Running Umbraco 13? Security support ends 14 December. Fixed-price upgrade to 17: £8,999 + VAT See how it works →
umbracofreelancer
Upgrades and rescues

What happens when Umbraco 13 security support ends?

The short answer

Nothing dramatic on the day, which is exactly the trap. Your site keeps working on 15 December 2026. What changes is invisible: from that point, security vulnerabilities discovered in Umbraco 13 no longer get patched. Every month after end of life, the gap between your site and a safe site widens, and you find out how wide it got at the worst possible moment. There are knock-on effects too: penetration tests start flagging the platform, cyber insurance questionnaires get awkward, and agencies gradually stop wanting to touch old versions. The fix is a planned upgrade to Umbraco 17, which I offer at a fixed £8,999 plus VAT.

The day itself is an anticlimax

End of life dates feel abstract because nothing visibly breaks. Umbraco 13 sites will render pages on 15 December 2026 exactly as they did the day before. The change is in what happens next: when a security vulnerability is found in Umbraco 13 after that date, no patch is coming. You are relying on nobody finding one, forever, on a platform whose source code is public.

How the risk actually lands

In my experience it rarely arrives as a hack first. It arrives as a failed penetration test before a contract renewal, a cyber insurance questionnaire you can no longer answer honestly, or a compliance review that puts "unsupported CMS" in red at the top. Public sector and healthcare clients feel this earliest, but any organisation that signs security questionnaires for its own customers inherits the problem. By then the upgrade is urgent, and urgent work is always more expensive than planned work.

The capacity squeeze is predictable

Every end-of-life date in this ecosystem produces the same curve: a quiet year, then a crowded final quarter where everyone wants the same specialists in the same weeks. Booking early is not a sales line, it is queue theory. A planned upgrade also leaves time to do it properly, with testing and a calm rollout, instead of a deadline sprint.

What I would do in your position

Get the upgrade scoped now even if you schedule the work for later. I take Umbraco 13 sites to 17 for a fixed £8,999 plus VAT, and if you want the platform kept healthy afterwards my support and maintenance plans cover patching within 48 hours of release. The numbers are all on the pricing page; the first step is a conversation about what you are running.

Plan your upgrade →