Big Corporations

Does anybody know out of hand what big Corporations are using MODX CMS.

Theres been a couple of posts on this subject and the Management / owners have told us that some multi million pound American company’s use it but they haven’t named for the obvious reasons.

There’s also some pretty big company that use it for their client sites including the one I work for who has around 400 clients of which around 150 are now on the modx system.

But hey, it doesn’t really matter what big company’s use it, it it fits your needs then it’s the obvious choice.

I love modx but I need to convince big companies to use it. I don’t want them using any commercial CMS. The lame excuse for big companies is that oh its open source and it could be a security risk.

Well lets put it this way, thousands upon thousands of hours have been put into making modx what it is today by some very skilled people. It also has a very skilled community to help solve any problems people have.

To replicate what Modx is today, it would cost a company tens of thousands of pounds employing developers on a full time basis, and yes it’s open source, but does that not mean there are more people working on improving the system and thousands more eyes looking out for potential vulnerabilities ??

Personally I haven’t had a problem with security in Modx. I used to use Wordpress and quite often you would get 2 or 3 updates in a couple of days because of people hacking it.

I agree to above, if someone wanted to explicitely hack the site of that particular company, he would be better off if they used commercial software. There are less vulnerabilities in a well maintained open source product than in most commercial ones. More ppl look for security holes in them, because it is freely available, thus more security holes are fixed. Now imagine their competition recruits a hacker to infiltrate their commercial CMS using site, having to pay for the CMS would surely not be a mentionable obstacle in this case. More likely the luxury problem of having so many open gates to choose from.

I can see why many admins still prefer to use Typo3 (also open source) as an eSolution (while I don’t really like it and think it has a limited ttl on the market) however, the ’commercial == more security’ theory is just a mythos of the ignorant.

Just my 2 bytes.


PS: ’The White House’ uses an open source CMS as well.

To be fair, one advantage of a commercial program is that it’s not easy for hackers to look at the source code.

That said, it’s also a long time between security updates for most commercial offerings.

Open Source rocks! http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf

// http://modxcms.com/forums/index.php/topic,40576.0.html


Revo comes with "Tighter security via movable core/ and connectors/ directories"
http://modxcms.com/forums/index.php/topic,41880.msg251576.html#msg251576

I can’t discuss specifics of the large corporations using MODx, but I will say there’s some very large companies using it. This includes a Fortune 50 (yes, fifty, not 500), and a large ($20B+, yes billion) private corporation running their full public facing website. Trust me when I say I’m working hard to get case studies on these deployments.

I may be able to get permission to divulge a project built for on of the UK’s largest Engineering and Contracting firms.

I also think the Whitehouse.gov being built on Drupal and recent policy papers coming from the US Dept. of Defense on use of OSS certainly reinforces the case for OSS CMS applications. In addition private commercial CMSs often are secure by obscurity and this is a pretty weak method vs. the checks and balances in an OS project.

The biggest resistance I’ve had from large corporations is the lack of version control for documents. I know there are some extensions but I recall we couldn’t use them because they conflicted with ManagerManager but that is probably not the case anymore with the latest version.