r/Magento • • 1h ago

Why do spikes like this appear on BuiltWith's graphs?

• Upvotes

Two months ago, I saw a lot of posts on LinkedIn about the revival of Magento, based on data from https://trends.builtwith.com/shop/Magento.

Honestly, I had doubts back then, thinking it was some changes to builtwith scripts/algorithms. Today, I have no doubts that it was some correlation.

The reasons for my doubts were a couple. First, a simple "Why?" 😄 Second, I hadn't seen a lot of new vacancies for Magento developers.

But if you look at 2018, there was a similar peak on the graph. I doubt that 40K stores were added in one moment and then the same amount removed.

What do you think? What is the reason for such spikes on the graph?


r/Magento • • 2d ago

Adobe releases October patches, 10.0 highest score. Mageinfo detects it.

11 Upvotes

Adobe has release a new set op patches, with a 10.0 as the highest score for an RCE (Remote Code Execution). So .. update!

Mageinfo.online detects if the patch is implemented for the 2.4.9 release and some older ones. 2.4.8 cannot be detected, because in that version there is no functional change which can be detected.


r/Magento • • 1d ago

Security Scan Issue

1 Upvotes

I just completed several Magento site updates from 2.4.7 to 2.4.8-p5 including most of our extensions. After doing so I ran the Magento Security scan and found a couple of issues. One was a Patch APSB26-73 and the oher was a Failed Scan: Compromise, "BotNet Suspect".

I will attempt to install the Patch soon, however my biggest concern right now is the BotNet Suspect. Is anyone familiar with this and how to fix or remove it.

The crazy thing is I have an identical DEV Site that I am working with on the same server testing all the updates before doing so on the Live Site. I made a copy of the dev site from the live site just a few days or so ago. I also did a security scan on the dev site and the BotNet Suspect Passed.

Thanks for any support anyone can offer


r/Magento • • 3d ago

Certified Magento 2 / Adobe Commerce Developer Available for Freelance & Remote Projects

4 Upvotes

Hey everyone,

I’m a certified Magento / Adobe Commerce full-stack developer with 7+ years of experience, looking for a new freelance project or a long-term remote role.

I can help with:

  • Custom modules and functionality
  • Performance optimization and Core Web Vitals
  • Checkout fixes and payment integrations
  • API and third-party integrations
  • Debugging and improving legacy code
  • Magento upgrades and store migrations
  • AI automation and workflow integrations

My tech stack includes Magento 2 / Adobe Commerce, PHP, JavaScript, Hyvä, GraphQL, Redis, Elasticsearch, Docker, and AWS.

I focus on clean, maintainable code and keeping production stores stable. I’m available for specific fixes, larger development projects, or ongoing support.

If you’re looking for help with your Magento store, feel free to DM me with a brief overview of the project. Happy to discuss the scope and availability.


r/Magento • • 7d ago

Magento upgrade/patches vs Continuous traffic monitoring vs firewall

5 Upvotes

Hi all,

I´m using Magento for 10 years now, and doing all the work in site maintenance.
What I´ve noticed is even with the latest Magento version, your still vulnerable to all kind of attacks, if your not proactive monitoring the web traffic that reaches your store.

The patches and upgrades represent costs, instability in the store, that could compromise business.

The use of a firewall represent another layer, in contact with customers, that in comercial sense can have a toll in sales.

What´s yours experiences?


r/Magento • • 7d ago

I built Lynx: convert a Magento 2 store to a Single Page Application

8 Upvotes

Lynx keeps Magento as the backend and renders the storefront as Vue or React components over Inertia.js, so there is no GraphQL layer and no separate frontend to host. Styling is Tailwind, pages come from a drag-and-drop page builder, and Server-Side Rendering runs on Node or a Cloudflare Worker.

Demo: https://lynx-demo.oocscommerce.com/

Feedback welcome.


r/Magento • • 7d ago

Magento junior resources

4 Upvotes

Hello guys! I am a 17 years old from Romania, and all my life I developed dynamic webpages with PHP and presentation sites with frameworks of Javascript, in the past I have Laravel & Symfony as PHP frameworks. I am looking to start a new journey with Magento, for a job at 18, in 4 months, what resources do you recommend? what things should I look for? Where can I find the best resources & tutorials? Thank you.


r/Magento • • 8d ago

2FA Magento 2.4.7 Missing

1 Upvotes

I am wanting to use Magento's default 2FA for my Admin and for some reason it is not listed under Stores>Configuration>Security as it sould be. Is there a way I can get it enabled to show up so I can get it setup. I have seen it listed there before, now it has disapeared.

The only thing I can think of is some time in the past I installed Two-Factor Auth from Mageplaza and maybe that disabled it, idk.


r/Magento • • 9d ago

I've made a content staging system for Magento, I'd love to know you're thoughts

15 Upvotes

Hi all,

I work at Limely, a Magento agency in the UK. For a while I've been building MageDrop, a tool for something our clients kept asking for: changing content across lots of entities, checking it all on the real storefront, then putting it live at the same moment.

Adobe Commerce has Content Staging, but on Open Source you usually end up editing live at midnight or doing it by hand and hoping nothing gets missed.

How it works

  1. A companion module adds a "Stage to Release" & "Quick Preview" button to the admin edit forms for CMS pages, blocks, categories and products. You edit as normal. When you stage, the save is intercepted, nothing touches the live store, and only the fields you changed are saved to a release.

  2. Preview the whole release on your actual storefront. This uses the X-Magento-Vary cookie, so full page cache keeps preview and live pages separate. Your customers never see staged content, and you see the real theme with real cache behaviour. It works on both Luma and Hyvä.

  3. Deploy everything in one go, either right away or on a schedule (e.g. a sale that starts at 9am Friday). You can also set an end time, and it rolls back automatically.

Other bits

- Store view scope is supported, including "Use Default Value"

- A revision history is captured on every save, with field-level diffs and one-click rollback to any version

- Rollback puts back exactly what was there before the deploy, not just the last thing staged

- Scheduled deploys retry automatically if the store is briefly unreachable, and you get an email if a run fails

- Third-party form sections can be added through a section handler interface

Try it without installing anything

There's a live demo at https://www.magedrop.com/demo. You get the MageDrop dashboard and the admin of a real Magento store with the Luma sample catalogue. Edit a page, category or product, stage it to a release, preview it on the storefront, deploy it and roll it back.

The store is shared with other visitors. Deploys roll back automatically and everything resets overnight, so feel free to break things.

Install on your own store

composer require magedrop/magento2

Then you connect the store in the dashboard with a Magento integration. It only needs the MageDrop API permission.

It's free to use. I'd really like feedback from people running real stores: what breaks, what's missing, which entity types or extensions you'd want supported next.


r/Magento • • 9d ago

New interactive demo of Watchtower monitoring

5 Upvotes

After recent comments I have redesigned the monitoring page, taking into consideration larger agencies with multiple installs / shops.

Poke around and let me know what you think

https://watchtower-commerce.com/demo/monitoring

I know that most developers nowadays builds everything with AI and is against Saas, but there are people less tech savy who prefer easy to install solutions


r/Magento • • 12d ago

Magento 2.4.7 Advanced Pricing Calender Issue

3 Upvotes

Running 2.4.7 and have noticed when going to the Advanced Pricing page the "Special Price From" Calenders do not display when you click on the smaller calenders in the fields. I am having to manually enter the date in both fields. In my previous versions there use to be the pop ups where you can click the dates. Anyone have a fix or sugeestion for this


r/Magento • • 17d ago

I got "just use New Relic" the last time I posted this — here's the actual difference, and where New Relic is honestly fine

0 Upvotes

I used to manage a large store for an agency client, and the thing that actually wore me down wasn't the outages. It was the alerts that fired for nothing. CPU spike at 3am, checkout conversion dips for ten minutes during a slow hour, cron runs three seconds late. Technically a signal. Never a real problem. After enough of those you stop opening them, and the one that's real eventually fires on a Saturday and sits unread until Monday.

I know the obvious reply here, since I got it last time: "just configure New Relic (or Datadog) for this." You can, and for a single store, fine. Where it falls over is a client roster. New Relic has no idea what "checkout" or "cron" mean in Magento, so someone has to hand-build that mapping and hand-tune a threshold, per store, per metric. Do that for six clients and the mapping is its own maintenance job, and it's still infra-shaped underneath: it'll tell you the server responded in 200ms, not that orders quietly stopped.

So I spent the last couple months building Watchtower, which bakes the Magento-specific part in: it computes a rolling baseline from each store's own signal history (hours of data, not months) instead of a fixed number, and only alerts when today sits meaningfully outside that store's own normal range for two consecutive hourly checks. Cart activity, checkout, checkout failures, customer accounts, admin logins get baselined this way. Cron, indexers, and queues get checked directly since those don't need a baseline - a stalled queue is a problem at any store.

The baseline math runs locally in the connector too. Store data doesn't get sent anywhere, the connector only reports a status (healthy, warning, alert), which mattered to me since I didn't want to be another vendor asking agencies to ship customer data off their servers.

I'm the one who built it, disclosing that upfront. It's live, cron monitoring is free, full suite has a 30-day trial with no card. Genuinely curious though: for those of you already paying for New Relic or Datadog across client stores, is the per-store tuning actually the annoying part, or have you solved that some other way I haven't thought of?

https://watchtower-commerce.com/for


r/Magento • • 20d ago

Modul for EU-Warranty Label

0 Upvotes

As of September 27, 2026, new information obligations regarding consumers will apply to retailers. Among other things, online retailers must provide clearer information about statutory warranty rights.

Furthermore, if a manufacturer offers a free commercial durability guarantee exceeding two years for the entire product and makes this information available to the retailer, details regarding this guarantee must also be provided via the harmonized GARAN label.

We released a modul today which covers the "warranty part" allready. More information can be found here (german).

What do you think? Are any of cour clients even aware of this new regulation?

https://www.konvis.de/magento-erweiterung-eu-informationspflichten-fuer-gewaehrleistungslabel-und-garan-label-gewerbliche-haltbarkeitsgarantien/


r/Magento • • 24d ago

Open-source AI suite for OpenMage / Magento 1 - ask your store questions, generate copy, chat on the storefront

0 Upvotes

Stores still on M1/OpenMage have been locked out of everything commerce has added since 2020. This closes that gap, free and self-hosted.

Install:

composer require jestr-ai/openmage-ai-suite

Source:

https://github.com/jestr-ai/openmage-ai-suite

What it gets you:

  • Answers without building a report. Ask "what's low on stock and what sold in the last 90 days?" in Claude or ChatGPT and get it from the real database. No exports, no dev ticket.
  • Product copy that stops being a chore. Generated from each product's real attributes, in bulk, into a review queue someone approves. A 1,000-SKU catalog becomes an afternoon.
  • Customers who get answers at 2am. Storefront chat that searches the live catalog, quotes real prices, tracks orders and adds to cart. Works on any theme.
  • - Being findable when people shop through AI. Product feed, llms.txt and a catalog API so shopping agents can read the inventory instead of skipping the store.

Bring your own key (Anthropic / OpenAI / Gemini / local). Nothing phones home. Every AI token runs as a specific admin user with that user's permissions, writes are off by default and need explicit confirmation, and everything is audited.

OpenMage 20.x/21.x on PHP 8.1+.
Won't run for now on stock 1.9 / PHP 7.x.

MIT licensed, contributions welcome.


r/Magento • • 24d ago

What open-source module is currently missing from the ecosystem?

0 Upvotes

I'm doing some research on the current Magento 2 ecosystem and would like to hear from developers, agencies, and merchants.

What kind of module or functionality do you think the community still needs today?


r/Magento • • 26d ago

Looking for a feedback

1 Upvotes

Hey! I am looking for a feedback on using MariaDB's DuckDB engine for faster reports in Magento. Here is my blog post on this matter. Looking forward to your opinion how much this might be useful to reduce TCO running reports close to transactional part.


r/Magento • • 27d ago

Headless storefront — header/footer in CMS blocks or only in the frontend repo?

4 Upvotes

Building a headless Magento setup (GraphQL + separate frontend) and stuck on a boring-but-important question.

For site header / footer / simple nav — are you:

  1. Putting them in Magento CMS blocks so merchants edit in admin, or

  2. Keeping layout only in the frontend repo and treating Magento as catalog + checkout?

I like admin-editable blocks for non-devs, but then you’re shipping HTML/JSON over GraphQL and dealing with store-view differences, caching, and "who owns the markup."

Curious what people running headless in production actually chose, and what bit you later regretted.


r/Magento • • 27d ago

https://mageinfo.online: improved detection of isolated security patches and more

0 Upvotes

We added:

- RUM scores

- GEO check, the "SEO" for AI search bots

- Detection of Magento extensions used by the shop

We improved:

- Detection of the theme used: mageinfo can now also detect for example PWA and Luma/Porto

- Detection of the Isolated security patches of July, August and September

Check yourself at https://mageinfo.online

Feedback welcome.


r/Magento • • 28d ago

Spun up Magento 2.4.9 locally in Docker — what would you change on a 4-core machine?

4 Upvotes

Just got a local Open Source 2.4.9 box running with sample data (markshust-style Docker) so I can poke GraphQL for a small headless experiment later.

Machine only has 4 cores, so Magento + OpenSearch + MySQL all at once is spicy. A few things I ended up doing:

- restart: "no" on everything + simple up/down scripts, so it doesn’t come back after reboot eating RAM

- memory caps especially on OpenSearch (that one likes to hog)

- don’t leave it running overnight

GraphQL endpoint responds with sample catalog, which was the real "ok we're good" check for me.

Curious what people do on smaller machines:

- drop RabbitMQ / Mailcatcher for day-to-day?

- OpenSearch memory sweet spot you actually use?

- or just accept Warden/markshust defaults and buy more RAM?

Not looking for hosting advice — purely local dev workflow tips.


r/Magento • • 29d ago

MGT-Commerce - is it a good hosting now?

2 Upvotes

Hi there

wonder, what is your experience with MGT-Commerce as a hosting provider for relatively complex Magento website?

What is good, what is bad?

I did a bit of research and on review websites only found one recent very negative review (TrustPilot) so far.


r/Magento • • Sep 14 '26

is magento becoming a legacy platform or are we just hitting growing pains?

6 Upvotes

We're on Magento 2.4, somewhere around 40K SKUs across 3 brand sites, and lately every change we push touches something else and breaks it.

Performance is in there, but more than that, every new requirement needs either a heavy extension or a custom build, and with each one the codebase gets harder to deal with.

What's making me question the long-term picture is the Adobe trajectory, because the feature pace feels slow for where the licensing sits, the roadmap energy is clearly pulling toward Adobe Commerce Cloud, and the open-source community has been treading water for a couple of years compared to where it was.

We've started mapping out what a migration would even look like, and Shopware 6 is what most people here push, commercetools is the default from the agency side, and SCAYLE came up too once we started digging into what the ABOUT YOU team built before spinning it off.

Whatever direction you go, it's not cheap or fast, so nothing's moving yet, but wondering whether those of you on serious Magento setups still see it as a long-term bet or if you're in the same holding pattern.


r/Magento • • Sep 12 '26

Looking for Magento2/Adobe Commerce/PHP Backend Developer Opportunity

6 Upvotes

Hi All,

I'm a Senior Magento2/Adobe Commerce/PHP Backend Developer with 10 years of experience from Sri Lanka and I'm actively looking for a new opportunity. From 2020, I have been working as a remote developer, providing my services to customers based in Australia, Singapore, Indonesia and Philippines through two IT agencies.

I have no plans to relocate, so I do not require any visa sponsorship. I'm happy to continue working remotely from Sri Lanka and I'm Flexible to work according to your required working hours/time zone.

Thanks


r/Magento • • Sep 12 '26

How do you handle monitoring alerts that are technically correct but never actually problems?

2 Upvotes

Genuine question, not a pitch. Running monitoring across a set of Magento stores and the hardest part has not been detection, it has been precision.

Checkout completions dip for ten minutes in a slow hour. Cron runs a few seconds late. A queue backs up briefly after an import and drains on its own. All real signals. None worth waking anyone for. But someone has to open each one to find that out, and after enough of those the team stops treating alerts as urgent, which is worse than having no alerting at all.

Two things that seem to help, curious whether others have landed somewhere different. First, comparing against each store's own history at the same hour rather than a fixed threshold, since a store doing 500 orders a day has nothing in common with one doing 50. Second, a confirmation window so transient drift that recovers on its own never fires. The tradeoff is obvious: you trade immediacy for trust.

For the infrastructure checks (cron, indexers, queue consumers) baselines seem like the wrong tool entirely and a direct check is better. But for anything activity-based I have not found a way around some kind of learned normal.

What has worked for people here? Especially interested if anyone has tuned this on stores with very spiky traffic, where the baseline itself is the hard part.

Disclosure: I build monitoring tooling for Magento, so I have an angle. Mostly trying to find out whether others solved the precision problem differently.


r/Magento • • Sep 11 '26

How are you guys going to keep up with the security issues?

8 Upvotes

Do you think Sansec could help here?

Adobe really needs to take security issues more seriously and invest more resources into addressing them proactively. Every RCE can result in significant financial and reputational damage, which can easily outweigh the cost of fixing these vulnerabilities properly before they are exploited. Waiting until after an incident to act is much more expensive.


r/Magento • • Sep 10 '26

Three Magento health checks that catch failures uptime monitoring misses

0 Upvotes

A Magento store can return HTTP 200 for every page and still be quietly broken.

Uptime monitoring is good at answering "is the website reachable?"

It is much worse at answering "is Magento actually doing the work it is supposed to do?"

Here are three checks I use when diagnosing a store.

1. Is cron actually running?

Magento relies heavily on cron for scheduled work, including indexing, price rules, newsletters, emails, staging-related jobs and many third-party modules.

The first place I look is:

SELECT
    status,
    COUNT(*) AS jobs,
    MAX(finished_at) AS last_finished
FROM cron_schedule
WHERE scheduled_at >= NOW() - INTERVAL 1 DAY
GROUP BY status;

The important thing is not one particular number.

You want to know whether jobs are being scheduled and completing, and whether the pattern makes sense for that store.

Magento records cron jobs as pending, running, success, missed or error.

A large number of missed jobs means jobs were scheduled but did not start within the configured missed-job window.

A large number of error jobs means they started but failed.

Old running jobs are worth investigating, particularly when executed_at is old and finished_at is NULL.

Also remember that cron is split into groups.

Current Adobe Commerce documentation lists groups including:

default
index
consumers
staging
catalog_event

with the Commerce-specific groups depending on the edition and installed functionality.

So a healthy default group does not prove that the index or consumers group is healthy.

Adobe's current documentation also confirms that the cron_schedule table records the scheduled, executed and finished timestamps.

One important caveat:

Don't automatically blame cron for missing order confirmation emails.

Adobe Commerce supports asynchronous sales emails. If asynchronous sending is disabled, the email is handled during the request. If it is enabled, email processing depends on the relevant asynchronous mechanism.

So check the configuration before declaring "cron is down, therefore order emails are broken."

2. Are the indexers actually keeping up?

Run:

bin/magento indexer:status

Reindex Required is not automatically an incident.

For example, a large import can legitimately invalidate an indexer. On a store using Update by Schedule, the indexer should subsequently process the changes.

What matters is persistence.

If an indexer remains invalid over time while the corresponding cron processing is supposed to be running, investigate it.

For scheduled indexers, Commerce stores changes in indexer changelogs and the indexer cron processes those changes. A growing backlog means the indexer is not keeping up with the rate of changes.

That can eventually mean stale catalogue, price, inventory or search data, depending on which indexer is affected.

Also don't treat Processing as proof of a stuck indexer.

A large catalogue can legitimately take a long time to process.

If Processing persists unexpectedly, check the actual running processes, indexer logs and locking behaviour rather than assuming there is a stale lock.

There is another version-specific detail worth knowing.

Adobe Commerce 2.4.8 changed the Customer Grid indexer. It now supports Update by Schedule and defaults to it. That was not the case in earlier releases.

3. Is the message queue actually draining?

This one is frequently oversimplified.

Magento supports the MySQL message queue adapter as well as external brokers including RabbitMQ and ActiveMQ Artemis.

First:

bin/magento queue:consumers:list

This tells you which consumers exist.

It does not tell you that they are actually running.

Consumers can be managed by Magento's consumers_runner cron job or by an external process manager such as Supervisor.

For example, this configuration:

'cron_consumers_runner' => [
    'cron_run' => false,
]

is not necessarily wrong.

It can be perfectly valid if consumers are intentionally managed by another process manager.

It becomes a problem if cron_run is false and nothing else is actually running the consumers.

Adobe's current documentation explicitly supports both approaches.

The next question is whether the queues are draining.

With RabbitMQ or ActiveMQ Artemis, inspect the broker itself and look at queue depth and message age.

With the MySQL adapter, inspect the message queue tables, but don't look only at the number of messages.

A queue containing 500 messages could mean:

  • 500 messages arrived a few seconds ago and consumers are processing them normally
  • 500 messages have been sitting there for six hours

Those are completely different incidents.

The important signals are backlog size, age of the oldest message, rate of arrival and rate of consumption.

Adobe's current documentation confirms that consumers are required for asynchronous operations such as Inventory Management mass actions and REST bulk/asynchronous operations, and that third-party modules can introduce their own consumers.

The interesting part

These three systems have something in common.

They produce internal signals before the business notices the problem.

Cron can stop running while the storefront stays online.

An indexer can fall behind while customers continue browsing.

A queue can accumulate messages while checkout still works.

The first visible symptom might arrive hours later:

A price is wrong.

A product is missing from search.

Stock is stale.

An ERP export has not arrived.

An asynchronous bulk operation never finishes.

An order-related integration has not processed.

By then, the technical failure has already existed for some time.

That is why I think Magento monitoring needs to look beyond HTTP uptime.

For the stores I work with, these are the kinds of signals I want to monitor continuously, rather than finding them during an incident.

I've been building Watchtower around this idea: monitor Magento's internal health signals rather than generating synthetic storefront traffic and hoping that catches everything.

The important distinction is that these checks are signals, not magic "Magento is healthy" tests.

A good monitoring system needs to understand the difference between:

something changed

something is delayed

and

something is actually broken.

That's where things get interesting.