated Oct 10, 2026.
Multi Site Manager lets a central blueprint push content to any number of brand and country sites, with component-level inheritance and local overrides. Template policies, the Style System and group permissions keep each brand inside its guardrails. For a global portfolio, this removes the copy-and-paste work that other platforms leave to editors.
AEM Assets is a full digital asset manager with metadata schemas, rights expiry, usage tracking and AI tagging, and Content Hub shares approved assets with marketers. Dynamic Media adds on-the-fly image transforms, smart cropping, 360-degree spin sets and adaptive video, and Firefly generative editing is built in. Asset-heavy brands get one system for creation, governance and delivery.
AEM as a Cloud Service hosts the whole site with an Adobe-managed Fastly CDN, custom domains, staging environments and Cloud Manager deployment pipelines. Production can be covered by a 99.99% SLA, and the publish tier scales automatically. Edge Delivery Services adds pre-rendered pages that load near-instantly.
Universal Editor gives click-to-edit preview on traditional, headless and Edge Delivery sites, and the Page Editor offers drag-and-drop layout within locked templates. The translation framework runs projects, machine translation and connectors to Smartling, RWS and other translation vendors. A governed tagging framework keeps taxonomy consistent across pages, fragments and assets.
Adobe holds SOC 2 Type II, ISO 27001, 27017 and 27018, approved Binding Corporate Rules for GDPR, and a HIPAA-ready configuration under a signed business associate agreement. Managed Services adds FedRAMP Moderate, Australia's IRAP and a sovereign deployment on the AWS European Sovereign Cloud. Regulated buyers start most security reviews with the paperwork already in hand.
A single AEM MCP (Model Context Protocol) server lets assistants such as Claude and ChatGPT create pages, fragments and assets under the user's own permissions. Named agents for production, governance and content optimization went generally available in 2026, and Smart Tags plus Sites Optimizer automate metadata and SEO fixes. Teams betting on AI-assisted content operations get the deepest stack in the market.
Adobe publishes no prices, and partner guides put entry near $30K a year with bundles at $60K to $200K or more. Sites is licensed by content requests counted even when served from cache, and excess usage over a year must be bought. Personalization, analytics, commerce and the AI agents are each separate licenses, so budgets grow with traffic and ambition.
Basic deployments take six to twelve months, and first-year services often cost two to four times the license. The proprietary Java stack (JCR, Sling, OSGi and HTL) shares little with mainstream web skills, and AEM developers average $117K to $131K a year. Full builds routinely staff five or more specialized roles.
Traditional builds carry configuration across run modes, Dispatcher caching rules, Cloud Manager pipelines and URL mapping. The local SDK needs 4GB or more of memory and minutes to start, and there is no official path from content models to TypeScript types. Edge Delivery Services is far simpler, but most enterprise builds still take the traditional path.
Adobe sets the upgrade calendar: Managed Services support for classic 6.5 ended in August 2026, deprecated APIs were cut off in July 2026, and every Cloud Service environment moves to Java 25 by June 2027. Content lives in a proprietary repository with no standard export, and migration specialists cite four to eight months to leave. Content operations at scale also need constant manual upkeep.
Adobe's October 13, 2026 bulletin fixed three maximum-severity flaws allowing unauthenticated code execution, after more than a hundred AEM CVEs were published in September. Cloud Service is patched automatically and Adobe reports no exploitation in the wild. Self-managed 6.5 and 6.5 LTS customers must apply six or seven separate hotfixes each time.
AEM has no people directory, social features, onboarding journeys or learning system connectors. The old Communities module did not carry over to Cloud Service, so comments, forums and recognition all need custom development or tools like Microsoft Teams. Successful AEM intranets exist, but they are large engineering projects.
Content Fragment Models offer a broad field set (text, number, boolean, date, enumeration, tags, fragment and content references, JSON Object, tab placeholders) and are manageable through the OpenAPI Content Fragment Management API, while page templates and Sling models cover page-centric types. 2026.9.0 improved composite data types with GraphQL support. Held below 90 because there is no first-party schema-as-code CLI or model deployment pipeline comparable to code-first headless CMSs.
Fragment References support model-based filtering and multi-valued references, content references link pages and assets, and GraphQL resolves nested references with recurrence protection added in 2026.3.0; 2026.9.0 adds tag-based dynamic model referencing. AEM's reference tracking shows where an item is used, but reverse lookup in the delivery API needs custom index configuration and relationships are not bidirectional.
Page composition uses nested containers and Core Components with unlimited nesting, Experience Fragments provide reusable composed blocks, and Content Fragments embed references and 'in-between content'. Visual Content Fragments (2026.6.0) render structured fragments as formatted HTML via templates. Kept below 90 because Content Fragment rich text is stored as an HTML blob rather than a portable structured AST.
Content Fragment Model fields support required, unique, min/max length, number ranges, regex (email/URL/custom) and accepted reference types, and component dialogs use Granite UI validation. Cross-field and business-rule validation needs custom Java services or editor extensions, and API writes are only validated against the model's basic constraints.
AEM keeps full page, fragment and asset version history with side-by-side compare and CF version diff, one-click restore, Restore Tree for deleted pages, Timewarp to view a past state, and Launches as content branches that are promoted back. Timeline attribution shows who changed what. Not higher because version purge rules cap retention by default and CF branching via the Launches API is still experimental.
The AEM Tagging Framework provides governed, hierarchical tag namespaces with localized titles, ACL-controlled term creation, move/merge operations and reuse across pages, fragments and assets; tags are filterable through GraphQL and the CF APIs. Assets adds folder-level metadata schemas with mandatory fields and bulk metadata editing, CF metadata support shipped July 2026, and CF tag fields can be single or multi-select. No native synonym management keeps it short of the top band.
Universal Editor gives click-to-edit overlays on any frontend, including headless React/Next.js apps and Edge Delivery Services sites, with draft content and per-locale pages; a dedicated Preview tier and EDS .page domains provide shareable preview URLs. Visual Content Fragments and CF Editor deep-link preview cover structured content. Not higher because preview links are not token-gated for anonymous reviewers and Universal Editor instrumentation takes developer setup.
The CF Editor RTE was rebuilt on TipTap in 2026.3.0 with find and replace and reusable extensions shared with Universal Editor, plus custom toolbar buttons; it supports embedded images, links, tables and paste cleanup, and EDS document authoring accepts Word and Google Docs. Output remains an HTML blob (or Markdown/plain text) rather than a portable AST with custom renderers.
AEM's built-in asset repository handles upload, folder organization, metadata and alt text, reference tracking across pages, smart crop focal points and Dynamic Media with OpenAPI URL transforms (resize, crop, WebP/AVIF via Smart Imaging); Asset Selector is embedded in every editor. Automatic malware scanning and AI-generated metadata shipped in 2026. Only room left is that some transforms depend on Dynamic Media entitlements.
Experience Workspace (announced 2026-09-03) adds real-time multi-author and AI agent co-authoring, but only for Edge Delivery Services projects. CF Editor offers comments with @mentions, assets support timeline comments, and pages and fragments rely on locking or Check-Out/Check-In. Universal Editor and Page Editor still have no live presence, so most AEM authoring is lock-based.
Granite Workflow supports custom models with participant and dynamic participant steps, OR/AND splits, due dates, timeout escalation, custom Java process steps and full workflow history in the timeline; the Inbox aggregates tasks and Workfront integration extends review. Workflow status appears in the CF Admin UI and Universal Editor can start workflows via extensions. Not higher because model design is developer-oriented and per-content-type workflow binding needs launchers.
Manage Publication offers Publish Later and Unpublish Later at an exact time, assets and pages carry on/off times, and Launches bundle many pages into a release that auto-promotes on a launch date, with Timewarp previewing the future state. Launches for Content Fragments are exposed through an experimental OpenAPI. Held at 80 because there is no native publishing calendar view.
Pages are localized as language copies under language roots with MSM Live Copy inheritance acting as a structural fallback, and Content Fragments mark individual fields as translatable so localization is effectively field-aware; GraphQL and the CF Delivery API query per locale. There is no declarative fallback locale chain for content delivery, so missing translations must be handled by inheritance or frontend logic.
AEM uses JCR ACLs at any path with custom groups and privileges, restriction-based property-level control, Closed User Groups, and Admin Console product profiles; SSO runs through Adobe IMS with federated SAML, and user lifecycle syncs via Admin Console SCIM/User Sync. Locale-specific author permissions follow language-root ACLs. Not higher because field-level hide/lock in the editors is not a configurable UI feature and permission design is technical.
AEM separates the OpenAPI CF Delivery API on publish from the CF Management API on author, offers GraphQL with persisted queries, filtering, sorting, pagination and locale support, plus Sling Model JSON exporters for pages. Not higher because GraphQL is restricted to Content Fragments and page delivery APIs are less consistent.
AEM Cloud Service includes an Adobe-managed Fastly CDN with automatic invalidation on publish, configurable CDN rules (traffic filters, redirects, origin selectors, region/organization matching), and Edge Delivery Services pages scoring near 100 on Lighthouse. Edge Functions on Fastly Compute and Edge Authentication are still beta or early adopter.
AEM Eventing through Adobe I/O Events covers Sites, Assets and Content Fragment author events with subscriber-defined filtering, HMAC and RSA signatures, 24-hour retries, batching, a 7-day Journaling API and EventBridge or App Builder targets. Held below 85 because setup runs through the Developer Console and there is no delivery log UI in AEM.
Content Fragments are channel-agnostic and delivered through GraphQL and OpenAPI, Experience Fragments carry channel variations (web, social, email, Target offers), and EDS and Visual Content Fragments render the same content as HTML. Not higher because rich text is HTML and official SDKs cover mainly JavaScript.
ContextHub ships in AEM Sites with rule-based and behavioral segments that drive Targeted Content components and author-mode segment simulation. Unified profiles, identity resolution and real-time edge segmentation come from Real-Time CDP and Adobe Target, which are separately licensed. Native segmentation is solid but first-party profiles depend on those add-ons, so it sits just below 75.
Targeting mode in the Page Editor lets authors create per-segment content variants with ContextHub and preview them by simulating audiences, without an external decision engine. Experience Fragments can also be exported to Target for ML-driven decisioning, which is a separate product. Not higher because ContextHub personalization is client-side and Edge Delivery Services sites rely on the experimentation plugin's audience rules.
Contextual Experimentation in Universal Editor and the EDS experimentation plugin provide native page-level A/B tests with results from Operational Telemetry. Experience League limits it to A/B tests optimizing for conversion, one experiment per page, and the extension must be enabled or requested. MVT, bandits and auto-target require Adobe Target.
Algorithmic recommendations (collaborative filtering, content similarity, popularity) come from Adobe Target Recommendations, which requires Target Premium and is not part of AEM. AEM itself only offers list components and editorial curation. Scored as a mature add-on held below its ceiling for the extra licensing and integration effort.
AEM provides a Core Components Quick Search component over Oak Lucene full-text indexes, and EDS sites use query-index JSON for client-side search. Faceting, typo tolerance, analytics and merchandising need custom index definitions or Algolia, Coveo or Elasticsearch integrations. Adobe has no first-party site search product for AEM since Search&Promote was retired, so basic native search lands at 60.
AEM has no cart, checkout, pricing or inventory of its own. Transactional commerce comes from Adobe Commerce, a sibling product sold separately, delivered through Edge Delivery Services commerce storefront drop-ins; the CIF Core Components storefront is in maintenance mode. Scored as an add-on well below its ceiling because AEM itself contributes no commerce engine.
The Commerce Integration Framework federates live product data from Adobe Commerce GraphQL into AEM with product pickers in the author UI, and AEM Assets syncs product and category images to Adobe Commerce (2026). Connectors for SAP Commerce, commercetools and Salesforce Commerce exist through partners via the CIF GraphQL layer, with uneven quality. Scored near the integration ceiling given live federation but maintenance-mode CIF.
Operational Telemetry collects page performance and engagement automatically without cookie consent and feeds experiment results; the 2026.9.0 video viewer reports views, watch time and completion, and Page Insights overlays metrics in author mode. Scroll depth, conversion attribution and content lifecycle reporting still need Adobe Analytics.
Core Components emit events to the Adobe Client Data Layer natively, and AEM ships Cloud Service configurations for Adobe Experience Platform Tags (Launch), through which Adobe Analytics, the AEP Web SDK and GA4 are deployed. Not higher because GA4 and non-Adobe tools ride on Tags rather than dedicated connectors.
Multi Site Manager Blueprints and Live Copies share content across any number of sites with component-level inheritance and selective override, rollout configurations and per-site configuration via context-aware configs. Universal Editor added cross-site linking in 2026. This is the reference implementation for shared-content multi-site.
The Translation Integration Framework ships with translation projects, batch jobs, progress tracking and machine translation, and connects to TMS vendors (Smartling, RWS, Lionbridge, XTM, Phrase and others) through official connectors. 2026 updates translate inline media and asset collections into the correct target language root. Not higher because connector setup is per-vendor and some connectors are partner-built.
Editable template policies restrict which components each brand can use, the Style System applies brand variants to shared components, and MSM plus group ACLs and Closed User Groups isolate brand content under central governance. Brand-level analytics needs Adobe Analytics, which keeps it short of the maximum.
AEM Assets provides folder-level metadata schemas with mandatory fields, asset expiry with auto-unpublish, approval workflows, reference tracking across sites, versioning, bulk import from cloud storage and Content Hub with attribute-based access for brand sharing; 2026.9.0 added Smart Collections and AI search in Content Hub. Held below 90 because Content Hub, Dynamic Media and Assets Ultimate features depend on the Assets license tier.
Dynamic Media provides adaptive video encoding with HLS and MPEG-DASH, Video Smart Crops, multiple captions and audio tracks, AI-generated captions and a new 2026.9.0 viewer with playback analytics, plus 3D and interactive media viewers. Dynamic Media is a separately licensed AEM Assets capability, so it is capped as an add-on.
The Page Editor offers drag-and-drop composition from a component palette governed by editable template policies and locked structure, Layout Mode for responsive grids, and the Style System for brand guardrails; Universal Editor brings drag-and-drop component and section reordering to headless and EDS sites. Not higher because two editors coexist with different capabilities and Universal Editor layout control is lighter than the Page Editor's.
AEM as a Cloud Service renders and hosts the full site with an Adobe-managed CDN, TLS, custom domains, dev/stage/prod and RDE environments, Cloud Manager deploy pipelines including front-end pipelines, and a site-level SLA; Edge Delivery Services and headless delivery run from the same platform. The only gaps are beta edge compute and no hosting for arbitrary Node.js frontends.
AEM Forms delivers Adaptive Forms Core Components, a no-code Rule Editor, multi-step wizards, Universal Editor form authoring for EDS, reCAPTCHA/Turnstile, and submission to Salesforce, Marketo, SharePoint and REST endpoints. AEM Forms is a separate license from AEM Sites, so it is capped as an add-on; Sites alone offers only basic EDS form blocks.
AEM integrates first-party with Adobe Campaign Classic v7/v8 for email content authored in AEM, and AEM content and Dynamic Media templates can be referenced in Adobe Journey Optimizer's email editor (limited availability, 2026.9.0). There is no native email send and no SFMC or Mailchimp connector, so it scores as a first-party integration below its ceiling.
Behavioral journeys, drip orchestration and lead scoring come from Adobe Journey Optimizer and Marketo Engage, separately licensed products that reference AEM Experience Fragments and Content Fragments. AEM has no native automation, so this is a tight integration with a sibling suite rather than a built-in capability.
AEM includes page-property meta titles and descriptions, the Sling Sitemap Generator with canonical URLs and hreflang alternates, vanity URLs, CDN and Dispatcher redirect rules, and EDS metadata and redirects spreadsheets; AEM Sites Optimizer adds SEO audits and preflight checks. Structured data authoring has no native editor, bulk redirect management relies on CDN config or ACS Commons, and Sites Optimizer is licensed separately.
Every Edge Delivery Services page is served natively as a Markdown variant (append .md, text/markdown), and AEM CDN traffic filter rules can block or rate-limit AI crawlers. llms.txt is not generated automatically: EDS sites author it, and Adobe documents serving it from DAM through a Dispatcher rewrite. AI citation and referral reporting comes from Adobe LLM Optimizer, rebranded Brand Visibility, which is licensed separately, so it stops short of 75.
Adobe Exchange lists hundreds of AEM integrations across translation, search, commerce, CRM, PIM and DAM, App Builder provides a supported extension model for Universal Editor, CF Console and Assets, and the SI partner network is the largest in the DXP market. Not higher because install is not one-click and many listings are partner-maintained.
AEM Cloud Service supports SAML 2.0 on Publish and Preview for visitor login against external identity providers, Closed User Groups for gated pages and asset folders, and opt-in publish-tier user and group sync; gated content at the edge via OAuth is a documented pattern. Registration, social login, self-service account pages and preference management are not shipped and must be built.
GraphQL and Content Fragment APIs kept hardening through mid-2026: Content Fragment metadata is now fully managed in the CF Admin UI with linkable metadata schemas, the CF GET endpoint returns metadata schema info, a dedicated CF-metadata GET endpoint was added, and an improved content reference picker is rolling out (RDE Aug 10, Stage Sep 7, Prod Sep 21). Earlier GraphQL fixes (multiline-text JCR filtering, UUID lookups, embedded image refs for non-ASCII DAM filenames) persist. Not higher because AEM still carries multiple overlapping API surfaces (Sling, Assets HTTP, CF GraphQL, OpenAPI CF, Content Services, EDS) with inconsistent patterns from 15+ years of organic growth.
Persisted GraphQL queries are CDN-cached for excellent read performance with sub-100ms edge response times. Edge Delivery Services delivers pre-rendered HTML at the edge for near-instant performance. However, non-cached API calls hit JCR directly and degrade with complex queries. Rate limiting is environment-dependent. Pagination cursor implementation varies by API.
AEM Headless SDKs for JavaScript (@adobe/aem-headless-client-js), Node.js, Java, iOS, and Android. SPA Editor SDKs for React and Angular. No Python, Ruby, Go, or .NET SDKs. The JS SDK is functional (persisted query support, Promise/async APIs) but less polished than Contentful's or Sanity's — it even carries a Webpack 5 util-polyfill caveat. SDK coverage remains narrow compared to headless-native platforms.
Adobe Exchange marketplace has 500+ connectors and extensions. The Adobe ecosystem (Analytics, Target, Campaign, Workfront, Marketo, GenStudio) provides uniquely deep first-party integrations no other CMS vendor can match. Third-party connector quality varies but breadth is significant. AI-powered content services integration is expanding.
App Builder is mature — Extension Manager is GA with UI Extensions (React + React Spectrum) across CF Admin, CF Editor, Universal Editor, and Assets View, deployed via Adobe Exchange to all Author services in the org. In 2026 the UI Extensibility framework expanded to Experience Hub with custom widgets. OSGi bundles and Sling Models remain for deep backend extension, and App Builder microservices run on Adobe I/O Runtime. Not higher because App Builder requires Adobe I/O Runtime and React Spectrum buy-in, a steeper path than lighter app frameworks.
IMS (Adobe Identity Management) provides SSO across all Adobe Experience Cloud products. SAML 2.0 for enterprise SSO. Cloud Service uses IMS with Adobe-managed identity. Service credentials and token-based auth for headless API access. MFA enforced via IMS. Authentication is enterprise-complete but tightly coupled to Adobe's identity layer.
JCR-based ACLs provide granular permissions down to property level. CUGs (Closed User Groups) for content-level access on publish tier, with Closed User Group Authoring now in Early Access for Edge Delivery + Universal Editor. Rep:policy nodes allow extremely fine-grained access control with allow/deny inheritance. However, the permission model is complex — debugging access issues requires JCR expertise and CRX/DE tooling.
Adobe holds SOC 2 Type II, ISO 27001, ISO 27018, FedRAMP Moderate, HIPAA readiness, PCI DSS compliance, and CMMC (Cybersecurity Maturity Model Certification). Data residency across US, EU, APAC, and additional regions. GDPR tooling including data deletion APIs and consent management. One of the strongest compliance portfolios in the CMS space.
The critical-severity run continued into October: APSB26-152 (Oct 13, 2026) fixes three CVSS 10.0 unauthenticated incorrect-authorization flaws leading to code execution (CVE-2026-48382, CVE-2026-48383, CVE-2026-90532) that affect Cloud Service as well as 6.5 and 6.5 LTS, plus CVSS 9.9 command-injection and authorization flaws in 6.5 and a 9.6 XXE, on top of September's 111 NVD-listed CVEs (CVE-2026-19232 at 9.9 in core AEM, CVE-2026-75745 at 10.0 in Forms JEE). Adobe discloses through numbered bulletins on its Trust Center, patches Cloud Service automatically, runs a HackerOne bug bounty, reports no exploitation in the wild, and has no 2026 AEM CVE on CISA KEV. Not higher because pre-auth, network-reachable critical flaws keep arriving monthly in core AEM, and the 2025 KEV-listed Forms RCE (CVE-2025-54253) shows these do get exploited.
Both deployment models are on offer: AEM as a Cloud Service is fully managed on Azure with Edge Delivery Services on Adobe's CDN, and AEM 6.5 LTS is GA (SP3 shipped Sept 2026, Java 17/21) for on-premises and Adobe Managed Services deployments, so self-hosting is still a supported path rather than a dead end. Cloud Service offers no self-hosted or multi-cloud choice, though. Not higher because 6.5 LTS is permanently excluded from the Cloud Service-only AI agent layer and newer capabilities, so choosing to self-host means giving up features.
Adobe offers a 99.99% SLA option for Cloud Service production — reducing allowable downtime from 43 minutes to under 5 minutes per month — with 24/7/365 SLA4-certified on-call staff and a 5-minute incident contact commitment for 99.99% customers. Monthly SLA reports in Cloud Manager show measured uptime for author and publish tiers. Status page at status.adobe.com with component-level monitoring.
Cloud Service auto-scales publish tier based on traffic. Edge Delivery Services adds edge-computed delivery with CDN-level scaling and near-zero hydration — a significant architectural improvement for content delivery at scale. Proven at massive scale with Fortune 100 websites. Quiet Hours and Update-Free Periods are GA for managed deployment windows.
Cloud Service provides automated backups with managed RTO/RPO, and 2026 added RDE snapshots (public beta) that capture and restore code+content state on demand. Content Transfer Tool handles environment migration. However, full environment export for vendor migration remains painful — JCR content, OSGi configs, custom code, and dispatcher rules create a complex export surface. Data portability is a weakness despite functional backup/restore.
Traditional AEM SDK local quickstart JAR remains resource-heavy (4GB+ heap, 2-5 min startup) and doesn't fully mirror Cloud Service. However, Edge Delivery Services offers a dramatically better DX — AEM CLI (Node.js) with hot reload on localhost:3000, zero-build, GitHub-based, running local code against EDS Preview content. The platform has two very different dev experiences; EDS is excellent while core AEM remains painful.
Cloud Manager kept adding pipeline capability through 2026: Smart Build module-level caching, concurrent pipeline runs, config-pipeline secrets, and in the September releases Git submodule authentication for external repos, automatic branch sync for GitLab BYOG, an Execution-Id for content sync, and canary deployments (from October 1) that run a new build beside the stable release on publish, route header-selected traffic to it for a 3-hour window, then promote or cancel. Cloud Manager operations are now in the unified AEM MCP Server, and deprecated-API usage has failed the Code Quality step since April 14, 2026. Not higher because Cloud Manager remains the only deployment path for Cloud Service and there is no branch-per-PR content environment or first-party schema migration CLI.
Adobe's documentation remains extensive with thousands of pages on Experience League, updated through 2026. Edge Delivery Services docs are well-structured with getting-started guides. Quality is still uneven — some areas excellent (CF GraphQL, Edge Delivery) while others thin. The sheer volume makes navigation difficult. Community resources continue to fill gaps.
AEM Headless JS SDK includes TypeScript definitions. GraphQL schemas usable with graphql-codegen for type generation. SPA Editor SDKs have partial TypeScript support. However, AEM's core remains Java/OSGi — no official Content Fragment Model to TypeScript pipeline. Edge Delivery Services explicitly uses vanilla JS/CSS with no build tooling, so no TypeScript toolchain there either.
AEM as a Cloud Service keeps its monthly feature line on schedule: 2026.9.0 shipped September 24 2026 (Content Hub AI Search and Smart Collections, a new Dynamic Media video viewer, OpenTelemetry APM in Limited Availability, AEM agentic capabilities GA in CX Enterprise Coworker) and 2026.10.0 is dated for October 29. The separate monthly Cloud Manager line shipped 2026.10.0 on October 1 with GA canary deployments and BGP VPN routing, maintenance release 28702 followed in October, and AEM 6.5 LTS gets service packs (SP3 on September 8). Scores at the 75+ monthly anchor but below the top because many drops are incremental and several headline items ship as beta or Limited Availability.
Each monthly feature release and maintenance drop gets structured release notes on Experience League, with highlights, beta/LA program listings, known issues, and explicit 'plan-ahead' notices; the 2026.9.0 notes flag the September 28 2026 Java API deprecation deadline and the upcoming Java 25 runtime upgrade. Docs are mirrored in AdobeDocs on GitHub and a monthly Priority Product Update email is offered. Breaking behaviour can still arrive without per-item flagging in maintenance drops and there are no per-release migration codemods, keeping this below the 75+ anchor.
Adobe publishes a dated AEM Releases Roadmap on Experience League (2026.10.0 planned for October 29 2026) and runs a public 'Adobe Experience Manager Ideas' board on Experience League Communities where customers submit and vote on feature requests, with a documented status lifecycle (New, Investigating, Approved, Delivered, Declined) reviewed by Adobe. Beta, early-adopter and Limited Availability programs are listed in every release, and Summit 2026 set out a clear agentic-CMS direction. Not higher because the long-range roadmap beyond the next releases is still shared mainly in briefings and Summit keynotes rather than a public itemized board.
Cloud Service updates remain forced on Adobe's timeline, but the tooling around them keeps improving: Cloud Manager 2026.10.0 (October 1 2026) made canary deployments available on production pipelines, rolling code to a subset of nodes with promote or roll back from the UI, release notes carry dated plan-ahead notices (Java API deprecations enforced September 28 2026, Java 25 runtime migration announced ahead of Java 21 decommissioning), and Cloud Manager has failed pipelines on deprecated APIs since April 14 2026. Customers unwilling to take continuous updates also have AEM 6.5 LTS as a supported path. Held below the 70s by the lack of opt-out on Cloud Service and reports of behaviour changes after enforcement dates, such as Universal Editor CORS errors community users reported after September 28.
Large established community across multiple channels: Experience League forums, aem.live Discord (2,900+ members) with bi-weekly virtual meetups, AEM Tech Slack, dedicated customer Slack channels, and the adaptTo() conference. The 2025-2026 Adobe Experience Cloud Champion Program is active. Community is usage-focused rather than code-contribution-focused since AEM core is proprietary, keeping the score below the very top of the calibration range.
Adobe staff actively participate in Experience League forums, the aem.live Discord runs bi-weekly virtual meetups with direct AEM team engagement, AEM GEMS provides deep-dive webinars, and the Champion Program fosters community leadership. Complex questions still frequently redirect to paid support, and platform bugs require Adobe intervention since AEM core is closed-source — preventing a higher score.
Largest partner ecosystem in DXP, significantly expanded at Adobe Summit 2026 with deepened tech partnerships (AWS, Anthropic, Google Cloud, IBM, Microsoft, NVIDIA, OpenAI) and agency/SI partners (dentsu, Havas, Omnicom, Publicis, Stagwell, WPP, Accenture, Capgemini, Deloitte Digital). The unified Digital Experience Partner Program launched March 1, 2026 merges Solution Partner and Technology Partner tracks.
Abundant content ecosystem: blogs, YouTube, conference recordings, LinkedIn Learning, Udemy, Pluralsight, with Experience League providing structured learning paths. Post-Summit 2026 agency analysis is plentiful (Bounteous on EDS/AI direction Jan 2026, Perficient Summit takeaways, Ranosys AEM guides, Adobe developer blog agentic series Feb-Mar 2026), and Cloud Service/EDS-specific content keeps growing as 6.x migrations accelerate. Legacy 6.x content dilution persists but is gradually diminishing.
Active job market with sustained demand and a noted shortage of senior AEM developers and architects, particularly those with Cloud Service and Edge Delivery Services expertise. Most positions require strong Java/J2EE backgrounds with Git-based workflows and CI/CD experience, commanding premium rates. The Java requirement continues to narrow the pipeline relative to JS-stack platforms, keeping the score from climbing higher.
AEM was named #1 Content Management Software in the G2 Best Software Awards 2026, and AEM agentic capabilities reached general availability in CX Enterprise Coworker with the 2026.9.0 release. Edge Delivery Services adoption keeps accelerating, with the Experience Modernization Agent and console compressing migrations, and AMS end-of-support (August 31 2026) is pushing the remaining managed-service base toward Cloud Service or 6.5 LTS. Composable competitors continue to win greenfield deals, and Optimizely's MQ gain shows share pressure, capping the score.
Adobe reported record Q3 FY2026 results on September 10 2026: revenue $6.76B (+13% YoY), ahead of its own $6.67-6.72B guidance, non-GAAP EPS $6.13 (+15%), with full-year revenue and EPS guidance raised again and AI-first ending ARR above $650M. On September 3 Adobe announced an orderly leadership succession, with Anil Chakravarthy becoming President and CEO and Shantanu Narayen moving to Executive Chair on December 1 2026. The stock is still weighed down by the AI-disruption narrative, but there is no viability risk.
Still a Gartner MQ Leader for DXP but lost the top position to Optimizely on both ability to execute and completeness of vision, with Gartner cautioning on price, portfolio complexity and steep skill requirements. Other analyst recognition holds up: AEM Assets is a Leader in the Forrester Wave for Digital Asset Management Systems (Q1 2026) and the CX Enterprise portfolio a Leader in the Forrester Wave for Experience Optimization Solutions (Q3 2026), and Summit 2026 reframed AEM as an agentic CMS with agents actually shipping. Composable and headless competitors keep pressing on greenfield deals, capping the score in the high 60s.
G2: 4.2/5 across ~548 reviews (54% five-star, 34% four-star) — fits the 60-72 anchor for 4.2-4.4 with 100-300+ reviews, and AEM was named #1 Content Management Software in the G2 Best Software Awards 2026. The persistent pattern caps the score: users praise content management flexibility and Adobe ecosystem integration while consistently citing the steep learning curve and high cost, echoed on TrustRadius, Gartner Peer Insights, Reddit and consulting forums.
Adobe still publishes no dollar amounts for AEM. The Sites pricing page routes entirely to Contact Sales with no tiers, entry price, or overage rate card, and every figure in circulation comes from partners: 2026 cost guides put standalone Sites or Assets entry near $30K/year, mid-tier configurations at $60K–$80K, Sites+Forms+Assets bundles at $60K–$120K+ mid-market and $200K+ enterprise. Fully sales-gated, so it sits at the bottom of the 30–50 opaque-pricing band.
AEM as a Cloud Service licenses Sites by Content Requests per month, counted at the first caching layer for every HTML or JSON response whether served from cache or origin, on top of committed environments, author seats, storage, and Assets Power Users. The product description (effective 2 September 2026) says customers exceeding licensed volume over a 12-month period must license more, with Adobe able to audit usage; that annual true-up smooths monthly spikes but still converts traffic growth into an unbudgeted bill, and overage rates run well above the committed unit rate. Among the least predictable models in the dataset.
Base AEM Sites covers content management and delivery; personalization (Target), measurement (Analytics), commerce (Commerce + CIF), marketing workflow (Workfront), audiences (Real-Time CDP) and generative AI (GenStudio, Firefly Services) are each separate licenses, and Forms (~$80K/yr) and Assets are separately sold modules. New Assets customers can now only buy the Prime or Ultimate packages, and the agentic layer, including the Experience Modernization Console, is a Cloud Service-only, separately licensed SKU that 6.5 LTS deployments can never get. Add-on stacking is aggressive even for an enterprise DXP.
Enterprise Term License Agreements with 2–3 year commitments and auto-renewal remain standard, annual terms carry a premium, and true-down rights and overage caps have to be negotiated rather than being defaults. The 6.5 end-of-support timeline is less coercive than previously scored: AEM 6.5 LTS is generally available (SP3 shipped September 2026) for both on-prem and Managed Services customers, so the August 31, 2026 AMS deadline was a choice between LTS and Cloud Service, not a forced migration, though extended 6.5 support to February 2028 costs extra. No monthly billing, startup program, or published nonprofit pricing for AEM.
There is now a genuine self-serve entry point: aem.live provisions a full Edge Delivery Services + Universal Editor tutorial environment (Cloud author, preview and live site, forked GitHub boilerplate) from an email address, with no sales contact. It is deleted after 30 days and is for learning, not commercial use, and the classic routes are unchanged: the QuickStart jar needs a license from Adobe or partner status, and Cloud Manager sandboxes are sales-gated and barred from live traffic. A time-limited trial, not a free tier.
On the Edge Delivery Services path a developer can now get an editable, published page within an hour from the self-serve trial and boilerplate, and Adobe's AI skills and MCP servers speed component scaffolding. The classic Sites path most enterprise buyers still take is unchanged: SDK setup, Cloud Manager pipeline configuration, archetype scaffolding and first components take days, and teams new to AEM report 2–3 months to production-quality output. Credited for the fast lane but held well below 40 because it is not the typical deployment path.
2026 guides consistently put first-year implementation at 2–4× the annual license, with full site builds at $500K–$1M in services and complex multi-site programs from $500K to over $5M. Basic deployments run 6–12 months, DAM-only setups 1–3 months, and enterprise multi-site rollouts up to 18 months; Edge Delivery Services shortens simple marketing sites but does not change the enterprise curve. Among the longest timelines in the dataset.
AEM developers average roughly $117K–$131K a year in 2026, seniors $150K+, and the 90th percentile near $197K; Cloud Service certification adds a further 15–25%. The JCR, Sling, HTL, OSGi and dispatcher stack shares little with mainstream web skills, so the talent pool stays narrow and SI rates of $150–$300/hour run 50%+ above generalist rates. Adobe's AI coding skills help existing AEM teams but do not remove the need for AEM specialists to review the output.
Cloud Service bundles hosting, automatic updates and the Fastly CDN into the license, so there is no separate AWS or Azure bill, a real improvement over on-prem. The hosting premium is embedded in the license instead: Cloud Service deals typically run 15–30% above on-prem equivalents and full deployments commonly $250K–$500K+ a year, environment counts are contractually capped, and storage and Content Request overages apply. Customers choosing 6.5 LTS on-prem carry their own infrastructure and dispatcher costs.
Cloud Service removes JVM tuning, OS patching and most dispatcher operations, and the Cloud Manager MCP server lets teams run pipelines and check environments from the IDE. Pipeline management, environment monitoring, CDN configuration and Adobe I/O integration still need a part-time AEM ops engineer, and 6.5 LTS or on-prem deployments need dedicated ops. The 6.5 end-of-support dates (AMS passed Aug 31, 2026; on-prem core Feb 2027) keep upgrade or migration work on existing teams through 2027.
Content lives in JCR's proprietary node structure that needs custom tooling to export cleanly, components use HTL and Sling with no portability, workflows use Granite, and the 2026 MCP and agent surfaces add more Adobe-specific dependencies. Content Fragment GraphQL and Edge Delivery Services' document-based authoring allow partial structured export, but component logic, DAM renditions and smart crops, dispatcher URL rules and configuration have no standard export path. Migration specialists cite 4–8 months minimum to leave, with content extraction the main bottleneck.
AEM's core concept surface remains the largest in the dataset — JCR, Sling resource resolution, OSGi, HTL, Content Fragments vs Experience Fragments, dispatcher, clientlibs, editable templates, Cloud Manager — and 2026's releases keep adding surface (AEM Edge Functions beta for CDN-layer JavaScript, RDE snapshots, Cloud Manager AI assistant, Visual Content Fragments) rather than consolidating it. EDS, Universal Editor, and traditional Sites still remain three distinct authoring/rendering models a tier-1 team must reason about simultaneously. No score above 8 because the mental model is still fundamentally proprietary and continues to grow.
Experience League, WKND, the EDS Developer Professional certification and the sub-30-minute aem.live EDS tutorial remain the core learning path, now joined by GA first-party coding-agent support: the adobe/skills plugins for Claude Code, Cursor and Copilot, an ensure-agents-md skill that writes a project-specific AGENTS.md, and an AGENTS.md shipped in the Project Archetype since v57. Score doesn't move higher because the gap between tutorials and a production AEM CS implementation is still enormous, and most enterprises still need SI-led onboarding and certification to reach productivity on traditional Sites.
Traditional AEM CS still requires Java + OSGi + Sling + HTL — a fully proprietary stack with no transferable skills — while EDS uses vanilla JS / standard HTML/CSS with GitHub-based deploys and Universal Editor instrumentation works with React/Next.js. Score doesn't move higher because the dominant production path for tier-1 customers is still traditional AEM, where framework familiarity is near zero and Apache Sling/OSGi/JCR expertise remains niche and scarce — a talent-market thinness reiterated across 2026 reviews.
The EDS boilerplate, Block Collection, Forms EDS and commerce boilerplates and the Universal Editor sample app are vendor-maintained, the self-serve trial ships pre-configured, and Cloud Manager's site creation flow automates GitHub provisioning. On the traditional side, Archetype 58 (Sept 2026) simplifies index management and the create-component agent skill scaffolds the dialog, HTL, Sling Model, tests and clientlibs together. It stays in the 40s because the archetype still produces a complex multi-module Maven project with no example content, and the ramp from archetype to production is long.
EDS keeps configuration minimal (GitHub workflow, fstab.yaml, Config Service), and 2026 tooling chips at traditional CS: simplified index management in Archetype 58, an AI Dispatcher/HTTPD config assistant skill, AI code assessment, and Cloud Manager operations through the unified AEM MCP Server. But traditional AEM CS still carries OSGi configuration across run modes, dispatcher rules, Cloud Manager pipelines, environment variables and Sling mapping, and the Sept 28, 2026 Java API deprecation deadline (pipelines blocked at Code Quality since April) adds mandatory upkeep. AI assistance helps debug this surface without shrinking it, so it stays at the bottom of the dataset; October 2026's canary deployments and the beta option to drop the publish tier for EDS programs add choices rather than removing steps.
JCR's flexible node structure handles schema evolution well, Content Fragment Model field additions are non-breaking, and the CF Editor's JSON preview helps validate structure. The October 2026 code-assessment skill now flags Oak index definitions that look correct but silently miss queries, a long-standing modeling trap, and Archetype 58 simplifies index management. Adobe still ships no automated schema migration tooling, so breaking dialog or CF model changes still rely on custom Groovy or Java scripts.
AEM supports Visual Content Fragments (CF output rendered as formatted HTML via templates for pre-publication preview, including for EDS) and the UE and CF Editor share one RTE stack producing identical HTML, both improving in-context preview/editing; EDS retains build-free preview-on-commit via GitHub and AEM CLI gives instant local preview. Score doesn't reach 50+ because SPA Editor for React/Angular still requires significant custom integration and headless-only CF projects still need bespoke preview middleware.
EDS and Universal Editor give generalist JS developers a path that avoids deep AEM internals, and Adobe's GA agent skills (component scaffolding, code assessment, dispatcher assistance, 6.5-to-Cloud migration runbooks) encode AEM best practice for coding agents. Any production AEM CS build still needs certified specialists in Java, OSGi, JCR, Sling, HTL, dispatcher and Cloud Manager to review agent output, so specialization stays the highest in the dataset; Gartner's 2026 MQ flagged steep skill requirements.
EDS-only sites remain viable with 2-3 developers using standard web skills (aem.live confirms EDS scales to 100k+ pages with hundreds of authors), and the Cloud Manager AI assistant's pipeline troubleshooting eases deployment debugging but doesn't change role count. Full AEM CS implementations still require 5+ specialized roles (backend, frontend, AEM architect, DevOps/CM specialist, sometimes a dedicated dispatcher engineer), and tier-1 enterprise rollouts routinely staff 8-15+ AEM specialists over 6-12 month implementations.
Universal Editor drag-and-drop and in-context Content Fragment editing, EDS document-based authoring, and Experience Workspace's real-time WYSIWYG canvas (EDS projects only) let marketers publish without developers, and AEM agentic capabilities went GA in Adobe CX Enterprise Coworker in September 2026 for creating and updating content in plain language under existing governance. Template policy changes, workflow modifications and new components on traditional AEM still require developers, and author training for traditional AEM remains a 1-2 week curriculum.
Cloud Service auto-updates eliminate manual version upgrades, and Cloud Manager keeps de-risking deployments on a monthly cadence: 2026.10.0 (Oct 1, 2026) made canary deployments available in production pipelines, rolling code to a subset of nodes with promote or roll back from the UI, after 2026.9.0 added automatic Git submodule authentication and GitLab BYOG branch sync, alongside Quiet Hours and Update-Free Periods. But the deprecated-API enforcement cycle was fully realized in 2026, the next runtime move (Java 25 for every Cloud Service environment by June 2027) is already scheduled, and on-prem/LTS upgrades remain classic service-pack projects. Not higher because enforced cleanups and the on-prem upgrade path are a real operational tax; not lower because the managed model removes most upgrade work for compliant tenants.
Cloud Service auto-patches transparently, but critical-severity volume stayed high into October: APSB26-152 (Oct 13, 2026) fixed 35 AEM vulnerabilities, 14 critical, including three CVSS 10.0 incorrect-authorization flaws leading to code execution (CVE-2026-90532, CVE-2026-48383, CVE-2026-48382), on top of 111 AEM CVEs published in September. Cloud Service was fixed in release 2026.9.28386 without customer action, but 6.5 and 6.5 LTS tenants got no new service pack and must apply a list of six or seven separate GRANITE, SITES and NPR hotfixes that differ between the two lines. Not higher because the critical cadence and the self-managed hotfix burden are heavy; not lower because Cloud Service tenants are patched automatically and Adobe reports no exploitation in the wild.
Adobe still drives several overlapping migrations on its own timeline: AMS support for classic 6.5 ended Aug 31, 2026, the deprecated-API cutoff hit Cloud Service tenants on Jul 23, 2026, on-prem 6.5 core support ends Feb 2027 (extended to Feb 2028), and the 2026.9.0 release notes schedule a mandatory Java 25 runtime move for all Cloud Service environments by June 2027, about nine months out. The pressure on 6.5 is a fork rather than a forced cloud move, since 6.5 LTS is GA and shipping service packs on Java 17/21 for on-prem and AMS. Not higher because every 6.5 customer must move within months and Cloud Service tenants face back-to-back enforced changes; not lower because deadlines are published well ahead and a non-cloud path exists.
Cloud Service manages core platform dependencies (JVM, OSGi, Sling, Oak), and 2026 Cloud Manager work, including Smart Build incremental compiles, BYOG Git-clone credentialing, automatic Git submodule authentication (2026.9.0), CMK self-service and 400 environment variables, improves build and secret hygiene. Custom code is still built with Maven against versioned AEM APIs, the deprecated-API enforcement cycle forced dependency cleanup, and 6.5 LTS tenants own an upgraded Felix/Sling/Oak stack themselves. Not higher because the Maven/OSGi surface remains substantial; not lower because Adobe owns the core dependency lifecycle for Cloud Service tenants.
Cloud Service provides meaningful built-in monitoring: Cloud Manager tracks per-instance metrics with warning/critical thresholds, the platform runs hundreds of cloud-native monitors 24/7, and self-serve host/port reachability checks speed up integration troubleshooting; the Content Sync API now returns an Execution-Id header for tracing sync operations. New Relic APM is included, Dynatrace is customer-managed and Splunk is used for log forwarding. Not higher because deep APM still needs real setup and dispatcher/CDN monitoring is fragmented; not lower because built-in monitoring is functional and steadily improving.
Content operations at scale remain very demanding: link management, tag taxonomy governance, MSM Live Copy conflict resolution, Content Fragment model evolution and language copy synchronization all need ongoing attention proportional to AEM's capability set, and 2026 reviews note that recovering accidentally deleted content often means asking support to restore an instance rather than rolling back a single page. Cloud Manager Content Copy and the Content Sync API help move content between environments, but there is no automated hygiene layer such as orphan detection or broken-reference alerts. Not lower because AEM provides workflow automation, content policies and MSM; not higher because manual operational burden at scale is among the highest in the market.
Cloud Service automates infrastructure-level performance management, and 2026 Edge Delivery Services work (AEM Edge Functions at the CDN layer, EDS delivery while authoring in AEM Author mode, Canary deployments, OIDC Edge Authentication and the flexible publish tier) extends an auto-optimized delivery path that bypasses dispatcher tuning. For classic publish/dispatcher delivery, still the majority deployment, Oak query/index management and dispatcher caching rules continue to demand specialists; the new AMS Web Tier Pipelines speed dispatcher changes but don't remove the tuning. Not higher because most installations still carry the dispatcher/Oak burden; not lower because the Edge Delivery path materially reduces effort for adopters.
Enterprise support offers P1 to P4 severity SLAs, dedicated TAMs for large accounts and a Request a Callback option for P2/P3 cases with scheduled screen-sharing, and 2026 review aggregates are broadly positive (PeerSpot around 8.2/10). But 2026 G2 reviews flag high licensing and support costs and slow resolution on heavily customized implementations, responsiveness varies by region, and some recoveries such as restoring deleted content still route through support. Not higher because complex-issue resolution, cost and regional variance draw recurring complaints and good support is tied to Enterprise spend; not lower because the review base is favorable and callback tooling is a concrete improvement.
Experience League forums have active participation from community members and Adobe staff, with healthy volume on current topics like the 6.5 end-of-support decision (LTS vs. Cloud Service) and deprecated-API remediation, and Adobe runs a public Ideas board. Complex architectural questions still often redirect to paid support or go unanswered; the community is strong for common patterns but weak for edge cases and custom implementations. Not higher because complex questions lack coverage; not lower because Adobe staff participation is genuine and forum activity is healthy.
Cloud Service maintenance releases ship continuously and Cloud Manager ships monthly (2026.7.0 on Jul 9, 2026.9.0 on Sep 3), so fixes deploy quickly once made, and the September security wave was patched for Cloud Service tenants without customer action. But the fix cadence for customer-reported issues is opaque, lower-severity bugs can take months, there is no customer-initiated hotfix path on Cloud Service, and LTS fixes arrive on a service-pack cadence. Not higher because non-critical resolution is slow and opaque; not lower because critical issues are addressed promptly and shipped continuously.
Editable templates with template policies give excellent landing page control. Content authors can build pages from an approved component palette with drag-and-drop. Style System enables visual variations without code changes. Experience Fragments for reusable page sections. Edge Delivery Services with Universal Editor provides a mature, fast WYSIWYG in-context authoring option alongside document-based authoring and traditional authoring. AI Assistant and Sites Optimizer agents accelerate landing page generation and optimization from briefs. This remains one of AEM's core strengths.
Launch capabilities for campaign scheduling and coordinated content updates. Integration with Adobe Campaign for email. Workfront integration for campaign planning. Targeted Content for campaign-specific personalization. However, AEM itself is not a campaign management tool — it provides content execution within the Adobe Campaign/Workfront ecosystem. Without those additional products, campaign management is basic scheduling only.
Sitemap generation (including AI-assisted auto-generation via Sensei), meta tag components, canonical URL management, redirect mapping. AEM Sites Optimizer adds native SEO analysis, acquisition optimization, and E-E-A-T compliance recommendations — closing the gap that previously required third-party tools. The new Adobe LLM Optimizer improves visibility in AI/generative search engines. Edge Delivery Services delivers Lighthouse 100 performance scores and is optimized for both traditional search and generative engine discovery. Sites Optimizer's 2026 release cadence keeps turning findings into deployable fixes: Preflight opens directly from the Sites Page Editor (2026.7.0+), alt text and broken-link fixes deploy with published-status confirmation, and FAQ structured data deployment (Early Access) lets authors on Multi Site Manager pages choose whether the update lands on the source page or only the local copy.
AEM Forms is available on Edge Delivery Services, bringing native form handling to the EDS authoring path. AEM Sites Optimizer addresses conversion optimization and CTA refinement. Core Components include a form component for basic use cases. Adobe Analytics integration provides conversion tracking. Advanced form capabilities still require the separate AEM Forms license for full functionality. Sites Optimizer now reaches into paid media: Google Ads Placement Exclusions reviews placement risk for connected accounts and produces exclusion lists for automated and Performance Max campaigns, and a Google Ads connection (Early Access) brings paid-traffic data into its recommendations.
AEM ContextHub provides native rule-based audience segmentation and behavioral targeting for AEM Sites. Tight integration with Adobe Target adds AI-driven auto-target, auto-allocate, and automated personalization powered by real-time CDP audiences. Experience Fragments export directly to Target as personalization offers. The 2026 agentic AI expansion adds purpose-built audience segmentation and journey orchestration agents within AEM Experience Hub, reducing the configuration effort previously required to operationalize personalization. Still strongest when multiple licensed Adobe products are combined.
Adobe Target provides full A/B and multivariate testing with statistical significance and auto-allocate, tightly integrated with AEM via Experience Fragments. On the native side, the open-source adobe/aem-experimentation extension adds author-editable variant splits in Universal Editor and Sidekick, and the Contextual Experimentation doc no longer carries its beta callout. It is narrow, though: A/B only, a conversion goal only, one page-level experiment per page, and EDS/Universal Editor only, with the UE extension still 'enable or request access'. Native testing covers simple cases; anything sophisticated still means licensing Target.
Edge Delivery Services with document-based authoring provides extremely fast brief-to-publish cycles, and in September 2026 Document Authoring became Experience Workspace: a WYSIWYG canvas with layout mode and real-time co-authoring between authors and AI agents, with AEM Assets built in. AEM agentic capabilities (content creation, updates, readying experiences under existing governance controls) became generally available in Adobe CX Enterprise Coworker in September 2026, although only the Coworker immersive experience is live and the in-product right-rail panel is still pending. The traditional AEM path with editable templates, inline editing, bulk operations and Experience Fragments is mature. Real-time co-authoring is EDS/Experience Workspace only; Classic Page Editor and Universal Editor remain lock-based.
Content Fragments provide structured, channel-agnostic content models deliverable via GraphQL or REST API to any channel. Native web delivery via AEM Sites or Edge Delivery. Adobe Campaign integration for email channel. Headless API delivery to mobile apps, digital signage, IoT. Social channel content management is manual. The headless + traditional hybrid architecture supports the widest channel range of any CMS platform.
Adobe Analytics is natively integrated — tag management via Adobe Launch, content performance dashboards within Adobe Experience Cloud. Content Analytics provides content engagement metrics including media impression tracking and AI attribution. GA4 integration available via Adobe Launch. AEM Sites Optimizer surfaces content performance insights directly. The analytics depth within the Adobe ecosystem is unmatched.
Template policies enforce which components are available on each page type, preventing off-brand layouts. Style System provides approved visual variants without code changes. Design tokens and CSS custom properties applied at site level. Editable templates lock structural regions. The 2026 Governance Agent adds automated brand-voice, content-guideline, and competitor-positioning checks at authoring time. The platform enforces brand guardrails at the CMS level — marketers cannot deviate from approved patterns without developer involvement.
AEM includes Open Graph and Twitter Card meta tag components for social preview management. Social media sharing components available in Core Components. No native social scheduling or push-to-social workflow — this requires external tools like Hootsuite or Adobe Social (discontinued). UGC embed via iFrame is possible but not a native pattern. Covers the fundamentals but lacks active social publishing capabilities.
AEM Assets is enterprise-class DAM with image/video transforms via Dynamic Media, AI-powered auto-tagging via Sensei, usage tracking, rights management and license expiry, asset versioning, and brand portal for partner asset sharing. Content Hub extends DAM access to marketers with no-code asset usage, with permission management, governance controls, and usage tracking, and now connects natively to GenStudio for Performance Marketing. The marketing asset management capability is the strongest of any CMS platform — it's the product enterprises pay for. The 2026.9.0 release adds Content Hub AI Search (intent-based, multilingual, synonym-aware), self-updating Smart Collections, and (in Limited Availability) a new Dynamic Media video viewer with view, watch-time and completion analytics, AI-generated captions, multi-audio tracks and attribute-based delivery restrictions for controlled campaign assets.
Language Copy creates locale-specific site structures from master. MSM Rollouts push campaign content with override points per locale. Translation integration connectors for SDL, Translations.com, Google Translate. Locale-specific campaign scheduling via Launches. Regional legal content (cookie banners, disclaimers) manageable per site. Transcreation workflows configurable. The localization model is among the most mature available.
Deep pre-built connectors: Adobe Campaign (email/MAP), Adobe Marketo Engage, Salesforce CRM, Adobe Workfront (campaign planning), Adobe Real-Time CDP, Adobe Journey Optimizer. GenStudio for Performance Marketing now integrates natively with AEM Assets/Content Hub, extending the content supply chain into ad and performance channels. The 2026 Model Context Protocol (MCP) and A2A support lets external AI agents interact directly with AEM services. Adobe Launch (tag manager) provides easy integration with third-party tools. The Adobe Experience Cloud suite provides the deepest MarTech integration within a single vendor ecosystem. Third-party MAP/CRM connectors (HubSpot, Pardot) require custom work.
Content Fragments can model rich product content with variants, attributes, and media. AEM Assets excels at product media management with Dynamic Media for multiple renditions per SKU. AEM Assets Integration for Commerce automates digital asset linking to Adobe Commerce products and categories by SKU. However, AEM is not a PIM — product catalog data lives in the commerce backend, with AEM providing content enrichment only.
CIF-based merchandising components (category pages, carousels, cross-sell/upsell) remain available but CIF is in maintenance mode and not recommended for new builds. The recommended path is Edge Delivery + Adobe Commerce Storefront, with Product Discovery (faceted search, category listings) and Recommendations drop-ins managed from Adobe Commerce Admin, plus Adobe Commerce Optimizer for SaaS AI-powered catalog, search and recommendations. The authoring story is still shifting: Adobe Commerce no longer onboards new storefront customers onto Universal Editor and points them to Experience Workspace instead. Merchandising lives mostly in commerce services rather than AEM itself.
CIF provides deep Adobe Commerce integration with GraphQL federation — product data available in author, cached at edge, real-time on publish. commercetools connector available. Adobe Commerce Optimizer adds a modern SaaS integration layer for catalog performance while allowing existing backend commerce systems to be retained. The core architecture of blending AEM content with commerce data remains the deepest in the market. Non-Adobe commerce integrations require more custom work.
CIF enables editorial commerce pages (buying guides, lookbooks, shop-the-look) with inline product references pulled live from the commerce backend. Content Fragments blended with product data allow rich product storytelling. Edge Delivery path supports shoppable content patterns via block-based composition. This is a genuine first-class use case for AEM commerce implementations, with multiple customer case studies.
Checkout itself runs in the commerce platform, but the Edge Delivery Commerce Storefront ships Cart and Checkout drop-in components with slots and containers that let teams inject CMS-managed content into transactional flows. Adobe's storefront docs include tutorials for adding messages to the mini cart, custom cart summary lines, gift options and extra checkout buttons. The legacy CIF path offers less. Injection points still require developer setup per slot, so this is basic banner-style control rather than marketer-managed checkout content.
AEM can provide post-purchase content pages (onboarding sequences, product setup guides, loyalty program content) via CMS-managed templates. However, triggering post-purchase content delivery based on order events requires integration work with Adobe Journey Optimizer or Adobe Campaign. No native order event listener in AEM itself. Delivery tracking and transactional confirmation pages are typically in the commerce platform.
The Edge Delivery Commerce Storefront now ships first-party B2B drop-ins: Company Management (company profile, role-based permissions), Company Switcher, Purchase Order (approval rules and history), Quote Management (negotiable quote request, negotiation, approval) and Quick Order (bulk ordering by SKU). Storefront gated-content configuration restricts edge-delivered pages and assets to authenticated buyers, and a Price Book ID setup supports account-specific pricing. On the AEM Sites side, CUGs gate catalogs and spec sheets, and Content Fragments model technical datasheets. The B2B features depend on Adobe Commerce with B2B enabled; gated content needs an auxiliary edge service to evaluate tokens.
AEM's Oak-based full-text search handles CMS content well, with faceting configurable via the AEM Search Facets component. CIF integrates commerce search (via Magento/Commerce catalog) with editorial content in blended results. Adobe Commerce Optimizer adds AI/ML-powered personalized search on the commerce side. Search landing pages manageable as AEM pages. Synonym management and search analytics for CMS content require external search platforms (Algolia, Elasticsearch). Not a native commerce-grade search solution on its own.
AEM Launches enable time-activated promotional content with coordinated activation dates, and ContextHub provides segment-specific promotional variants on AEM Sites. On the Edge Delivery storefront, a Personalization drop-in displays content conditionally by Adobe Commerce customer groups, segments and cart price rules, so promo messaging can follow the commerce promotion engine. Scheduling options are documented for storefront pages. Tiered pricing tables and promo code logic remain commerce-backend concerns.
MSM natively supports multiple storefronts from a single AEM environment — shared product content (descriptions, media) via Live Copy with storefront-specific editorial and legal overrides. CIF supports per-storefront commerce catalog mapping. Language and region variants handled via Language Copy + MSM. Running 20+ storefronts on one AEM environment is a well-documented enterprise deployment pattern.
AEM Assets Dynamic Media provides 360-degree spin sets, video in PDP, interactive hotspot images, AR/3D model viewer integration, zoom, and on-the-fly image transforms. This is enterprise-class visual commerce — deployed by major retailers for their PDPs. The AEM Assets Integration for Commerce automates product-media association by SKU. Dynamic Media is the strongest product visual management capability available in any CMS.
AEM is not a marketplace platform. Seller-contributed product descriptions can theoretically be handled via DAM and Content Fragment workflows with per-vendor author groups, but this is not a designed-for use case. Content moderation at marketplace scale requires custom build. No native seller profile pages, seller ratings integration, or review aggregation. AEM is enterprise CMS, not marketplace infrastructure.
Language Copy + MSM Rollout provides locale-specific product content — descriptions, regulatory labels (EU product labels, CA Prop 65), regional pricing callouts — with central maintenance and local override points. CIF maps locale-specific product catalogs from commerce backend. Market-specific promotional calendars managed via Launches per locale. Currency display in content blocks requires commerce backend integration.
Adobe Analytics + Adobe Commerce native integration provides revenue attribution to content pages, content-assisted conversion tracking, and product content performance metrics within the Adobe Experience Cloud. Content Analytics surfaces engagement data for product content assets. However, complete content-to-revenue attribution requires proper Analytics configuration and typically Adobe Customer Journey Analytics for cross-journey analysis.
CUGs provide granular publish-tier access control by department, team, or individual. LDAP/SAML integration for enterprise SSO with AD attribute-based content targeting — users see department-relevant content automatically. Group-based content visibility with ACLs per content path. The access control model is enterprise-complete. Audience-based dynamic content visibility at field level is limited without Adobe Target.
AEM can serve as a knowledge base — taxonomy via tags, full-text search via Oak, content versioning, and approval workflows. Workflow models support knowledge article review and publication. However, it lacks purpose-built knowledge management features: no knowledge base templates, no article feedback mechanisms, no knowledge lifecycle with auto-expiry, no knowledge graph. AEM is a CMS, not a KM platform.
AEM can build successful intranets — Adobe's own intranet (94% employee satisfaction, 20,000+ employees), Walmart OneWalmart, and Manulife's enhanced intranet (25% increase in intranet visits, 50% faster site development) are AEM-based — but these required extensive custom development of every employee-facing feature. No native notification system, social features, employee directory, or personalized dashboard. Building an intranet requires custom components for every EX touchpoint. Success stories represent significant engineering investment, not out-of-box capability.
AEM Sites can publish company news and department announcements. ContextHub enables audience segmentation for targeted internal comms — showing department-specific news to relevant employees via AD attributes. Launches coordinate scheduled announcements. However, no native acknowledgment tracking, mandatory-read workflows, or read receipts. These require custom build. The platform covers basic targeted publishing but not formal internal comms management.
No native employee directory or org chart in AEM. Directory pages can be built as AEM content with profiles sourced from Active Directory or Workday via custom integration, but this requires significant custom development. Org chart visualization requires a third-party component or custom build. Skills/expertise search is not a platform feature. AEM has the access control to secure a directory but not the tooling to build one easily.
AEM provides versioning with full audit trail, approval workflow, and content lock/unlock for policy document management. Workflow models can enforce multi-stage review before policy publication. Replication workflows control when policies go live. However, no mandatory acknowledgment tracking, automated review reminders, or expiry date enforcement natively. Policy management is possible but requires workflow configuration; it's not a purpose-built feature.
AEM can host onboarding content pages with role-specific visibility via CUGs and ContextHub, and template-based page creation provides structured onboarding paths. However, progressive disclosure over 30/60/90 days, task checklists, completion tracking, and HR system-triggered new-hire portals all require custom development. There is no native onboarding journey engine. The platform can serve the content but not orchestrate the journey.
Oak/Lucene-based full-text search handles AEM content well with faceting, tag-based filtering, and basic relevance tuning. However, federated search across SharePoint, Confluence, or Google Drive is not native — requires external search platforms (Coveo, Elasticsearch, Microsoft Search). AI-powered relevance tuning and search analytics require third-party integration. Adequate for pure AEM content but not enterprise-wide federated search.
AEM Sites delivers responsive web experiences accessible on mobile browsers. Edge Delivery Services provides exceptional mobile web performance. However, there is no native mobile app for intranet access, no push notification system, no offline support, and no frontline worker or kiosk mode. Responsive web is the only delivery mechanism for mobile intranet consumers. Deskless/frontline workers are not a designed-for use case.
No native LMS integration in AEM. Learning content can be hosted as AEM pages, but course assignment, completion tracking, certification, and SCORM delivery all require a separate LMS (Cornerstone, Workday Learning). AEM could theoretically surface completion data if an LMS exposes it via API, but there's no pre-built connector. Learning is not a use case AEM was designed for.
AEM Communities (the legacy social/community module, a separately licensed 6.x add-on) provided comments, forums, and reactions but is not part of AEM as a Cloud Service. No replacement native social layer exists. Comments, reactions, polls, discussion forums, and peer recognition all require custom development or third-party integration (Yammer, Teams). The platform has no social engagement capability out of the box in modern deployments.
No native Microsoft Teams, Slack, or Google Workspace integration in AEM. Content notifications can be pushed to workplace tools via custom webhook integrations or middleware. Adobe Experience Manager supports Adobe Workfront integration for content workflow visibility. Sidekick (AEM EDS authoring aid) is browser-based, not Teams-embedded. Workplace tool integration requires custom development for meaningful integration beyond basic notifications.
AEM provides content versioning with full history, approval workflows, and replication control. Workflow models can enforce periodic content review stages. The AEM Inbox tracks outstanding review tasks. However, automated review reminders based on publish date age, stale content flagging, and archival workflows with ownership reassignment are not native — they require workflow customization or third-party governance tools.
Adobe Analytics integration provides page view metrics, engagement data, and content performance for intranet pages. Department-level reporting requires Adobe Analytics segment configuration. Failed search terms visible in Oak search logs but not in a native dashboard. Adobe Experience Platform + CJA can provide richer intranet analytics for teams that have the full suite. Functional but requires Analytics configuration effort.
MSM with per-site configurations provides strong tenant isolation. Content tree separation, user group isolation, template policies per site, OSGi config per site. Multiple brands can operate independently with centralized governance. Some environment configurations and system resources are shared across tenants (not true isolated multi-tenancy), but the practical isolation is battle-tested at enterprises running 100+ sites.
Core Components serve as a shared foundation. Blueprint pages provide shared content with brand-specific Live Copies. Template policies control which components are available per brand. Style System enables brand-specific visual treatment of shared components. The shared-with-override model is the most mature of any CMS platform.
Centralized blueprint governance with brand-level autonomy. Rollout configurations control inheritance behavior. Cross-brand approval workflows. Template policies enforce brand-level component availability. User groups provide administrative isolation. The 2026 Adobe Governance Agent monitors rights expirations, validates brand policy adherence, and updates permissions automatically as collaboration evolves — converting a compliance bottleneck into automated enforcement. AEM Experience Hub adds a governance layer over the brand truth, permissions, and content sources that both teams and agents draw from. This remains the gold standard for multi-brand governance.
Additional sites within an AEM environment have low marginal infrastructure cost — MSM handles many sites efficiently. However, licensing scales with traffic across all sites. Each additional site adds content operations burden. The per-brand increment is moderate — better than running separate instances but the base cost is so high that the efficiency is relative.
AEM's Style System applies brand-specific CSS classes to shared Core Components — each brand gets its own visual treatment of the same component library without code forks. Template policies enforce per-brand color palettes and typography tokens. Front-end theming layers (clientlibs, CSS custom properties) are isolated per site. Edge Delivery Services uses CSS/JS bundle isolation per site. Strong platform-level per-brand theming.
AEM's Language Copy + MSM combination handles the brand × locale intersection natively: per-brand translation workflows, locale-specific publication approval chains, and regional legal content (cookie consent, country-specific disclaimers) with per-brand control. Translation connectors support professional transcreation per brand. Rollout configurations can enforce that locale variants stay within brand-approved boundaries.
Adobe Analytics multi-suite tagging enables per-brand report suites alongside a global rollup. Cross-brand content velocity, engagement comparison, and publishing cadence can be tracked. Content Analytics provides asset-level performance across brands. Adobe CJA enables portfolio-level journey analysis. However, out-of-box reporting is brand-by-brand; cross-brand aggregate dashboards require Analytics workspace configuration.
AEM workflow models are independently configurable per brand site — unique approval chains, review stages, escalation paths, and notification rules per brand. The AEM Inbox provides cross-brand task visibility for central governance teams. Workflow audit trails are centrally accessible via AEM's admin interface. Brand teams operate their own workflow instances while central teams have audit-level oversight.
Blueprint + Live Copy is purpose-built for corporate-to-brand content syndication. Rollout configurations define what syndicates automatically vs. what requires local approval. Push updates flow from Blueprint to all child brands. Override points let local teams adapt syndicated content within approved boundaries. Press releases, product announcements, and legal disclaimers syndicate with fine-grained inheritance control. The best syndication model available in any CMS. Blueprint and Live Copy extend to Edge Delivery sites only with AEM authoring as the content source and the repoless feature enabled; document-authored or Experience Workspace sites sit outside the MSM model.
AEM supports per-brand/region cookie consent configurations, GDPR workflow integration, and data residency via AEM as a Cloud Service regional deployments. Replication workflows can enforce that content meets compliance checklist before going live to a region. However, automated publishing guardrails that block non-compliant content are workflow-dependent, not enforced at the platform level. Compliance requires proper workflow configuration per brand/region.
Core Components serve as the central design system foundation — maintained by Adobe with versioned releases and update propagation. Brand-level extensions via Style System and component overlays without forking the core. Frontend themes use CSS custom properties for design token management per brand. AEM's Core Components versioning model (v1, v2, v3 per component) enables controlled design system updates across all brands.
AEM's user administration supports a central admin managing all brand sites, brand-specific author groups with scoped permissions, and cross-brand contributor roles for global content teams. SSO via SAML/LDAP spans across all brand sites in the AEM environment. IMS (Adobe Identity Management System) integration for AEM as a Cloud Service provides enterprise identity federation. Brand teams are autonomous within their content trees.
Content Fragment models can be defined at the global level and used across all brands, with brand-specific models inheriting or extending base models. Template policies allow brand-specific component configurations without creating separate component code. AEM's content model inheritance allows global base types with brand-specific fields added via model extension. Not as elegant as a code-based schema extension system but functional for enterprise multi-brand deployments.
Adobe Analytics + AEM provides brand-level publishing activity and content performance metrics. Adobe Experience Platform provides portfolio-level identity and content engagement data. Content freshness by brand requires custom reporting on AEM last-modified metadata. Publishing SLA tracking and cost allocation per brand are not native AEM reports — they require external tooling or custom Adobe Analytics workspace configuration.
Adobe's GDPR posture for AEM as a Cloud Service remains strong. Adobe holds approved BCRs (Binding Corporate Rules) — rare among DXP vendors. DPA available via Adobe's standard online agreement with SCCs for international transfers, sub-processor list updated quarterly, and Privacy Service API for DSR automation. EU hosting regions available on AWS and Azure. The gap remains that DSR handling in AEM Sites requires integration work with Privacy Service API — not turnkey. On-premise deployments shift all GDPR accountability to the operator.
AEM as a Cloud Service is HIPAA-ready with Adobe acting as Business Associate under a signed BAA, and the Trust Center lists a SOC 2 + HIPAA attestation for both Experience Cloud and Managed Services, so an independent auditor tests controls mapped to the HIPAA Security Rule. The HIPAA readiness page (updated October 9 2026) scopes this tightly: Sites, Publish, Edge Delivery Services, Assets, Forms and Cloud Manager are HIPAA-ready only with the Extended Security for Healthcare add-on applied at program creation, PHI is barred from RDE/Dev/Stage, and Universal Editor, Sites Optimizer, Content Hub, Commerce Integration Framework, AEM Guides and LLM Optimizer are not HIPAA-ready. PHI cannot flow through the main modern authoring surface, so it stays below healthcare-purpose-built platforms.
AEM covers CCPA, UK GDPR, PIPEDA and LGPD through Adobe's global privacy program, plus APEC PRP, FERPA-ready and GLBA-ready designations. Government coverage is real but sits on Managed Services: FedRAMP Moderate (FedRAMP Marketplace F1509037239), IRAP at PROTECTED level and Spain ENS, with Edge Delivery Services added to the FedRAMP deployment path in March 2026. AEM as a Cloud Service still holds no FedRAMP authorization of its own, Adobe's new BSI C5 and ISMAP attestations do not extend to any AEM product, and there is no HITRUST.
AEM as a Cloud Service is covered by the Experience Cloud SOC 2 Type II and AEM Managed Services by a separate Managed Services SOC 2 Type II, both covering Security, Availability and Confidentiality over a twelve-month period, with public SOC 3 summaries and reports under NDA. Both also have a SOC 2 + HIPAA variant. The large self-managed on-premise installed base has no SOC 2 coverage, which keeps this short of a pure-SaaS vendor with the same scope.
Adobe holds ISO 27001:2022, ISO 27018:2019, and additionally ISO 27017:2015 for cloud security controls — all covering AEM Cloud Service. ISO 22301:2019 for business continuity adds resilience assurance. Annual surveillance audits maintained. The expanded ISO portfolio (27001 + 27017 + 27018 + 22301) is among the strongest in the DXP market. On-premise AEM still excluded from certificate scope.
Adobe's September 2026 Trust Center redesign maps certifications per product, and that changes the picture for AEM. AEM Managed Services carries FedRAMP Moderate, IRAP at PROTECTED level, Spain ENS, CSA STAR Level 2 and SSDF attestation; AEM as a Cloud Service carries CSA STAR Level 2, ISO 9001, SOC 2 + HIPAA, APEC PRP and KY3P. PCI DSS 4.0 is no longer mapped to AEM (the ROC now covers only Commerce and Acrobat Sign), and Adobe's new BSI C5 and ISMAP attestations exclude AEM. The portfolio is still among the strongest in the DXP market, but the government certifications split by deployment model and PCI has dropped off.
Strong and maturing: AEM Managed Services runs a sovereign-by-design (Single Sovereign Architecture) on the now-generally-available AWS European Sovereign Cloud (GA January 15, 2026; EU-located, EU-operated in Brandenburg, Germany) and on Microsoft Cloud for Sovereignty, with a further Adobe–Microsoft collaboration for content/data management hosted in the Netherlands — directly answering EU operational-autonomy requirements. AEM as a Cloud Service retains selectable AWS/Azure regions with contractual residency, and on-premise provides full sovereignty. This largely closes the prior gap versus Salesforce's EU Operating Zone, though the sovereign offerings apply to Managed Services rather than the Cloud Service product, and some Adobe telemetry still flows globally.
AEM Cloud Service has configurable content retention and Adobe Privacy Service API handles right-to-erasure programmatically with job tracking. DPA documents post-termination deletion. The gaps persist: deletion confirmation certificates not standardly issued, Privacy Service API requires integration effort for AEM Sites data stores, and automated PII detection/classification is not native. Lifecycle tooling is adequate but meaningfully below purpose-built data governance platforms.
AEM as a Cloud Service supports self-service forwarding of AEM, Dispatcher and CDN logs through Git-declared Cloud Manager configuration pipelines to eight named destinations (Splunk, Datadog, Dynatrace, Elasticsearch, New Relic, Sumo Logic, Amazon S3, Azure Blob Storage) plus generic HTTPS, with mutual TLS authentication now in beta. Audit logs on new Cloud Service instances are purged automatically only after 7 years. The audit log UI is still not analytics-grade and there is no native compliance monitoring dashboard comparable to Salesforce Shield.
Adobe publishes a current ACR for AEM Cloud Service Sites (VPAT 2.4Rev, September 2024) referencing WCAG 2.2 AA. However, the ACR itself documents meaningful authoring gaps: Universal Editor canvas not keyboard accessible, rich text editor toolbars and drag-and-drop operations not keyboard accessible, annotations and some tree directories inaccessible. Formal documentation exists but the documented partial-support items in core authoring workflows keep this in the mid-60s.
Adobe publishes ACRs for AEM Sites Cloud Service, Assets Cloud Service, AEM 6.5 Sites, AEM Forms and Edge Delivery Services (refreshed December 2025) on the ITI VPAT 2.x template, covering WCAG 2.2 AA, EN 301 549 and Section 508, which is broad product-level coverage few DXP vendors match. The Sites Cloud Service report dates from September 2024 and has not been refreshed despite two years of Universal Editor changes, which keeps this from scoring higher.
Generate Variations (GA) is integrated into the Universal Editor, AEM Sidekick, and Content Fragment Editor — generating multiple copy variants with Adobe-provided or user-managed prompt templates and an AI Rationale view. Content Advisor / Content Optimization Agent creates channel-ready variants from natural language and is GA via the Agentic SKU. Brand voice controls are prompt-based (freeform), not a governed taxonomy, which prevents a higher score.
Adobe Firefly is a first-party generative AI image platform integrated with Content Hub: background replacement, object addition, visual style variations, and Adobe Express in-flow editing (2026.6.0 adds native .psd/Photoshop editing from Assets view and Content Hub). Video Smart Crops (GA 2026.5.0) and multi-caption/multi-audio localized video extend Dynamic Media's Sensei media AI, and all Firefly assets receive Content Credentials (C2PA provenance). AEM retains the deepest first-party image AI stack of any DXP; image generation consumes Adobe Express/Firefly generative credits rather than being unmetered, which is the only moderating factor.
AEM shipped AI Translation Integration to GA in the 2026.4.0 release: an LLM-based translation service (Azure OpenAI first, additional providers planned) configured in Translation Cloud Services that reuses existing translation projects and workflows and delivers human-quality output at machine-translation speed. Uploadable per-locale style guides are analyzed to auto-generate translation rules that preserve tone, terminology, and brand language across locales — genuine brand-voice-preserving AI translation. Microsoft Translator remains the OOTB NMT connector and TIF still orchestrates NMT partners (Smartcat, LILT, Smartling). Raised from 45; stops at 70 because it is bring-your-own-LLM (single provider today) rather than a fully packaged first-party MT engine.
Multi-layer AI metadata automation: Smart Tags (GA) auto-tags images, video, and text on upload with confidence scores and custom taxonomy training; AI-generated metadata in Assets view and Content Fragment Auto-Tagging inherit tags at authoring time. AEM Sites Optimizer (GA April 2025) provides AI-first SEO with auto-identify/auto-suggest/auto-optimize tiers covering technical SEO, Core Web Vitals, structured data, and accessibility, and Adobe LLM Optimizer adds Generative Engine Optimization. Score stops at 80 because on-page scoring recommendations require the separately licensed Sites Optimizer add-on. Brand Aware Metadata, which generates custom metadata fields on upload from a brand prompt library with a playground and prompt optimizer, is still in beta (2026.9.0) and is not counted.
AI workflow features are woven into editorial: Smart Tags auto-tagging on ingestion, Content Fragment Auto-Tagging at authoring, Sites Optimizer proactive opportunity detection with one-click deployment, and AI Assistant managing operational scheduling (Quiet Hours / Update Free Periods). The Experience Production Agent — which handles content updates, form creation, and communications — is GA via the Agentic SKU, and Replication AI troubleshooting extends ops AI to publishing infrastructure. Bulk content ops that were previously Early-Access are now GA, though still gated behind the paid Agentic SKU.
AEM's named-agent lineup (Brand Experience Agent with Modernization, Production and Development sub-agents; Content Advisor Agent with Discovery and Content Optimization; Governance Agent) is GA via the Agentic SKU on AEMaaCS and Edge Delivery Services, and since September 2026 AEM agentic capabilities are GA inside Adobe CX Enterprise Coworker, a natural-language AI teammate that creates, updates and readies content under existing brand and governance controls. MCP/A2A APIs and AEP Agent Orchestrator cover cross-cloud coordination, and a Content Supply Chain Agent (Blueprint + Integration) is in co-innovation beta. Raised from 80 for the GA Coworker surface; held below the top because access still requires the separately priced Agentic SKU or Try Before You Buy, the in-product right-rail Coworker panel is not yet released, and agents are unavailable on 6.5 on-prem (the agents overview updated Oct 12, 2026 says 6.5 LTS on Managed Services will get them progressively through a co-innovation program).
AEM Sites Optimizer delivers AI-driven content intelligence with proactive opportunity detection across acquisition (technical SEO, Core Web Vitals, structured data), engagement (content relevance, accessibility), and conversion, plus performance trend monitoring; Content Advisor Discovery (GA) adds natural-language cross-repository intelligence and Adobe LLM Optimizer surfaces brand presence in AI-powered search. Smart Tags confidence scores add asset-level intelligence. Score holds at 68 because no dedicated content ROI attribution, topic clustering, or content-health lifecycle dashboard is documented.
The Governance Agent validates tone, claims, logo, typography, and imagery in real-time and batch mode, AI-transforms brand documents into enforceable policy checks, and extends enforcement to external AI via the Experience Governance MCP server — GA via the Agentic SKU rather than Early Access. Sites Optimizer (GA) flags accessibility and content-quality issues and Content Credentials (C2PA) provide tamper-evident AI provenance, together covering quality + brand + accessibility. Score stops at 76 because thin/duplicate content detection remains undocumented.
AEM's semantic search is expanding from asset-scoped to a broader RAG-ready foundation: AI Search in Content Hub (vector embeddings, multilingual queries, typo/synonym tolerance) is GA-rolling, and AEM Content AI foundational services now vectorize Content Sources spanning assets, content fragments, pages, forms, metadata, and taxonomies (plus non-AEM sources) with pure-vector (cosine) and hybrid fulltext+vector queries powering retrieval, grounding, and conversational AI. Content Advisor Discovery adds NL cross-repository search. Raised from 64 for the documented site-content RAG retrieval foundation; held at 67 because AI Search, Assets-UI semantic search, and AI Answers remain Limited Availability (support-case enablement) rather than fully GA.
Adobe Target with Sensei-powered Auto-Allocate, Auto-Target, and Recommendations is a genuine ML personalization engine natively integrated with AEM via Experience Fragment export. Real-Time CDP feeds unified customer profiles (updating in milliseconds) into Target for same-page personalization, and AEP Agent Orchestrator (GA) extends agentic personalization via Audience and Journey Agents. Score stops at 87 because Target and RT-CDP are separate licensed add-ons rather than included in AEM base licensing.
The unified AEM MCP Server (single configurable URL) now covers Content operations (full CRUD for pages, content fragments, assets), Experience Governance checks and, as of 2026.9.0, Cloud Manager program/environment/pipeline operations, so the older domain-specific MCPs are deprecated; it also backs the official AEM Claude Connector and AEM ChatGPT Plugin. OAuth via Adobe ID with tools running under the user's identity and existing AEM permissions, read-only and read-write Content variants (GA since 2026.1.0), and local-dev servers (Quickstart, Dispatcher) round it out. The most complete production MCP offering in the DXP market; AEMaaCS-only scope and minimum release requirements keep it from higher.
AEM now offers genuine feature-level BYOK for AI translation: the GA (2026.4.0) AI Translation Integration lets teams connect their own Azure OpenAI subscription (API Key, API version, base path, deployment name) as the translation LLM, with additional providers planned. The MCP layer remains LLM-agnostic (Claude, ChatGPT, Copilot, Gemini, Cursor operate on AEM content). However, the core generative features — Generate Variations, AI Assistant, Firefly, Smart Tags, AI Search — still run on Adobe-managed models with no key substitution. Raised from 48: partial BYOK now documented for one native feature with a single provider, but most AI remains locked to Adobe infrastructure.
The AI developer stack is comprehensive: the unified AEM MCP Server (July 2026) plus read/write Content servers expose AEM as discoverable tools for any approved LLM, A2A APIs enable agent-to-agent connectivity, and local-dev MCP servers (Quickstart and the Dispatcher MCP in 2026.6.0) expose SDK runtime, OSGi, request processing, and Dispatcher/HTTPD config to AI IDEs. AEP Agent Orchestrator SDK supports multi-agent coordination, and a code-assessment IDE agent skill detects and auto-fixes issues directly in AEM Java codebases. Score holds at 86; official integrations span Claude, ChatGPT, Cursor, GitHub Copilot, JetBrains, VS Code, and Copilot Studio.
Multi-layered AI governance: the Governance Agent enforces brand policies (tone, claims, logo, typography, imagery) in real-time and batch, including for MCP-connected external AI, and is GA via the Agentic SKU; Content Credentials (C2PA, GA) provide tamper-evident AI provenance; the Agentic AI Usage Monitoring dashboard adds Conversation Replay for agent interactions; Adobe AI Ethics Review Board, Firefly IP indemnification, and an AI Assistant privacy commitment (no personal data for training) round out controls. Score holds at 76: strong governance and conversation-level audit visibility, but audit trails are scoped to the agentic layer rather than every native AI action.
Adobe ships Agentic AI Usage Monitoring across Experience Cloud (AI Monitoring docs updated April 2026), covering AEM agents that run as Experience Platform Agents: an Overview/Users dashboard for adoption/engagement, Conversation Replay + a Feedback dashboard for quality/performance, and an AI Credits dashboard for cost/consumption, with per-user visibility, 7-/30-day trends, and drill-down into individual conversations. Score holds at 62 because the dashboards are scoped to the agentic layer (Agent jobs / AI Credits) and per-feature consumption for Generate Variations generative actions and Firefly credits is not surfaced in the same granular per-user view.
How composite scores (0–100) have changed over time. Click legend items to show/hide metrics.
Framework v1.2·Mar 24, 2026·AI Enablement added as Category 10 and folded into the capability composite. Scores before and after this line are not directly comparable.
Framework v2.0·Oct 10, 2026·Categories 1 and 2 restructured: Core Content Management now holds everything a CMS must do regardless of architecture, and Category 2 scores only the DXP feature layer with a packaging rule. Pure headless platforms score lower in Category 2 by design. Scores before and after this line are not directly comparable.
Adobe Experience Manager shows modestly improving momentum on its operational dimensions, with Cost Efficiency, Build Simplicity and Platform Velocity each up more than a point, while Suite Capability slipped 1.2 points to 76.4. The capability dip reflects a closer look at how much of the experience layer AEM delivers on its own: experimentation, site search, email marketing and commerce integration all came in lower because native A/B testing is page-level and search is basic, and the deeper features depend on separately licensed Adobe products such as Target, Campaign and Commerce. The standout gain is AI translation, where the GA release of LLM-based AI Translation Integration in 2026.4.0 gives multilingual teams a real native option, so buyers should weigh that and the faster release pace against the extra Adobe licenses needed to match AEM's full suite story.
Score Changes
AEM shipped AI Translation Integration to GA in the 2026.4.0 release: an LLM-based translation service (Azure OpenAI first, additional providers planned) configured in Translation Cloud Services that reuses existing translation projects and workflows and delivers human-quality output at machine-translation speed. Uploadable per-locale style guides are analyzed to auto-generate translation rules that preserve tone, terminology, and brand language across locales — genuine brand-voice-preserving AI translation. Microsoft Translator remains the OOTB NMT connector and TIF still orchestrates NMT partners (Smartcat, LILT, Smartling). Raised from 45; stops at 70 because it is bring-your-own-LLM (single provider today) rather than a fully packaged first-party MT engine.
AEM integrates first-party with Adobe Campaign Classic v7/v8 for email content authored in AEM, and AEM content and Dynamic Media templates can be referenced in Adobe Journey Optimizer's email editor (limited availability, 2026.9.0). There is no native email send and no SFMC or Mailchimp connector, so it scores as a first-party integration below its ceiling.
The Commerce Integration Framework federates live product data from Adobe Commerce GraphQL into AEM with product pickers in the author UI, and AEM Assets syncs product and category images to Adobe Commerce (2026). Connectors for SAP Commerce, commercetools and Salesforce Commerce exist through partners via the CIF GraphQL layer, with uneven quality. Scored near the integration ceiling given live federation but maintenance-mode CIF.
Contextual Experimentation in Universal Editor and the EDS experimentation plugin provide native page-level A/B tests with results from Operational Telemetry. Experience League limits it to A/B tests optimizing for conversion, one experiment per page, and the extension must be enabled or requested. MVT, bandits and auto-target require Adobe Target.
AEM provides a Core Components Quick Search component over Oak Lucene full-text indexes, and EDS sites use query-index JSON for client-side search. Faceting, typo tolerance, analytics and merchandising need custom index definitions or Algolia, Coveo or Elasticsearch integrations. Adobe has no first-party site search product for AEM since Search&Promote was retired, so basic native search lands at 60.
Dynamic Media provides adaptive video encoding with HLS and MPEG-DASH, Video Smart Crops, multiple captions and audio tracks, AI-generated captions and a new 2026.9.0 viewer with playback analytics, plus 3D and interactive media viewers. Dynamic Media is a separately licensed AEM Assets capability, so it is capped as an add-on.
ContextHub ships in AEM Sites with rule-based and behavioral segments that drive Targeted Content components and author-mode segment simulation. Unified profiles, identity resolution and real-time edge segmentation come from Real-Time CDP and Adobe Target, which are separately licensed. Native segmentation is solid but first-party profiles depend on those add-ons, so it sits just below 75.
AEM has no cart, checkout, pricing or inventory of its own. Transactional commerce comes from Adobe Commerce, a sibling product sold separately, delivered through Edge Delivery Services commerce storefront drop-ins; the CIF Core Components storefront is in maintenance mode. Scored as an add-on well below its ceiling because AEM itself contributes no commerce engine.
Algorithmic recommendations (collaborative filtering, content similarity, popularity) come from Adobe Target Recommendations, which requires Target Premium and is not part of AEM. AEM itself only offers list components and editorial curation. Scored as a mature add-on held below its ceiling for the extra licensing and integration effort.
AEM Forms delivers Adaptive Forms Core Components, a no-code Rule Editor, multi-step wizards, Universal Editor form authoring for EDS, reCAPTCHA/Turnstile, and submission to Salesforce, Marketo, SharePoint and REST endpoints. AEM Forms is a separate license from AEM Sites, so it is capped as an add-on; Sites alone offers only basic EDS form blocks.
Targeting mode in the Page Editor lets authors create per-segment content variants with ContextHub and preview them by simulating audiences, without an external decision engine. Experience Fragments can also be exported to Target for ML-driven decisioning, which is a separate product. Not higher because ContextHub personalization is client-side and Edge Delivery Services sites rely on the experimentation plugin's audience rules.
The critical-severity run continued into October: APSB26-152 (Oct 13, 2026) fixes three CVSS 10.0 unauthenticated incorrect-authorization flaws leading to code execution (CVE-2026-48382, CVE-2026-48383, CVE-2026-90532) that affect Cloud Service as well as 6.5 and 6.5 LTS, plus CVSS 9.9 command-injection and authorization flaws in 6.5 and a 9.6 XXE, on top of September's 111 NVD-listed CVEs (CVE-2026-19232 at 9.9 in core AEM, CVE-2026-75745 at 10.0 in Forms JEE). Adobe discloses through numbered bulletins on its Trust Center, patches Cloud Service automatically, runs a HackerOne bug bounty, reports no exploitation in the wild, and has no 2026 AEM CVE on CISA KEV. Not higher because pre-auth, network-reachable critical flaws keep arriving monthly in core AEM, and the 2025 KEV-listed Forms RCE (CVE-2025-54253) shows these do get exploited.
Adobe publishes a dated AEM Releases Roadmap on Experience League (2026.10.0 planned for October 29 2026) and runs a public 'Adobe Experience Manager Ideas' board on Experience League Communities where customers submit and vote on feature requests, with a documented status lifecycle (New, Investigating, Approved, Delivered, Declined) reviewed by Adobe. Beta, early-adopter and Limited Availability programs are listed in every release, and Summit 2026 set out a clear agentic-CMS direction. Not higher because the long-range roadmap beyond the next releases is still shared mainly in briefings and Summit keynotes rather than a public itemized board.
AEM now offers genuine feature-level BYOK for AI translation: the GA (2026.4.0) AI Translation Integration lets teams connect their own Azure OpenAI subscription (API Key, API version, base path, deployment name) as the translation LLM, with additional providers planned. The MCP layer remains LLM-agnostic (Claude, ChatGPT, Copilot, Gemini, Cursor operate on AEM content). However, the core generative features — Generate Variations, AI Assistant, Firefly, Smart Tags, AI Search — still run on Adobe-managed models with no key substitution. Raised from 48: partial BYOK now documented for one native feature with a single provider, but most AI remains locked to Adobe infrastructure.
Experience Workspace (announced 2026-09-03) adds real-time multi-author and AI agent co-authoring, but only for Edge Delivery Services projects. CF Editor offers comments with @mentions, assets support timeline comments, and pages and fragments rely on locking or Check-Out/Check-In. Universal Editor and Page Editor still have no live presence, so most AEM authoring is lock-based.
AEM Eventing through Adobe I/O Events covers Sites, Assets and Content Fragment author events with subscriber-defined filtering, HMAC and RSA signatures, 24-hour retries, batching, a 7-day Journaling API and EventBridge or App Builder targets. Held below 85 because setup runs through the Developer Console and there is no delivery log UI in AEM.
The Page Editor offers drag-and-drop composition from a component palette governed by editable template policies and locked structure, Layout Mode for responsive grids, and the Style System for brand guardrails; Universal Editor brings drag-and-drop component and section reordering to headless and EDS sites. Not higher because two editors coexist with different capabilities and Universal Editor layout control is lighter than the Page Editor's.
On the Edge Delivery Services path a developer can now get an editable, published page within an hour from the self-serve trial and boilerplate, and Adobe's AI skills and MCP servers speed component scaffolding. The classic Sites path most enterprise buyers still take is unchanged: SDK setup, Cloud Manager pipeline configuration, archetype scaffolding and first components take days, and teams new to AEM report 2–3 months to production-quality output. Credited for the fast lane but held well below 40 because it is not the typical deployment path.
Cloud Service auto-patches transparently, but critical-severity volume stayed high into October: APSB26-152 (Oct 13, 2026) fixed 35 AEM vulnerabilities, 14 critical, including three CVSS 10.0 incorrect-authorization flaws leading to code execution (CVE-2026-90532, CVE-2026-48383, CVE-2026-48382), on top of 111 AEM CVEs published in September. Cloud Service was fixed in release 2026.9.28386 without customer action, but 6.5 and 6.5 LTS tenants got no new service pack and must apply a list of six or seven separate GRANITE, SITES and NPR hotfixes that differ between the two lines. Not higher because the critical cadence and the self-managed hotfix burden are heavy; not lower because Cloud Service tenants are patched automatically and Adobe reports no exploitation in the wild.
Adobe still drives several overlapping migrations on its own timeline: AMS support for classic 6.5 ended Aug 31, 2026, the deprecated-API cutoff hit Cloud Service tenants on Jul 23, 2026, on-prem 6.5 core support ends Feb 2027 (extended to Feb 2028), and the 2026.9.0 release notes schedule a mandatory Java 25 runtime move for all Cloud Service environments by June 2027, about nine months out. The pressure on 6.5 is a fork rather than a forced cloud move, since 6.5 LTS is GA and shipping service packs on Java 17/21 for on-prem and AMS. Not higher because every 6.5 customer must move within months and Cloud Service tenants face back-to-back enforced changes; not lower because deadlines are published well ahead and a non-cloud path exists.
The Edge Delivery Commerce Storefront now ships first-party B2B drop-ins: Company Management (company profile, role-based permissions), Company Switcher, Purchase Order (approval rules and history), Quote Management (negotiable quote request, negotiation, approval) and Quick Order (bulk ordering by SKU). Storefront gated-content configuration restricts edge-delivered pages and assets to authenticated buyers, and a Price Book ID setup supports account-specific pricing. On the AEM Sites side, CUGs gate catalogs and spec sheets, and Content Fragments model technical datasheets. The B2B features depend on Adobe Commerce with B2B enabled; gated content needs an auxiliary edge service to evaluate tokens.
Behavioral journeys, drip orchestration and lead scoring come from Adobe Journey Optimizer and Marketo Engage, separately licensed products that reference AEM Experience Fragments and Content Fragments. AEM has no native automation, so this is a tight integration with a sibling suite rather than a built-in capability.
Both deployment models are on offer: AEM as a Cloud Service is fully managed on Azure with Edge Delivery Services on Adobe's CDN, and AEM 6.5 LTS is GA (SP3 shipped Sept 2026, Java 17/21) for on-premises and Adobe Managed Services deployments, so self-hosting is still a supported path rather than a dead end. Cloud Service offers no self-hosted or multi-cloud choice, though. Not higher because 6.5 LTS is permanently excluded from the Cloud Service-only AI agent layer and newer capabilities, so choosing to self-host means giving up features.
There is now a genuine self-serve entry point: aem.live provisions a full Edge Delivery Services + Universal Editor tutorial environment (Cloud author, preview and live site, forked GitHub boilerplate) from an email address, with no sales contact. It is deleted after 30 days and is for learning, not commercial use, and the classic routes are unchanged: the QuickStart jar needs a license from Adobe or partner status, and Cloud Manager sandboxes are sales-gated and barred from live traffic. A time-limited trial, not a free tier.
Checkout itself runs in the commerce platform, but the Edge Delivery Commerce Storefront ships Cart and Checkout drop-in components with slots and containers that let teams inject CMS-managed content into transactional flows. Adobe's storefront docs include tutorials for adding messages to the mini cart, custom cart summary lines, gift options and extra checkout buttons. The legacy CIF path offers less. Injection points still require developer setup per slot, so this is basic banner-style control rather than marketer-managed checkout content.
Core Components emit events to the Adobe Client Data Layer natively, and AEM ships Cloud Service configurations for Adobe Experience Platform Tags (Launch), through which Adobe Analytics, the AEP Web SDK and GA4 are deployed. Not higher because GA4 and non-Adobe tools ride on Tags rather than dedicated connectors.
Enterprise Term License Agreements with 2–3 year commitments and auto-renewal remain standard, annual terms carry a premium, and true-down rights and overage caps have to be negotiated rather than being defaults. The 6.5 end-of-support timeline is less coercive than previously scored: AEM 6.5 LTS is generally available (SP3 shipped September 2026) for both on-prem and Managed Services customers, so the August 31, 2026 AMS deadline was a choice between LTS and Cloud Service, not a forced migration, though extended 6.5 support to February 2028 costs extra. No monthly billing, startup program, or published nonprofit pricing for AEM.
Content Fragment Models offer a broad field set (text, number, boolean, date, enumeration, tags, fragment and content references, JSON Object, tab placeholders) and are manageable through the OpenAPI Content Fragment Management API, while page templates and Sling models cover page-centric types. 2026.9.0 improved composite data types with GraphQL support. Held below 90 because there is no first-party schema-as-code CLI or model deployment pipeline comparable to code-first headless CMSs.
AEM's semantic search is expanding from asset-scoped to a broader RAG-ready foundation: AI Search in Content Hub (vector embeddings, multilingual queries, typo/synonym tolerance) is GA-rolling, and AEM Content AI foundational services now vectorize Content Sources spanning assets, content fragments, pages, forms, metadata, and taxonomies (plus non-AEM sources) with pure-vector (cosine) and hybrid fulltext+vector queries powering retrieval, grounding, and conversational AI. Content Advisor Discovery adds NL cross-repository search. Raised from 64 for the documented site-content RAG retrieval foundation; held at 67 because AI Search, Assets-UI semantic search, and AI Answers remain Limited Availability (support-case enablement) rather than fully GA.
The Translation Integration Framework ships with translation projects, batch jobs, progress tracking and machine translation, and connects to TMS vendors (Smartling, RWS, Lionbridge, XTM, Phrase and others) through official connectors. 2026 updates translate inline media and asset collections into the correct target language root. Not higher because connector setup is per-vendor and some connectors are partner-built.
Cloud Service updates remain forced on Adobe's timeline, but the tooling around them keeps improving: Cloud Manager 2026.10.0 (October 1 2026) made canary deployments available on production pipelines, rolling code to a subset of nodes with promote or roll back from the UI, release notes carry dated plan-ahead notices (Java API deprecations enforced September 28 2026, Java 25 runtime migration announced ahead of Java 21 decommissioning), and Cloud Manager has failed pipelines on deprecated APIs since April 14 2026. Customers unwilling to take continuous updates also have AEM 6.5 LTS as a supported path. Held below the 70s by the lack of opt-out on Cloud Service and reports of behaviour changes after enforcement dates, such as Universal Editor CORS errors community users reported after September 28.
The EDS boilerplate, Block Collection, Forms EDS and commerce boilerplates and the Universal Editor sample app are vendor-maintained, the self-serve trial ships pre-configured, and Cloud Manager's site creation flow automates GitHub provisioning. On the traditional side, Archetype 58 (Sept 2026) simplifies index management and the create-component agent skill scaffolds the dialog, HTL, Sling Model, tests and clientlibs together. It stays in the 40s because the archetype still produces a complex multi-module Maven project with no example content, and the ramp from archetype to production is long.
Page composition uses nested containers and Core Components with unlimited nesting, Experience Fragments provide reusable composed blocks, and Content Fragments embed references and 'in-between content'. Visual Content Fragments (2026.6.0) render structured fragments as formatted HTML via templates. Kept below 90 because Content Fragment rich text is stored as an HTML blob rather than a portable structured AST.
AEM keeps full page, fragment and asset version history with side-by-side compare and CF version diff, one-click restore, Restore Tree for deleted pages, Timewarp to view a past state, and Launches as content branches that are promoted back. Timeline attribution shows who changed what. Not higher because version purge rules cap retention by default and CF branching via the Launches API is still experimental.
Granite Workflow supports custom models with participant and dynamic participant steps, OR/AND splits, due dates, timeout escalation, custom Java process steps and full workflow history in the timeline; the Inbox aggregates tasks and Workfront integration extends review. Workflow status appears in the CF Admin UI and Universal Editor can start workflows via extensions. Not higher because model design is developer-oriented and per-content-type workflow binding needs launchers.
AEM separates the OpenAPI CF Delivery API on publish from the CF Management API on author, offers GraphQL with persisted queries, filtering, sorting, pagination and locale support, plus Sling Model JSON exporters for pages. Not higher because GraphQL is restricted to Content Fragments and page delivery APIs are less consistent.
AEM's named-agent lineup (Brand Experience Agent with Modernization, Production and Development sub-agents; Content Advisor Agent with Discovery and Content Optimization; Governance Agent) is GA via the Agentic SKU on AEMaaCS and Edge Delivery Services, and since September 2026 AEM agentic capabilities are GA inside Adobe CX Enterprise Coworker, a natural-language AI teammate that creates, updates and readies content under existing brand and governance controls. MCP/A2A APIs and AEP Agent Orchestrator cover cross-cloud coordination, and a Content Supply Chain Agent (Blueprint + Integration) is in co-innovation beta. Raised from 80 for the GA Coworker surface; held below the top because access still requires the separately priced Agentic SKU or Try Before You Buy, the in-product right-rail Coworker panel is not yet released, and agents are unavailable on 6.5 on-prem (the agents overview updated Oct 12, 2026 says 6.5 LTS on Managed Services will get them progressively through a co-innovation program).
Operational Telemetry collects page performance and engagement automatically without cookie consent and feeds experiment results; the 2026.9.0 video viewer reports views, watch time and completion, and Page Insights overlays metrics in author mode. Scroll depth, conversion attribution and content lifecycle reporting still need Adobe Analytics.
Editable template policies restrict which components each brand can use, the Style System applies brand variants to shared components, and MSM plus group ACLs and Closed User Groups isolate brand content under central governance. Brand-level analytics needs Adobe Analytics, which keeps it short of the maximum.
Cloud Manager kept adding pipeline capability through 2026: Smart Build module-level caching, concurrent pipeline runs, config-pipeline secrets, and in the September releases Git submodule authentication for external repos, automatic branch sync for GitLab BYOG, an Execution-Id for content sync, and canary deployments (from October 1) that run a new build beside the stable release on publish, route header-selected traffic to it for a 3-hour window, then promote or cancel. Cloud Manager operations are now in the unified AEM MCP Server, and deprecated-API usage has failed the Code Quality step since April 14, 2026. Not higher because Cloud Manager remains the only deployment path for Cloud Service and there is no branch-per-PR content environment or first-party schema migration CLI.
AEM as a Cloud Service keeps its monthly feature line on schedule: 2026.9.0 shipped September 24 2026 (Content Hub AI Search and Smart Collections, a new Dynamic Media video viewer, OpenTelemetry APM in Limited Availability, AEM agentic capabilities GA in CX Enterprise Coworker) and 2026.10.0 is dated for October 29. The separate monthly Cloud Manager line shipped 2026.10.0 on October 1 with GA canary deployments and BGP VPN routing, maintenance release 28702 followed in October, and AEM 6.5 LTS gets service packs (SP3 on September 8). Scores at the 75+ monthly anchor but below the top because many drops are incremental and several headline items ship as beta or Limited Availability.
Experience League, WKND, the EDS Developer Professional certification and the sub-30-minute aem.live EDS tutorial remain the core learning path, now joined by GA first-party coding-agent support: the adobe/skills plugins for Claude Code, Cursor and Copilot, an ensure-agents-md skill that writes a project-specific AGENTS.md, and an AGENTS.md shipped in the Project Archetype since v57. Score doesn't move higher because the gap between tutorials and a production AEM CS implementation is still enormous, and most enterprises still need SI-led onboarding and certification to reach productivity on traditional Sites.
EDS keeps configuration minimal (GitHub workflow, fstab.yaml, Config Service), and 2026 tooling chips at traditional CS: simplified index management in Archetype 58, an AI Dispatcher/HTTPD config assistant skill, AI code assessment, and Cloud Manager operations through the unified AEM MCP Server. But traditional AEM CS still carries OSGi configuration across run modes, dispatcher rules, Cloud Manager pipelines, environment variables and Sling mapping, and the Sept 28, 2026 Java API deprecation deadline (pipelines blocked at Code Quality since April) adds mandatory upkeep. AI assistance helps debug this surface without shrinking it, so it stays at the bottom of the dataset; October 2026's canary deployments and the beta option to drop the publish tier for EDS programs add choices rather than removing steps.
JCR's flexible node structure handles schema evolution well, Content Fragment Model field additions are non-breaking, and the CF Editor's JSON preview helps validate structure. The October 2026 code-assessment skill now flags Oak index definitions that look correct but silently miss queries, a long-standing modeling trap, and Archetype 58 simplifies index management. Adobe still ships no automated schema migration tooling, so breaking dialog or CF model changes still rely on custom Groovy or Java scripts.
EDS and Universal Editor give generalist JS developers a path that avoids deep AEM internals, and Adobe's GA agent skills (component scaffolding, code assessment, dispatcher assistance, 6.5-to-Cloud migration runbooks) encode AEM best practice for coding agents. Any production AEM CS build still needs certified specialists in Java, OSGi, JCR, Sling, HTL, dispatcher and Cloud Manager to review agent output, so specialization stays the highest in the dataset; Gartner's 2026 MQ flagged steep skill requirements.
Universal Editor drag-and-drop and in-context Content Fragment editing, EDS document-based authoring, and Experience Workspace's real-time WYSIWYG canvas (EDS projects only) let marketers publish without developers, and AEM agentic capabilities went GA in Adobe CX Enterprise Coworker in September 2026 for creating and updating content in plain language under existing governance. Template policy changes, workflow modifications and new components on traditional AEM still require developers, and author training for traditional AEM remains a 1-2 week curriculum.
Edge Delivery Services with document-based authoring provides extremely fast brief-to-publish cycles, and in September 2026 Document Authoring became Experience Workspace: a WYSIWYG canvas with layout mode and real-time co-authoring between authors and AI agents, with AEM Assets built in. AEM agentic capabilities (content creation, updates, readying experiences under existing governance controls) became generally available in Adobe CX Enterprise Coworker in September 2026, although only the Coworker immersive experience is live and the in-product right-rail panel is still pending. The traditional AEM path with editable templates, inline editing, bulk operations and Experience Fragments is mature. Real-time co-authoring is EDS/Experience Workspace only; Classic Page Editor and Universal Editor remain lock-based.
AEM Launches enable time-activated promotional content with coordinated activation dates, and ContextHub provides segment-specific promotional variants on AEM Sites. On the Edge Delivery storefront, a Personalization drop-in displays content conditionally by Adobe Commerce customer groups, segments and cart price rules, so promo messaging can follow the commerce promotion engine. Scheduling options are documented for storefront pages. Tiered pricing tables and promo code logic remain commerce-backend concerns.
AEM as a Cloud Service is HIPAA-ready with Adobe acting as Business Associate under a signed BAA, and the Trust Center lists a SOC 2 + HIPAA attestation for both Experience Cloud and Managed Services, so an independent auditor tests controls mapped to the HIPAA Security Rule. The HIPAA readiness page (updated October 9 2026) scopes this tightly: Sites, Publish, Edge Delivery Services, Assets, Forms and Cloud Manager are HIPAA-ready only with the Extended Security for Healthcare add-on applied at program creation, PHI is barred from RDE/Dev/Stage, and Universal Editor, Sites Optimizer, Content Hub, Commerce Integration Framework, AEM Guides and LLM Optimizer are not HIPAA-ready. PHI cannot flow through the main modern authoring surface, so it stays below healthcare-purpose-built platforms.
Adobe's September 2026 Trust Center redesign maps certifications per product, and that changes the picture for AEM. AEM Managed Services carries FedRAMP Moderate, IRAP at PROTECTED level, Spain ENS, CSA STAR Level 2 and SSDF attestation; AEM as a Cloud Service carries CSA STAR Level 2, ISO 9001, SOC 2 + HIPAA, APEC PRP and KY3P. PCI DSS 4.0 is no longer mapped to AEM (the ROC now covers only Commerce and Acrobat Sign), and Adobe's new BSI C5 and ISMAP attestations exclude AEM. The portfolio is still among the strongest in the DXP market, but the government certifications split by deployment model and PCI has dropped off.
Universal Editor gives click-to-edit overlays on any frontend, including headless React/Next.js apps and Edge Delivery Services sites, with draft content and per-locale pages; a dedicated Preview tier and EDS .page domains provide shareable preview URLs. Visual Content Fragments and CF Editor deep-link preview cover structured content. Not higher because preview links are not token-gated for anonymous reviewers and Universal Editor instrumentation takes developer setup.
The unified AEM MCP Server (single configurable URL) now covers Content operations (full CRUD for pages, content fragments, assets), Experience Governance checks and, as of 2026.9.0, Cloud Manager program/environment/pipeline operations, so the older domain-specific MCPs are deprecated; it also backs the official AEM Claude Connector and AEM ChatGPT Plugin. OAuth via Adobe ID with tools running under the user's identity and existing AEM permissions, read-only and read-write Content variants (GA since 2026.1.0), and local-dev servers (Quickstart, Dispatcher) round it out. The most complete production MCP offering in the DXP market; AEMaaCS-only scope and minimum release requirements keep it from higher.
AEM Assets provides folder-level metadata schemas with mandatory fields, asset expiry with auto-unpublish, approval workflows, reference tracking across sites, versioning, bulk import from cloud storage and Content Hub with attribute-based access for brand sharing; 2026.9.0 added Smart Collections and AI search in Content Hub. Held below 90 because Content Hub, Dynamic Media and Assets Ultimate features depend on the Assets license tier.
Still a Gartner MQ Leader for DXP but lost the top position to Optimizely on both ability to execute and completeness of vision, with Gartner cautioning on price, portfolio complexity and steep skill requirements. Other analyst recognition holds up: AEM Assets is a Leader in the Forrester Wave for Digital Asset Management Systems (Q1 2026) and the CX Enterprise portfolio a Leader in the Forrester Wave for Experience Optimization Solutions (Q3 2026), and Summit 2026 reframed AEM as an agentic CMS with agents actually shipping. Composable and headless competitors keep pressing on greenfield deals, capping the score in the high 60s.
Sitemap generation (including AI-assisted auto-generation via Sensei), meta tag components, canonical URL management, redirect mapping. AEM Sites Optimizer adds native SEO analysis, acquisition optimization, and E-E-A-T compliance recommendations — closing the gap that previously required third-party tools. The new Adobe LLM Optimizer improves visibility in AI/generative search engines. Edge Delivery Services delivers Lighthouse 100 performance scores and is optimized for both traditional search and generative engine discovery. Sites Optimizer's 2026 release cadence keeps turning findings into deployable fixes: Preflight opens directly from the Sites Page Editor (2026.7.0+), alt text and broken-link fixes deploy with published-status confirmation, and FAQ structured data deployment (Early Access) lets authors on Multi Site Manager pages choose whether the update lands on the source page or only the local copy.
AEM Forms is available on Edge Delivery Services, bringing native form handling to the EDS authoring path. AEM Sites Optimizer addresses conversion optimization and CTA refinement. Core Components include a form component for basic use cases. Adobe Analytics integration provides conversion tracking. Advanced form capabilities still require the separate AEM Forms license for full functionality. Sites Optimizer now reaches into paid media: Google Ads Placement Exclusions reviews placement risk for connected accounts and produces exclusion lists for automated and Performance Max campaigns, and a Google Ads connection (Early Access) brings paid-traffic data into its recommendations.
AEM Assets is enterprise-class DAM with image/video transforms via Dynamic Media, AI-powered auto-tagging via Sensei, usage tracking, rights management and license expiry, asset versioning, and brand portal for partner asset sharing. Content Hub extends DAM access to marketers with no-code asset usage, with permission management, governance controls, and usage tracking, and now connects natively to GenStudio for Performance Marketing. The marketing asset management capability is the strongest of any CMS platform — it's the product enterprises pay for. The 2026.9.0 release adds Content Hub AI Search (intent-based, multilingual, synonym-aware), self-updating Smart Collections, and (in Limited Availability) a new Dynamic Media video viewer with view, watch-time and completion analytics, AI-generated captions, multi-audio tracks and attribute-based delivery restrictions for controlled campaign assets.
AEM as a Cloud Service supports self-service forwarding of AEM, Dispatcher and CDN logs through Git-declared Cloud Manager configuration pipelines to eight named destinations (Splunk, Datadog, Dynatrace, Elasticsearch, New Relic, Sumo Logic, Amazon S3, Azure Blob Storage) plus generic HTTPS, with mutual TLS authentication now in beta. Audit logs on new Cloud Service instances are purged automatically only after 7 years. The audit log UI is still not analytics-grade and there is no native compliance monitoring dashboard comparable to Salesforce Shield.
Adobe Experience Manager remains essentially stable this cycle, with a marginal uptick in Capability (77.6) the only composite to register movement while Platform Velocity, Cost Efficiency, Build Simplicity, Operational Ease, and Compliance & Trust all held flat. The Capability gain traces to two developer-facing improvements: a strengthening security track record as CVE volume continued its 2026 decline versus the 368 published in 2025, and the July 2026 debut of a unified AEM MCP Server that consolidates previously fragmented endpoints behind a single configurable URL. Practitioners evaluating AEM should note that the platform's core economics remain unchanged — cost efficiency and build simplicity stay low — even as its AI-integration and security posture edge modestly forward.
Score Changes
CVE volume continued dropping in 2026 versus 368 published in 2025, a meaningful trajectory improvement, but AEM Forms remains a recurring hotspot: APSB26-56 fixed CVE-2026-48265 (DOM-based XSS in 6.5.24, LTS SP1, 2026.04 and earlier) and further XSS bulletins (e.g. CVE-2026-27244) shipped through mid-2026, prompting 'patching the same cracks' criticism. The 2025 zero-day CVE-2025-54253 (CVSS 10.0 RCE, exploited per CISA KEV, public PoC) plus CVE-2025-54254 (XXE) are still recent. Adobe patches promptly, auto-applies fixes on Cloud Service, and runs a HackerOne bug bounty; not higher because the residual Forms attack surface and 2025 severity keep risk elevated.
The July 2026 release introduced a unified AEM MCP Server (a single configurable URL that consolidates the previously domain-specific servers and exposes a growing tool set) recommended over the separate Content, Cloud Manager, Experience Governance, and Cloud Migration servers; both read-only and read-write Content variants (GA as of 2026.1.0) remain — full CRUD for pages, content fragments, assets — plus local-dev servers (AEM Quickstart and a Dispatcher local MCP). OAuth via Adobe ID; tools run under the authenticated user's identity and enforce existing AEM permissions, with supported clients including Claude, ChatGPT, Cursor, VS Code, JetBrains, GitHub Copilot, and Copilot Studio. The most complete production MCP offering in the DXP market; the minimum AEM release requirement keeps it from higher.
Adobe Experience Manager is essentially stable this cycle, with only marginal gains in Capability (+0.2) and Operational Ease (+0.4) while Platform Velocity, Cost Efficiency, Build Simplicity, and Compliance & Trust held flat. The slight Capability lift reflects offsetting AI movements: the GA release of semantic AI Search in Assets Content Hub drove a strong nine-point item gain, but that was largely canceled out by pullbacks on agentic workflow automation and AI content auditing, where the named-agent lineup's real-world maturity looks softer than earlier signals suggested. Practitioners should note the Operational Ease improvement tied to Cloud Manager's Smart Build pipeline caching and modernized collaboration features — incremental but tangible quality-of-life gains — while treating AEM's agentic AI story as still unproven relative to its marketing.
Score Changes
AI Search is GA in AEM Assets Content Hub: semantic search that recognizes relationships between words, concepts, and intent, with multilingual queries, typo tolerance, and synonym understanding, built on vector embeddings; semantic search is rolling out in the Assets UI and AI Answers remains in limited availability. Content Advisor Discovery adds natural-language cross-repository search. Score holds at 64: production semantic search, but it is asset-scoped — no native vector/RAG indexing API for site-content delivery is documented, which keeps it below the 65+ leaders.
AEM's named-agent lineup — Brand Experience Agent (Modernization, Production, Development sub-agents), Content Advisor Agent (Discovery, Content Optimization), and Governance Agent — is now GA via the Agentic SKU for AEMaaCS and Edge Delivery Services (progressive rollout to 6.5 LTS), with intent-driven MCP and A2A APIs and AEP Agent Orchestrator for cross-cloud coordination. This is the most comprehensive production agentic story among traditional DXPs. Score raised from 70 (reversing the prior pre-GA penalty): agents are now GA, but access is still via a separately-priced Agentic SKU / Try-Before-You-Buy rather than base licensing, which keeps it from higher.
The Governance Agent validates tone, claims, logo, typography, and imagery in real-time and batch mode, AI-transforms brand documents into enforceable policy checks, and extends enforcement to external AI via the Experience Governance MCP server — and is now GA via the Agentic SKU rather than Early Access. Sites Optimizer (GA) flags accessibility and content-quality issues and Content Credentials (C2PA) provide tamper-evident AI provenance, together covering quality + brand + accessibility. Score raised from 70 on the Governance Agent's move to GA; thin/duplicate content detection remains undocumented.
Content Fragment Editor has a modernized inline comment system with @mentions, reply threads, and notifications; asset annotations support freehand drawing and timestamped video comments. Document Authoring (da.live) for Edge Delivery Services now delivers genuine Google-Docs-style simultaneous multi-user editing — but only for EDS document-authored sites, not AEM Sites or the Universal Editor, which remain lock-based with no presence indicators.
Cloud Manager 2026 releases delivered real pipeline improvements: Smart Build with module-level caching (only changed modules rebuild), multiple concurrent pipeline execution, secrets management directly in config pipelines, and a Cloud Manager MCP server for IDE-driven pipeline operations. PR validation supports Bitbucket and GitLab, Java 17/21 builds, SonarQube scanning. Not higher because Cloud Manager remains the sole deployment pipeline for Cloud Service — no direct GitHub Actions or Jenkins deployment.
Edge Delivery Services with document-based authoring (Word/Google Docs) provides extremely fast brief-to-publish cycles — anyone can publish without CMS training. AI Assistant across Experience Hub and Author UI accelerates content generation, and the 2026 content production agents compress tasks that previously took days and multiple teams into minutes. Traditional AEM path with editable templates and inline editing is also mature. Bulk operations, template cloning, and reusable Experience Fragments reduce cycle time. The dual-path architecture means teams can choose the fastest path for their content type.
Operational Telemetry is now built into AEMaaCS — privacy-preserving real-user monitoring (sampled) covering Core Web Vitals and on-site engagement, feeding Sites Optimizer's prescriptive recommendations and Contextual Experimentation measurement. Combined with Page Insights overlays and Assets usage/expiry reports, AEM now has genuine native telemetry, but content engagement and conversion attribution analytics still require Adobe Analytics licensing.
Universal Editor provides WYSIWYG in-context visual editing for any frontend framework (Next.js, React, Astro, SSR or CSR) and has matured measurably through 2026: in-editor drag-and-drop component moves, cross-site linking for multi-site setups, images in RTE, unified RTE stack with the CF Editor, and a service worker cutting editor latency. Classic Page Editor remains available for traditional Sites.
App Builder is mature — Extension Manager is GA with UI Extensions across CF Admin, CF Editor, Universal Editor, and Assets View, and in 2026 the UI Extensibility framework expanded to Experience Hub, letting teams embed custom JavaScript widgets in the org dashboard. OSGi bundles and Sling Models remain for deep backend extension. Not higher because App Builder requires Adobe I/O Runtime and React Spectrum buy-in, a steeper path than lighter app frameworks.
Cloud Service automates infrastructure-level performance management, and Cloud Manager 2026.6.0 shipped Edge Delivery Services with AEM Author-mode authoring plus a flexible publish tier, letting teams adopt an auto-optimized delivery path that bypasses dispatcher tuning entirely. For classic publish/dispatcher delivery — still the majority deployment — Oak query/index management and dispatcher caching rules continue to demand specialized expertise. Not higher because most installations still carry the dispatcher/Oak tuning burden; not lower because the Edge Delivery path and Smart Build materially reduce performance-management effort for adopters.
Enterprise support with P1–P4 severity SLAs, dedicated TAMs for large accounts, and a Request a Callback option for P2/P3 cases that schedules screen-sharing sessions — 2026 PeerSpot/G2 reviews trend mostly positive on ticket handling. However, resolution times remain inconsistent by region and slow for complex custom/cloud-native implementation issues, and good support still requires Enterprise-tier investment. Not higher because complex-issue resolution and regional responsiveness draw recurring complaints; not lower because the 2026 review base is favorable and callback tooling is a concrete improvement.
AEM ContextHub provides native rule-based audience segmentation and behavioral targeting for AEM Sites. Tight integration with Adobe Target adds AI-driven auto-target, auto-allocate, and automated personalization powered by real-time CDP audiences. Experience Fragments export directly to Target as personalization offers. The 2026 agentic AI expansion adds purpose-built audience segmentation and journey orchestration agents within AEM Experience Hub, reducing the configuration effort previously required to operationalize personalization. Still strongest when multiple licensed Adobe products are combined.
Deep pre-built connectors: Adobe Campaign (email/MAP), Adobe Marketo Engage, Salesforce CRM, Adobe Workfront (campaign planning), Adobe Real-Time CDP, Adobe Journey Optimizer. GenStudio for Performance Marketing now integrates natively with AEM Assets/Content Hub, extending the content supply chain into ad and performance channels. The 2026 Model Context Protocol (MCP) support lets external AI agents interact directly with AEM services. Adobe Launch (tag manager) provides easy integration with third-party tools. The Adobe Experience Cloud suite provides the deepest MarTech integration within a single vendor ecosystem. Third-party MAP/CRM connectors (HubSpot, Pardot) require custom work.
Multi-layered AI governance: the Governance Agent enforces brand policies (tone, claims, logo, typography, imagery) in real-time and batch, including for MCP-connected external AI, and is now GA via the Agentic SKU; Content Credentials (C2PA, GA) provide tamper-evident AI provenance; the new Agentic AI Usage Monitoring dashboard adds Conversation Replay for agent interactions; Adobe AI Ethics Review Board, Firefly IP indemnification, and an AI Assistant privacy commitment (no personal data for training) round out controls. Score raised from 72 as the strongest governance pillar (Governance Agent) reached GA and conversation-level audit visibility now exists.
JCR versioning provides full version history with diff; Timewarp enables viewing the site at any point in time; Launches enable coordinated scheduled publishing across many pages. 2026 added an OpenAPI for Content Fragment Launches — programmatic list/create/update/delete/promote — making AEM's content-branching mechanism scriptable for the first time. CF check-out/check-in (Beta) and Forms Management UI versioning round it out.
The CF Editor RTE migration from TinyMCE to TipTap matured in 2026: unified stack with the Universal Editor RTE, consistent HTML output, reusable extensions across both editors, a Spectrum 2 look, and new find-and-replace. Custom toolbar buttons, widgets, and badges on RTE fields are first-class extension points; tables, tab-key list nesting, contextual menu, and scoped indentation remain. Output is still an HTML blob, not a portable AST, which caps multi-channel reuse.
Dual delivery: GraphQL with persisted queries CDN-cached, and the OpenAPI CF Delivery endpoint (positioned as successor to the Assets HTTP API) with active Fastly soft-purge invalidation, rate limiting, and Edge-key auth. The OpenAPI footprint expanded in 2026 to CF management operations including Launches and a CF metadata GET endpoint, and MCP servers (2026.1.0) add an AI-tool consumption path. No GROQ-style query language, and page content still requires custom Sling exporters — solid but not the most ergonomic for headless-first teams.
AEM's momentum this cycle is modestly positive, anchored almost entirely by a meaningful lift in Compliance & Trust (+0.8) while Capability barely ticks up and the cost, build, and operational dimensions remain flat. The compliance gains are driven by a sovereign-by-design Managed Services architecture for European data residency and self-service log forwarding to Splunk/Elastic for AEMaaCS, both of which materially de-risk regulated deployments. Practitioners should weigh the Rich Text improvement from the TipTap/Universal Editor convergence against a notable downgrade in native commerce, which now scores 40 and reinforces that CIF remains an integration layer rather than a true commerce engine.
Score Changes
AEM has no native cart, checkout, pricing engine, or inventory — Commerce Integration Framework (CIF) is fundamentally a connector/federation framework, not a commerce engine. Adobe documentation as of mid-2026 confirms CIF storefront and CIF Core Components remain in maintenance mode and should not be used in new projects, with Edge Delivery Services as the recommended reference architecture. All commerce primitives live in Adobe Commerce or external platforms.
Operational Telemetry is now built into AEMaaCS — privacy-preserving real-user monitoring (sampled) covering Core Web Vitals and on-site engagement, feeding Sites Optimizer's prescriptive recommendations and Contextual Experimentation measurement. Combined with Page Insights overlays and Assets usage/expiry reports, AEM now has genuine native telemetry, but content engagement and conversion attribution analytics still require Adobe Analytics licensing. Small bump for Operational Telemetry shipping natively.
The CF Editor RTE migration from TinyMCE to TipTap matured in 2026: unified stack with the Universal Editor RTE, consistent HTML output, reusable extensions across both editors, a Spectrum 2 look, and new find-and-replace. Custom toolbar buttons, widgets, and badges on RTE fields are first-class extension points; tables, tab-key list nesting, contextual menu, and scoped indentation remain. Output is still an HTML blob, not a portable AST, which caps multi-channel reuse.
Materially strengthened: AEM Managed Services now offers a sovereign-by-design architecture available on the AWS European Sovereign Cloud (EU-located, EU-operated) and Microsoft Cloud for Sovereignty in the Netherlands, directly answering EU operational-autonomy requirements. AEM as a Cloud Service retains selectable AWS/Azure regions with contractual residency, and on-premise provides full sovereignty. This largely closes the prior gap versus Salesforce's EU Operating Zone, though the sovereign offerings apply to Managed Services rather than the Cloud Service product, and some Adobe telemetry still flows globally.
Improved tooling: AEM as a Cloud Service now supports self-service log forwarding of AEM, Dispatcher, and CDN logs to Splunk, DataDog, and S3 via Git-declared Cloud Manager config pipelines — native push rather than API polling. Audit logs on new Cloud Service instances are retained with automatic purge only after 7 years, addressing the prior short-retention concern. Remaining gaps: the audit log UI is not analytics-grade and there is still no Shield-equivalent native compliance monitoring dashboard.
Async commenting in the CF Editor (2025.1.0) and CF Check-Out/Check-In (Beta program, 2026) improve coordination and prevent conflicts, but AEM still relies on locking rather than real-time co-editing. No presence indicators, no live conflict resolution. This remains a clear weakness vs Sanity, Contentful, or Google-Docs-style editors.
AEM addresses CCPA via Privacy Service, UK GDPR via IDTA, PIPEDA, and LGPD through its global privacy framework. AEM Managed Services holds FedRAMP Moderate (active on FedRAMP Marketplace, ID F1509037239), and Adobe announced Edge Delivery Services support for FedRAMP deployments — expanding federal coverage to the modern delivery tier. IRAP Assessed at Protected Level (Australia) adds government coverage. AEM as a Cloud Service still does not hold FedRAMP Moderate independently, and no HITRUST for standard AEM.
Content Fragment Models provide 12+ field types with validation, nested fragments, UUID support (GA), and tag inheritance. Extensibility is now broad: custom CF fields, custom Console columns, custom toolbar buttons/widgets/badges, and Content MCP Servers (2026.1.0) expose CF CRUD to AI tools. 2026.3/2026.4 added linking CFs and folders to metadata schemas plus a dedicated GET endpoint for CF metadata. Schema-as-code remains absent — model editing is GUI-only — and the CF/EF/page component split is still confusing.
Experience Fragments give true component-level reuse and the Sites HTL + Sling Models architecture is deeply composable. CFs support nested fragments and variations with shallow-copy support, and 'In-Between Content' (2026) lets authors insert components, assets, or associated content between HTML paragraphs inside a CF without altering the underlying fragment. EDS transforms CFs/JSON into HTML pages. Still HTML-blob output for rich text limits true Portable Text–style composition.
Universal Editor is the canonical visual editor (SPA Editor deprecated 2025.1.0): true in-context WYSIWYG across headless, hybrid, traditional Sites, and EDS, with drag-and-drop and Layout Container. 2026 brought a redesigned UI with dark theme, performance gains, GenAI content variations in the properties panel, editorActions API expansion, workflow-initiation extensions, and support for authenticated Document Authoring pages. The author/published gap is minimal.
AEM Assets remains the strongest media management of any CMS. Smart Crop with AI, Dynamic Media on-the-fly renditions, 3D assets, deep Creative Cloud integration. 2026: Discovery Agent for conversational asset search; Content Optimization Agent for AI-driven renditions; Content Advisor surfaces asset reuse inside Sites/Workfront/third-party apps; Video Smart Crops with AI focus tracking and multiple captions/audio tracks; AI-generated metadata without GenAI Rider signing; automatic malware scanning on upload.
Fastly CDN built into Cloud Service with automatic purge on publish. Edge Functions remain in Beta as of June 2026 — JavaScript at the CDN layer for personalization, API middleware, and edge-composed HTML, deployed via Cloud Manager YAML pipelines — not yet GA. CDN rules match on region/continent/organization; Edge Authentication (Beta) restricts EDS pages to IdP-authenticated users via OIDC. EDS achieves near-perfect Lighthouse scores. Edge Functions still being Beta keeps this below a top score.
Adobe I/O Events delivers content-lifecycle events with batch delivery (up to 20 per request, 2MB), durable at-least-once guarantees, and integration with Adobe I/O Runtime, Amazon EventBridge, and a Journaling API for pull consumption. 2026 added asset search/download events on the Asset Delivery API. Event filtering still trails purpose-built webhook systems and configuration requires Developer Console indirection. Deprecated fields (event_id, recipient_client_id) being removed by end of 2026.
Adobe Experience Manager holds steady this cycle, with every composite dimension unchanged and the platform's profile intact: strong Capability and Compliance & Trust scores in the high 70s offsetting persistent weakness in Cost Efficiency and Build Simplicity in the low 20s. The only meaningful movement is a two-point dip in API design quality despite genuine improvements in AEM 2026.3.0's dynamic GraphQL schema regeneration, suggesting the underlying API model still lags peer expectations even as Adobe ships incremental fixes. Practitioners evaluating AEM should read this as a stable but unmoved posture — the structural tradeoffs around cost and implementation complexity remain the defining considerations.
Score Changes
AEM 2026.3.0 brings real API improvements: dynamic GraphQL schema regeneration on CF model changes (only modified portions refresh), Spectrum 2 RTE alignment between CF Editor and Universal Editor for consistent HTML output, and direct CF publishing to Edge Delivery Services as self-contained semantic HTML — eliminating the need for separate GraphQL endpoints per fragment model. However, AEM still carries multiple overlapping API surfaces (Sling, Assets HTTP, CF GraphQL, Content Services, EDS) with inconsistent patterns. Not higher because the underlying fragmentation from 15+ years of organic growth remains unresolved.
Adobe Experience Manager remains broadly stable this cycle, with five of six composite dimensions unchanged and only Compliance & Trust edging up from 76.8 to 77.6. That modest gain is driven by strengthened regulatory coverage — particularly expanded privacy framework support for CCPA, UK GDPR, PIPEDA, and LGPD — alongside a deeper certification portfolio now including PCI DSS 4.0 and CSA STAR Level 2. Practitioners should note the incremental accessibility improvements in authoring UI and documentation, which, while not yet moving composite scores, signal Adobe's continued investment in WCAG 2.2 AA conformance for Cloud Service.
Score Changes
AEM addresses CCPA via Privacy Service, UK GDPR via IDTA, PIPEDA, and LGPD through its global privacy framework. Adobe's compliance list now confirms FedRAMP Tailored for Experience Cloud and FedRAMP Moderate for Managed Services — the previous assessment that AEM had no FedRAMP coverage was partially incorrect. IRAP Assessed at Protected Level (Australia) adds government coverage. However, FedRAMP Tailored is low-impact only, and AEM as a Cloud Service (the primary product going forward) does not hold full FedRAMP Moderate independently. No HITRUST for standard AEM.
Adobe's certification portfolio has expanded: PCI DSS 4.0 (Managed Services Enhanced Security), CSA STAR Level 2, ISO 9001, IRAP Assessed at Protected Level (Australia), ENS High (Spain, Managed Services). FedRAMP Tailored/Moderate coverage adds to the portfolio. This is one of the stronger additional cert portfolios in the DXP market. The IRAP and ENS certifications are particularly valuable for government and EU public sector use cases that competitors often lack.
Adobe now publishes ACRs for AEM Cloud Service Sites (2024) referencing WCAG 2.2 AA — an upgrade from the previous 2.1 target. The Universal Editor continues to mature with better accessibility, and Edge Delivery Services has a December 2025 ACR. However, the legacy Touch UI/Page Editor still powers most complex authoring scenarios in production and retains known screen reader inconsistencies. Progress is real but incremental; the deployed authoring interface gap remains meaningful.
Adobe's accessibility documentation has strengthened. ACRs are now available for AEM Cloud Service Sites, AEM Cloud Service Assets, AEM 6.5 Sites, AEM Edge Delivery Services (December 2025), AEM Forms, and AEM Core Components — comprehensive product-level coverage. Reports now reference WCAG 2.2 AA and EN 301 549 in addition to Section 508. This is among the most thorough ACR documentation in the DXP market. Confidence upgraded to HIGH given the breadth and recency of published reports.
Adobe now holds ISO 27001:2022 (updated from 2013 standard), ISO 27018:2019, and additionally ISO 27017:2015 for cloud security controls — all covering AEM Cloud Service. ISO 22301:2019 for business continuity adds resilience assurance. Annual surveillance audits maintained. The expanded ISO portfolio (27001 + 27017 + 27018 + 22301) is stronger than the previous assessment captured. On-premise AEM still excluded from certificate scope.
AEM reaches a mature plateau with strong capabilities across all three delivery modes. The 2025 release wave brings Content Fragment UUID support GA, new admin UIs, and deeper AEP integrations. Platform velocity remains solid but no longer accelerating as the platform stabilizes. Cost structure is unchanged — Adobe's premium pricing continues to limit accessibility, and operational complexity remains high despite Cloud Service improvements.
Platform News
Content Fragment UUID support GA, new CF admin UI, automatic tag inheritance — incremental but meaningful content management improvements.
Simplified data collection and real-time personalization integration between AEM and AEP, reducing custom implementation overhead.
Continued compliance investment maintains AEM's strong position for regulated industries.
Adobe consolidates its multi-pillar AEM strategy with improved tooling and documentation. Edge Delivery Services gains real enterprise traction with several high-profile launches. Developer experience incrementally improves with better SDKs and CLI tooling, but the fundamental complexity of the AEM ecosystem continues to drive high implementation costs and long timelines.
Platform News
New drag-and-drop authoring improvements, enhanced template management, and improved MSM (Multi Site Manager) workflows for multi-brand governance.
Major brands including several Fortune 500 companies publicly launched EDS-based properties, validating the approach for enterprise marketing sites.
App Builder and I/O Runtime improvements simplified custom integrations, reducing the reliance on complex OSGi-based customizations.
AEM's three-pillar strategy (Sites, Headless, Edge Delivery) is maturing but creating decision fatigue for implementors. Adobe GenAI features ship across the platform with content variation generation and smart tagging improvements. The Universal Editor reaches broader availability, finally enabling true WYSIWYG for decoupled frontends. Costs remain prohibitive for mid-market.
Platform News
The Universal Editor shipped for EDS, enabling visual editing of document-based sites without requiring the traditional AEM Sites stack.
AI-powered content generation, summarization, and tone adjustment integrated into the Content Fragment and Sites authoring flows.
Adobe expanded its BAA coverage to include AEM Cloud Service, strengthening the platform's regulatory posture for healthcare customers.
Edge Delivery Services (formerly Franklin/Helix) launches as AEM's 'third pillar' alongside Sites and headless, promising Lighthouse 100 scores and dramatically simpler authoring via Google Docs/Sheets. This is a bold strategic pivot that improves velocity and build simplicity narratives but fragments the platform story further. Regulatory readiness strengthens with enhanced HIPAA support.
Platform News
AEM's CDN-first, document-based authoring approach launched, targeting marketing teams who want fast sites without traditional CMS complexity.
RDE reached general availability, cutting the Cloud Service development-deploy loop from ~30 minutes to under 1 minute.
Generative AI capabilities for content creation, image generation, and variation testing previewed within the AEM authoring experience.
Adobe's aggressive push into generative AI and cloud-native architecture gains momentum. The Universal Editor preview signals a major architectural shift toward decoupled editing. Platform velocity scores peak as Adobe ships features at an unprecedented pace, though the transition creates temporary confusion about which authoring paradigm to invest in.
Platform News
Adobe previewed the Universal Editor, enabling WYSIWYG editing of any headless frontend, a significant architectural bet on decoupled content management.
New admin console for managing Content Fragments at scale with improved search, bulk operations, and better metadata management.
Adobe doubled down on the integrated DXP story with tighter AEP, Target, and Analytics integrations across the Experience Cloud.
Adobe accelerates Cloud Service adoption with rapid release cadence and improved content fragment authoring. Headless capabilities are expanding with GraphQL APIs reaching GA, but the dual architecture (traditional Sites + headless CF) adds complexity. Cost and operational burden remain the platform's Achilles heel as competitors offer simpler alternatives.
Platform News
Persisted queries and GraphQL endpoint for Content Fragments reached general availability, marking AEM's serious push into headless delivery.
Adobe previewed RDE to address the notoriously slow Cloud Service development loop, though it wouldn't ship for several more months.
Adobe committed to monthly feature releases for Cloud Service, significantly accelerating the platform's velocity compared to the legacy SP cadence.
AEM as a Cloud Service is still early, launched in 2019 but adoption remains cautious. Most enterprises are on AEM 6.5 on-prem or managed services. The platform's core CMS capabilities are strong but the developer experience and operational complexity remain significant pain points, with high licensing costs keeping TCO scores low.
Platform News
Adobe's cloud-native AEM offering reached general availability, introducing continuous deployment and auto-scaling, though migration from 6.5 remained complex.
Continued investment in the on-prem/managed path with incremental fixes, keeping the large installed base current.
Real-Time CDP and Journey Optimizer integrations began maturing, strengthening Adobe's full-stack DXP story.
Adobe Experience Manager pricing is quote-only: Adobe publishes no prices. Partner cost guides put standalone Sites entry near $30K a year and Sites, Assets and Forms bundles at $60K to $200K or more, driven by content requests, environments and author seats.
The biggest hidden costs of Adobe Experience Manager are traffic overages, add-on licenses and implementation. Sites is licensed by content requests, counted when served from cache, and Adobe Target, Analytics, Forms and AI agents are sold separately. First-year implementation runs two to four times the license.
Companies leaving Adobe Experience Manager in 2026 mostly cite cost and complexity. Gartner's 2026 Magic Quadrant ended Adobe's run at the top and cautioned on price and skills, and the 6.5 end-of-support deadlines forced customers to choose between 6.5 LTS, Cloud Service or another platform.
Yes, Adobe Experience Manager is an enterprise digital experience platform (DXP) combining web content management, digital asset management and managed hosting. Its deeper personalization, analytics and journey orchestration come from separately licensed Adobe Experience Cloud products such as Target and Analytics.
Adobe Experience Manager manages and delivers content: pages, fragments and assets. Adobe Experience Platform (AEP) manages customer data, building unified profiles and audiences that power Real-Time CDP and Journey Optimizer. They are licensed separately, and AEM uses AEP audiences for personalization through Adobe Target.
Adobe Experience Manager wins on digital asset management, multi-site inheritance and the depth of the Adobe marketing stack. Sitecore suits teams with Microsoft .NET skills or those wanting a SaaS suite without AEM's Java specialist premium, though both are premium-priced enterprise platforms.
Customers most often praise Adobe Experience Manager's content management flexibility and its integration with the rest of Adobe Experience Cloud. Reviewers also value dedicated technical account managers, and G2 named AEM the top content management software in its 2026 Best Software Awards.
Adobe Experience Manager's five-year total cost of ownership typically reaches seven figures for an enterprise site. Partner guides put licensing at $60K to $200K or more a year, first-year implementation at two to four times the license, and AEM developers average $117K to $131K a year.
The strongest alternatives to Adobe Experience Manager are Optimizely, SitecoreAI, Contentful and Acquia. Optimizely now tops Gartner's 2026 DXP Magic Quadrant, SitecoreAI is the closest suite match, and Contentful or Acquia's Drupal stack cost less for teams that do not need Adobe's marketing suite.
Yes, Adobe Experience Manager has built-in AI, including Generate Variations, Firefly image generation, Smart Tags and AI translation. Its named agents require the separately priced Agentic SKU, and an MCP (Model Context Protocol) server lets outside assistants such as Claude work with AEM content.
Adobe Experience Manager is among the hardest platforms to implement and maintain. Basic deployments take six to twelve months with certified AEM Java specialists, and Cloud Service customers must absorb enforced changes such as the June 2027 move to Java 25.
Reviewers' biggest criticisms of Adobe Experience Manager are its steep learning curve and high cost. G2 reviewers also report slow support resolution on heavily customized builds, and recovering accidentally deleted content can mean asking Adobe support to restore an instance.
Reach out to these highly trusted implementation partners, agencies and specialists.
Agencies, dev shops, and systems integrators vary wildly in how well they deliver on Adobe Experience Manager. We don't take on implementation work ourselves.
Tell us what you're building and we'll come back with a shortlist of firms with a genuine track record on this platform.