Magento Review 2026

What is Magento?

Adobe shipped release 2.4.9 on 12 May 2026 with PHP 8.5 support and 580 core fixes, and the same code still feeds two very different products. That split is the whole magento open source vs adobe commerce question: one edition is a free download under the OSL-3.0 licence, the other is a quote-only Adobe contract with cloud hosting, B2B tools and a support desk. Neither one is cheap to run well. This review uses Adobe's Experience League docs, Adobe's business pages and the magento/magento2 GitHub repository to show where the money really goes.

Magento open source vs Adobe Commerce: what the licence fee actually buys

The free edition gives you the full storefront engine: catalogue, layered navigation, cart and checkout, promotions, customer accounts, REST and GraphQL APIs, Page Builder, and multi-store support where one admin runs several websites, store views and currencies. An Indian brand selling in rupees on one domain and in dirhams on a Gulf domain can do that without paying Adobe anything.

The paid edition adds things larger teams ask for. Adobe's B2B guide lists company accounts with role-based buyers, shared catalogues with company-specific prices, negotiable quotes, purchase order approvals, quick order by SKU and requisition lists. Adobe's product pages add managed hosting and AI-driven search and recommendations, and the pricing page lists add-ons such as Payment Services, Commerce Intelligence and an IBM Sterling order management integration.

Adobe does not publish a single rupee or dollar figure for any paid tier. Every plan sits behind a "Get pricing" form, so treat any number you see on third-party blogs as an estimate, not a list price.

Release 2.4.9 and the three-year support clock

Adobe's lifecycle table gives each 2.4.x line three years of regular support. Version 2.4.9 is covered until 31 May 2029, 2.4.8 until 31 May 2028, and 2.4.7 until 31 May 2027. Release 2.4.6 left regular support on 11 August 2026 and now gets only extended patches until 31 August 2027. An alpha of 2.4.10 appeared on 13 October 2026, with no end date announced yet.

So is the platform still secure? Yes, provided you stay on a supported line and apply each security patch quickly. Adobe also ships isolated security patches between the scheduled ones, so subscribe to its security bulletins. Lines 2.4.4 and 2.4.5 are past both regular and extended support; Adobe's table gives them only a security-only window that closes on 31 May 2027, which makes an upgrade plan urgent for any shop still on them.

Magento hosting requirements for a 2.4.9 store

This is not a shared-hosting application. Adobe's system requirements page lists the following stack for 2.4.9 on your own servers:

• PHP 8.5 and Composer 2.10
• MySQL 8.4 or MariaDB 12.3
• OpenSearch 3 for catalogue search (the 2.4.8 table still allows Elasticsearch 8 on-premises, but 2.4.9 lists only OpenSearch)
• Valkey 9 for cache and sessions, the open fork that replaced Redis in Adobe's tables
• Varnish 8 as the full-page cache, nginx 1.30 as the web server
• RabbitMQ 4.3 or ActiveMQ Artemis 2 for message queues

In practice that means a VPS or cloud instance, not shared hosting, with SSH and cron access and enough memory to run PHP, the database and OpenSearch side by side. Hostinger India's 2026 cost guide puts a VPS at roughly ₹18,000 to ₹60,000 a year and cloud hosting at ₹40,000 to ₹1,20,000 or more. Adobe Commerce customers skip this layer because Adobe hosts the PaaS and SaaS tiers.

Installing Magento 2 with Composer and repo.magento.com keys

The official route is a composer install from Adobe's package repository. Create a free Adobe account, generate a public and private access key pair, then run composer create-project --repository-url=https://repo.magento.com/ magento/project-community-edition followed by your folder name. Composer asks for the keys; the public key is the username and the private key is the password. Paid licence holders swap in magento/project-enterprise-edition.

Next comes bin/magento setup:install with your base URL, database credentials, admin user, language, currency and timezone (Adobe's example uses en_US and USD; Indian stores set their own values) and OpenSearch host. Adobe's guide advises leaving out the admin path flag so the installer picks a random admin URL, which cuts down on brute-force login attempts. Budget a full day for a first install on a clean Ubuntu server, longer if OpenSearch is new to you.

Fixing slow Magento 2 pages with Varnish, Valkey and the Hyva theme

Most complaints about speed come from three mistakes: running in default or developer mode in production, skipping full-page caching, and piling up extensions that each add JavaScript. The fixes are well documented. Switch to production mode, deploy static content, configure Varnish cache instead of the built-in file cache, move sessions and cache to Valkey, and set indexers to "update by schedule" with cron running every minute.

The front end is the other big lever. The stock Luma theme ships heavy RequireJS and Knockout bundles. The Hyva theme, rebuilt on Alpine.js and Tailwind, became free and open source under OSL-3.0 and AFL-3.0 from 10 November 2025, as Hyva's own announcement explains. The Hyva UI component library is now a separate €250 licence per Magento installation, and Hyva Checkout stays a commercial product. Adobe's own headless kit, PWA Studio, still receives small 14.5.x releases on GitHub, while Adobe's storefront material now puts its Edge Delivery Services storefront front and centre.

Magento 2 extensions marketplace and the yearly licence bill

The official Magento Marketplace now lives at commercemarketplace.adobe.com and lists thousands of free and paid extensions and themes, each tagged with the versions it supports. For Indian stores, the usual add-ons are a Razorpay, PayU or Cashfree gateway module, GST invoice and HSN code handling, a Shiprocket or Delhivery shipping connector, WhatsApp order alerts and an SEO toolkit.

Hostinger's guide estimates ₹5,000 to ₹40,000 per extension, with most stores running five to fifteen. Many vendors sell a first year of updates and then charge again for compatibility with the next release, so an extension stack can quietly add ₹50,000 or more a year. Check the vendor's last update date before buying; an add-on that has not been tested on 2.4.8 or later will block your next upgrade.

Magento development cost in India: realistic rupee budgets

The software is free, the people are not. Hostinger's February 2026 guide quotes these Indian ranges, excluding GST:

• Developer rate: ₹800 to ₹2,500 an hour, higher at Tier-1 city agencies
• Basic store setup: ₹1,50,000 to ₹4,00,000
• Mid-level custom store: ₹5,00,000 to ₹15,00,000
• Large or multi-vendor build: ₹15,00,000 to ₹20,00,000 and up
• Ongoing dedicated team: ₹8,00,000 to ₹25,00,000 or more a year

Salaried developers are cheaper per hour. Indeed India shows an average of about ₹30,208 a month, though that figure rests on only eight salary reports, so read it as a rough floor rather than a market rate. Senior engineers who can plan a 2.4.x upgrade or debug indexers command far more. Add hosting, extensions and a yearly upgrade project, and our own rough estimate (not a published figure) for a modest Open Source store is ₹3 lakh to ₹6 lakh in its first year.

Magento vs Shopify vs WooCommerce for an Indian catalogue

Which is better, Magento or Shopify? For a D2C brand with under a few thousand SKUs, Shopify gets you live in days and removes server work, so it usually wins on total cost. Magento earns its keep with 50,000-plus SKUs, complex pricing rules, many regional storefronts, or B2B ordering where Shopify would need Plus and several paid apps. WooCommerce sits between them: cheaper to build, friendlier for content-led brands, but it strains sooner under very large catalogues. BigCommerce and Salesforce Commerce Cloud are the other names agencies short-list.

Mage-OS, the community fork that tracks Adobe's code

Mage-OS is a community-run distribution built on the Open Source codebase. Its site describes the distribution as based on Magento 2.4.9, and the latest release it lists, 3.6.0 on 14 October 2026, ports Adobe's October isolated security patch. It promises high compatibility with existing extensions, and its install guide uses repo.mage-os.org, so no Adobe access keys are needed for the core. For agencies worried about Adobe's long-term interest in the free edition, it is a credible fallback, though it has no commercial support contract behind it.

Stores that should choose Magento, and stores that should not

It suits mid-size and large retailers, distributors with trade pricing, multi-brand groups that want one admin for several sites, and agencies with in-house PHP talent. A first-time founder with 40 products, no developer and a ₹50,000 budget should start on Shopify or WooCommerce and revisit Magento only when catalogue size or B2B rules force the move.

A few limits apply to every edition. The admin feels dated next to Shopify's. Moving between 2.4.x releases is a real project that can run for weeks once extension testing is included. Adobe's privacy centre governs data on its cloud tiers, while on the free edition you control customer data and are responsible for securing it under India's DPDP rules. Commercial use is allowed on Open Source with no revenue share.

A first-week plan before you commit budget

• Install 2.4.9 on a ₹1,500 a month test VPS and load 500 sample products to see admin speed for yourself.
• List every extension you would need and check each for 2.4.9 compatibility on the marketplace.
• Ask two Indian agencies for fixed quotes that include an upgrade to 2.4.10.
• If you need B2B quotes or company accounts, request an Adobe Commerce quote at the same time so you compare real numbers.