Skip to content

Build & Replatform · Ecommerce development

Magento development services, since Magento 1.

Magento development services cover building, extending, integrating and maintaining Magento Open Source and Adobe Commerce stores. We work on current and older 2.x versions, Hyvä and Luma, custom modules and ERP integrations, and we'll tell you straight whether your store should be upgraded, extended or moved off Magento. On versions Adobe no longer patches, we patch first.

Last reviewed

What a Magento development engagement covers

As a Magento development company, we've been in the codebase since Magento 1 and seen every way a store can break. Our Magento 2 development services cover the whole platform, on Magento Open Source and Adobe Commerce, Hyvä or Luma:

  • Builds and rebuilds. New stores and replatforms on a supported 2.4.x release, with the catalog, customers and order history moved across and every old URL mapped.
  • Custom modules and extensions. Built as Composer packages that stay out of the core, so upgrades have less to break.
  • Integrations. ERP, PIM, marketplaces, shipping, tax and payments, over Magento's REST and GraphQL APIs and its message queues.
  • Upgrades. A supported 2.4.x release, with the PHP, database, search and cache versions it requires, and every extension checked first.
  • Performance. Server response, caching and Core Web Vitals, measured before and after.
  • Security. Adobe's monthly isolated patches applied in order, pen-test remediation, admin and edge hardening, and a backported fix where one exists on versions Adobe no longer patches. Pen-test findings closed and retested against every bypass variant we could throw at them.
  • Support. Patching, monitoring and small changes on a retainer, after launch or after your last agency.

Every engagement starts the same way: we read your code before we quote.

Upgrade, extend or leave: a straight answer

Short answer: extend a supported 2.4.x, patch an older one, and weigh leaving at a rebuild. A Magento ecommerce agency that sells only Magento tends to say stay. We build elsewhere too, so we'll say when leaving wins.

Adobe's lifecycle policy never mentions Magento Open Source; Adobe's October 2026 security article does: "Open Source merchants can only download patches for version 2.4.7 or later."

Upgrade, extend or leave, situation by situation · As of Every row cites its primary sources.
Your situationWhat to do nowWhat it unlocksWhat it risksSources
Supported 2.4.xStay and extend: monthly isolated patches, in order, on the newest -p release.Standard support until May 31, 2027 (2.4.7), 2028 (2.4.8) or 2029 (2.4.9); Adobe Commerce 2.4.7 keeps fixes to May 31, 2028, Open Source 2.4.7 doesn't.Hotfixes ship separately: StyleSmuggler (CVE-2026-75650, CVSS 10.0) needed one on 2.4.4 to 2.4.9.Adobe Commerce lifecycle policy Adobe: Release policy, extended support for Adobe Commerce only Adobe KB: APSB26-153, monthly isolated patches Adobe KB: APSB26-146, the CVE-2026-75650 hotfix Sansec: StyleSmuggler
Older 2.4.x or 2.3.xAdobe Commerce 2.4.4 to 2.4.6: Adobe's patches. 2.4.3 and older, or Open Source below 2.4.7: WAF rules as a stopgap and a backported fix where one exists. Either way, keys rotated when a bug can leak them.An upgrade on your schedule; on Adobe Commerce on Cloud, before Adobe can suspend traffic.Lower risk, not zero, and no patch fixes an end-of-life PHP.Adobe KB: APSB26-153, October patch files by version Adobe Commerce lifecycle policy, including the Cloud deadlines Adobe Commerce system requirements PHP: unsupported branches
Magento 1Migrate to Magento 2 or another platform; on Community Edition only, OpenMage, a community fork with long-term support, lets you stay.A supported codebase; Adobe's Data Migration Tool moves products, customers and orders.The theme, extensions and custom code don't move: they're rebuilt or replaced.Adobe: how data migration works OpenMage
Heavy B2B on Open SourceRank the B2B features you need natively; compare extensions with Adobe Commerce B2B.Company accounts, shared catalogs, negotiable quotes and Quick Order, native in Adobe's extension.Extensions: more code to own. Adobe's B2B extension runs only on Adobe Commerce and requires a separate license, provisioned through your Adobe account representative.Adobe: Introduction to Adobe Commerce B2B Adobe: Install the Adobe Commerce B2B extension Adobe: Extensions from Adobe, B2B licensing
Extension debtAudit every module: keep, replace, merge into custom code or remove. Core overrides first.Fewer conflicts and fewer modules to clear at every upgrade.Features nobody knew a module provided. Removals get tested on staging.Adobe: Upgrade Compatibility Tool overview
Hosting and team costCount hosting, monthly patching and the people who do it.A decision on numbers: stay and simplify, Adobe's hosting (Adobe Commerce only), Mage-OS or a replatform.Self-hosted 2.4.9 needs PHP 8.5, OpenSearch 3 and MariaDB 12.3 or MySQL 8.4; Adobe also lists Valkey, Varnish and RabbitMQ or ActiveMQ Artemis.Adobe Commerce system requirements, 2.4.9 Adobe Commerce as a Cloud Service overview Mage-OS

Dated support windows are on our Magento upgrade service page. If a row points away from Magento, compare first: moving from Magento to Shopify has its own page.

Custom Magento development and extensions

We build what an extension can't, and sometimes the honest answer is that an extension was the problem. Custom Magento development covers the features no Marketplace module does well, and Magento extension development is how we build them: Composer packages, written as plugins and observers wherever Magento allows them, with a core override only where Adobe's plugin rules leave no other way.

  • Extension rescue. Modules a past agency left half-finished, or a vendor abandoned, get read, then fixed, rewritten or retired, with their data kept.
  • Extension sprawl. Five modules that each do half a job become one module you own, so every upgrade waits on fewer vendors.
  • Admin tools. The bulk edits, imports and reports your team does in spreadsheets, built into the admin with permissions to match.

Every module we write ships with tests and a note on what it changes, so the next developer isn't guessing.

Configure-to-order is the hardest case, and the mechanics are the same on any platform: rules that allow only buildable combinations, a live price from the buyer's own price list, and an accepted quote that reaches the ERP as a sales order, configuration attached. We keep those rules as data, not as a pile of hand-edited exceptions.

Proof: Sprawling hand-maintained configurator rule sets replaced by a small declarative rules engine.

Magento for enterprise and Adobe Commerce

You need Adobe Commerce when you'll use what only it offers, such as content staging, Adobe's hosting, or its extended and security-only support windows and on-call support. Adobe's B2B extension runs only on Adobe Commerce and requires a separate license, provisioned through your Adobe account representative. If you won't use any of it, Open Source runs the same core with no Adobe license fee.

Multi-store doesn't need it. Every Adobe Commerce and Magento Open Source installation has a hierarchy of websites, stores and store views, so one admin can run several brands or regions.

As a Magento enterprise agency, we work on both editions, on-premises and on Adobe Commerce on cloud infrastructure. On Cloud's Pro architecture, code moves from integration to staging to production, and every release also clears our code review and security gates, with a rollback plan written first. One catch: Adobe calls Adobe Commerce as a Cloud Service, its SaaS edition, the "recommended long-term destination for all Adobe Commerce on Cloud customers," and the Cloud Service doesn't support Luma storefronts.

Selling wholesale? Our Magento B2B page compares the two editions feature by feature.

Storefront speed: Hyvä and Luma

A Magento store can be fast without a headless rebuild. Speed starts on the server: Varnish or Fastly full-page cache, Valkey (or Redis where still supported) and OpenSearch, tuned to the catalog, then the slow code. Server response times cut from seconds to milliseconds.

The front end comes next. On a rebuild, Hyvä is our default. It replaces Luma's Knockout, RequireJS and LESS with Tailwind CSS and Alpine.js, and it's been free under OSL3 and AFL3 since November 10, 2025. By Hyvä's own figures, pages weigh 0.4MB against Luma's 3MB, uncompressed. The catch: every module built for Luma's storefront needs a Hyvä compatibility module, and full Adobe Commerce support is Hyvä Enterprise, a paid product.

When a rebuild isn't on the table, we fix Luma: leaner JavaScript, lighter images and a higher cache hit rate. Headless, on PWA Studio or Next.js, is a bigger bet, and rarely the first fix.

Integrations: ERP, PIM, marketplaces

Magento talks to an ERP properly when the sync is built for failure, not for the demo. Its asynchronous REST endpoints write each request to the message queue, so a burst of ERP updates waits its turn instead of timing out. NetSuite is our deepest ERP (SuiteQL over REST, plus SuiteScript); Sage, QuickBooks, Dynamics 365 Business Central and other ERPs with an API follow the same pattern.

  • ERP. Price, stock, credit and customers from the ERP; orders back, each with an idempotency key so a retried order can't land twice.
  • PIM. Product content and attributes from the PIM, with the SKU master wherever your business keeps it, usually the ERP.
  • Marketplaces. Amazon and eBay listings, stock and orders in step with the store, plus distributor and channel feeds.

Proof: ERP syncs made several times faster, with silent data loss eliminated. The method is on our ERP integration page.

Magento consulting and code audits

We'll tell you what your last agency left behind, in writing. A Magento consultant who reads the code beats one who reads the slides. Our audit covers five things:

  • Versions. Magento, PHP, MariaDB or MySQL, OpenSearch or Elasticsearch, Valkey or Redis, on every environment, against what Adobe's requirements list for your release.
  • Patch level. Which of Adobe's monthly isolated patches and hotfixes are applied, and which are missing.
  • Code. Every module in composer.json and app/code, every core override and every copied template, checked with Adobe's Upgrade Compatibility Tool on Adobe Commerce.
  • Exposure. Admin users and integrations nobody created, extensions with known CVEs, and the health of cron and the queues.
  • Ownership. Who holds the repository, the hosting, the Adobe and extension licenses and the deploy keys.

You get the findings, the risks ranked and a plan. The audit is yours to keep, whether or not we do the work.

Need ecommerce leadership as well as code? A fractional head of ecommerce covers the roadmap, vendors and a P&L lens, with hands on the code when needed.

Engagement models, including dedicated Magento developers

You can hire Magento developers into your team. On a retainer, our engineers work inside your process: your repository, your tickets and your releases. It's a standing team: the engineers who read your code are the ones who do the work, and every change still clears our code review and security gates before it reaches your store. Our Magento ecommerce development services come in four shapes:

  • Project. Builds, replatforms, integrations and audits, scoped in writing before any code.
  • Retainer. Ongoing development and platform care: patching, monitoring, support and small changes, or engineers inside your team, as above.
  • Fractional head of ecommerce. The leadership role above, part time.
  • Emergency. Hacked, down or bleeding orders. Triage first, then a written plan. Store hacked or down?

Agencies hire us too, for white-label Magento work: we build under the agency's name, invisible to its client. Running a store in Los Angeles? Start with our Magento developers serving Los Angeles.

Who touches your code

Senior engineers own every line. Specialist AI agents draft modules, tests and data migrations from a written brief; engineers decide the architecture, steer the agents and rewrite what's wrong. Then come two blocking gates. At code review, an engineer reads every diff before it merges, and agent output never merges unreviewed. At the security gate, static analysis and a dependency audit run on every build, the patch level is checked against our own CVE list, and secrets, personal data and payment paths get reviewed by hand. A rollback plan is written before every release. Agents add speed; gates decide what ships. More on how we review and ship code.

How to choose a Magento agency

Every Magento 2 development company lists the same services. Five questions separate them:

  1. Which versions and editions have you shipped on lately? Ask for exact releases, such as 2.4.7-p10, not "Magento 2."
  2. Will you read our code before you quote? A quote written before anyone opens composer.json is a guess.
  3. How deep is your Hyvä and B2B work? Ask what they do when a Luma-only extension meets Hyvä, and why Adobe's negotiable quotes need company accounts first.
  4. What's your patch practice? Adobe's monthly isolated patches go on in order, on the newest -p release, with hotfixes applied separately. Ask how they track that, and what they do once Adobe drops your version.
  5. Who owns the repository? You should: the code, the hosting accounts and the licenses, in your name from the start.

Agency or freelancer? The questions don't change. A freelancer can pass all five on a small, well-scoped job; the gaps show when the work spans the platform and nobody else reviews the code.

What drives Magento development cost

We don't publish prices. Two stores with the same theme can need very different amounts of work, and these seven drivers are why:

  • Edition and license. Adobe Commerce carries Adobe's license fee; Open Source doesn't.
  • Version gap. The further your release is from a supported 2.4.x line, the more of the stack moves with it.
  • Extensions. Their count, their code quality, and whether each one still has a maintained release.
  • Customizations. Core overrides and custom modules, each read and tested against the change.
  • Integrations. Every ERP, PIM, marketplace or payment connection adds a sync to build or regression-test.
  • Catalog and data quality. Inconsistent attributes and duplicate SKUs get fixed before anything is built on them.
  • Hosting. Who controls the servers, and which services your release requires.

Our guide to what Magento costs covers typical market rates, with sources.

Free Magento security patches

Want to see our work before you hire us? That's the plan: backports that can help more than one store will go public, each on its own page under free Magento security patches, with its CVE, the Adobe bulletin it answers and only the exact versions we tested it on.

No patch published yet.

Each free patch will be listed here when it ships, with only the versions we tested it on.

Until the first one lands, judge us by this page: every date and version requirement on it cites its primary source.

Stuck on an old version? We'll patch you now and upgrade you when you're ready.

Magento development questions

How much does Magento cost?

Magento Open Source is free to use: Adobe publishes it under the OSL 3.0 license. Adobe Commerce is licensed from Adobe, so Adobe sets that fee, not us. Beyond the license, the cost sits in hosting, extensions, development and upkeep. Our Magento cost guide covers what the market typically charges, with sources.

How much does Magento development cost?

We don't publish prices; seven drivers set them: the edition and its license, the gap to a supported version, extension count and quality, custom code, integrations, catalog and data quality, and hosting. We quote after reading your code. Typical market rates, with sources, are in our Magento cost guide.

How do we choose a Magento agency?

Ask five questions. Which Magento versions and editions have you shipped on recently? Will you read our code before quoting? How deep is your Hyvä and B2B work? How do you apply Adobe's monthly security patches, and what happens when our version stops getting them? Who owns the repository and accounts when the work ends? The owner should be you.

Magento development agency or freelance developer?

It depends on the job. A good freelancer suits one well-scoped task on a store where someone else reviews the code. An agency suits work that spans the platform, like an upgrade, an ERP integration or a rebuild, because it brings a process: review before anything merges, security checks, staging and a written rollback plan.

When should we hire a Magento development agency?

Before a deadline forces it. The usual triggers: Adobe's support for your version is ending, an upgrade has to move PHP and the database too, your last agency left code nobody can maintain, an ERP sync drops or duplicates orders, or the store needs a rebuild. If it was hacked, skip the shopping and get triage first.

Do you work on older Magento 2 versions?

Yes, on current and older 2.x versions. As of October 16, 2026, Adobe's lifecycle policy puts 2.4.7, 2.4.8 and 2.4.9 in standard support, and Adobe Commerce 2.4.4 to 2.4.6 still get security fixes until May 31, 2027 or 2028; Adobe's regular Open Source patches cover 2.4.7 and later. Where Adobe's fixes have stopped, we patch first: WAF rules as a stopgap, a backported fix where one exists, then the upgrade.

Should we stay on Magento or move?

Stay if Magento is doing work a hosted platform would make you fight: B2B pricing and quotes, a configurator, deep ERP logic, or many sites from one admin. Consider moving if the store needs a rebuild anyway and a hosted platform covers the catalog and checkout. We build on both, so we compare them in writing before you decide.

Sources

  1. 1 Adobe Commerce lifecycle policy (page updated September 18, 2026) · checked
  2. 2 Adobe: Release policy, versioning and extended support (page updated October 14, 2026) · checked
  3. 3 Adobe KB: Security update available for Adobe Commerce, APSB26-153 (updated October 16, 2026) · checked
  4. 4 Adobe KB: Critical security update for Adobe Commerce, APSB26-146 (CVE-2026-75650 hotfix, updated September 21, 2026) · checked
  5. 5 Sansec: StyleSmuggler (CVE-2026-75650) · checked
  6. 6 PHP: unsupported branches · checked
  7. 7 Adobe Commerce system requirements (page updated October 13, 2026) · checked
  8. 8 Adobe: how data migration works, Data Migration Tool (page updated October 8, 2026) · checked
All 28 sources
  1. 9 OpenMage: a community-driven fork of Magento Community Edition · checked
  2. 10 Adobe: Introduction to Adobe Commerce B2B (page updated October 1, 2026) · checked
  3. 11 Adobe: Install the Adobe Commerce B2B extension (page updated October 8, 2026) · checked
  4. 12 Adobe: Extensions from Adobe, B2B licensing (page updated October 8, 2026) · checked
  5. 13 Adobe: Upgrade Compatibility Tool overview (page updated October 8, 2026) · checked
  6. 14 Adobe Commerce as a Cloud Service overview (page updated October 8, 2026) · checked
  7. 15 Mage-OS: an independent, community-driven distribution of Magento Open Source · checked
  8. 16 Adobe Commerce developer docs: Plugins (interceptors) · checked
  9. 17 Adobe: Content staging (page updated October 8, 2026) · checked
  10. 18 Adobe: Site, store, and view scope (page updated October 8, 2026) · checked
  11. 19 Adobe Commerce on cloud infrastructure: Pro architecture (page updated October 8, 2026) · checked
  12. 20 Adobe Commerce on cloud infrastructure: Fastly services overview (page updated October 8, 2026) · checked
  13. 21 Hyvä Docs · checked
  14. 22 Hyvä: Hyvä Theme is now open source and free · checked
  15. 23 Hyvä: product overview (page-weight figures) · checked
  16. 24 Hyvä Docs: Compatibility modules · checked
  17. 25 Adobe Commerce developer docs: Asynchronous web endpoints · checked
  18. 26 Oracle NetSuite: Executing SuiteQL queries through REST web services · checked
  19. 27 Adobe Commerce developer docs: GraphQL overview · checked
  20. 28 Magento Open Source on GitHub (license: OSL 3.0) · checked

Last reviewed

Every Magento store has a past. We read it before we quote. Send the store URL, the version and the edition, and we'll tell you straight whether to upgrade, extend or leave.