Plenty of associations, clubs and member organisations still run on Joomla, often on a version that no longer gets security fixes, looked after by someone who has since moved on. Joomla is built on PHP, the language we’ve been engineering production software in for 25 years, so we can take over an existing site, get it patched and stable, and keep member logins, event bookings and payments working while we do it.
Where Joomla versions stand (October 2026): Joomla 3 reached end of life on 17 August 2023, and Joomla 4 stopped receiving security fixes on 14 October 2025. Joomla 5 gets security fixes until 12 October 2027, and Joomla 6 until 16 October 2029. Around 7 in 10 Joomla sites still run a version with no security support (based on W3Techs data, October 2026).
Joomla has had serious vulnerabilities, and abandoned extensions are the usual way in. We check your Joomla version, every extension and template against known vulnerabilities, review user accounts and server configuration, and look for signs someone has already got in. Then we tell you in plain English what matters and what can wait.
Moving an older Joomla site forward isn’t always a simple upgrade. A Joomla 3 site has to step through Joomla 4 and 5 to reach Joomla 6, and templates and extensions often need replacing on the way. Sometimes moving to WordPress or Drupal costs less over the life of the site. We look at what you actually use, then recommend upgrading or migrating, with a fixed quote either way.
More on Joomla 3 and 4 end of life and what it means for your site.
Once your site is on a supported version, we keep it there: Australian hosting, daily off-site backups, monitoring and a monthly security report, handled by engineers who have been building PHP applications for 25 years.
Book a call and we’ll tell you where it stands and what it will take to make it safe.
