# Apache websites: wikis, blogs and custom applications

JSPWiki, Roller and Allura solve different jobs. Compare their maintenance costs with hosted services, and identify the frameworks your developer owns.

Author: J.A. Watte
Published: October 30, 2026
Source: https://jwatte.com/blog/apache-websites-cms-web-apps-small-business/

---

October 30, 2026 update: added setup time and costs when an AI agent does the typing.

**JSPWiki is the owner-sized option for shared procedures, subject to its current security warning. Roller and Allura need an IT operator; the other projects mostly sit inside websites and apps your developer builds.**

If you need opening hours, service pages and a contact form, start with a hosted website builder or a maintained site you already own. A Java framework is not a bargain CMS just because you can download it without a license bill. You would still pay someone to build the editing screen and keep it working.

This group becomes useful when the work is more specific: staff procedures, several authors publishing blogs, or source code and tickets you need to control. We read the official pages on October 29, 2026 and did not install the projects. The comparisons below are deliberately narrow so a subscription's useful features do not disappear from the decision.

## Every project in this group

| Project | What it does | Who runs it | Latest recorded release and date |
|---|---|---|---|
| [Apache Allura](https://allura.apache.org) <!-- project:allura --> | Hosts software projects with code repositories, issue tracking and collaboration tools. | Your IT department or provider | [1.22.0; 2026-10-12](https://allura.apache.org/posts/2026-allura-1.22.0.html) |
| [Apache Causeway](https://causeway.apache.org) <!-- project:causeway --> | Builds business application interfaces from Java domain models. | Your developer | [3.6.0; 2026-04-09](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache Cordova](https://cordova.apache.org) <!-- project:cordova --> | Packages web based applications for mobile devices. | Your developer | [13.0.0; 2025-11-25](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache Flex](https://flex.apache.org) <!-- project:flex --> | Provides tools for building application interfaces in ActionScript and MXML. | Your developer | [4.15.0; 2016-01-11](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache FreeMarker](https://freemarker.apache.org) <!-- project:freemarker --> | Generates web pages, email and other text from application data and templates. | Your developer | [2.3.35; 2026-08-27](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache Grails](https://grails.apache.org) <!-- project:grails --> | Builds web applications using Groovy and Java technologies. | Your developer | [8.0.0; 2026-10-04](https://github.com/apache/grails-core/releases/tag/v8.0.0) |
| [Apache JSPWiki](https://jspwiki.apache.org/) <!-- project:jspwiki --> | Hosts a shared wiki for staff notes, procedures and internal knowledge. | You | [3.0.0; 2026-08-22](http://jspwiki.apache.org/general/downloads.html) |
| [Apache mod_perl](https://perl.apache.org/) <!-- project:perl-mod_perl --> | Runs Perl application code within Apache HTTP Server. | Your developer | [2.0.13; 2023-10-21](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache MyFaces](https://myfaces.apache.org) <!-- project:myfaces --> | Provides Java components for building web application interfaces. | Your developer | [4.1.4; 2026-09-04](https://downloads.apache.org/myfaces/source/) (file date) |
| [Apache Pony Mail](https://ponymail.apache.org) <!-- project:ponymail-pony_mail --> | Hosts searchable mailing list archives and browser based list discussions. | Your IT department or provider | [0.11; 2019-04-20](https://ponymail.apache.org/downloads.html) |
| [Apache rivet](https://tcl.apache.org/rivet) <!-- project:tcl-rivet --> | Builds dynamic web pages using Tcl inside Apache HTTP Server. | Your developer | [3.3.1; 2026-09-05](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache Roller](https://roller.apache.org/) <!-- project:roller --> | Hosts blogs with multiple authors and publishing controls. | Your IT department or provider | [6.1.6; 2026-09-24](https://downloads.apache.org/roller/roller-6.1/v6.1.6/) (file date) |
| [Apache Royale](https://royale.apache.org) <!-- project:royale --> | Builds web interfaces from ActionScript and MXML application code. | Your developer | [0.9.12; 2024-12-11](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache Sling](https://sling.apache.org/) <!-- project:sling --> | Provides a framework for building websites around a content repository. | Your developer | [14; 2026-03-09](https://downloads.apache.org/sling/) (file date) |
| [Apache Struts](https://struts.apache.org) <!-- project:struts --> | Provides a framework for developers building Java web applications. | Your developer | [7.4.0; 2026-09-17](https://downloads.apache.org/struts/7.4.0/) (file date) |
| <a href="https://tapestry.apache.org">"Apache Tapestry"</a> <!-- project:"tapestry" --> | Builds Java web applications from reusable interface components. | Your developer | [5.9.0; 2025-02-11](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache Tobago](https://myfaces.apache.org/#/tobago) <!-- project:myfaces-tobago --> | Adds ready made interface components to Java web applications. | Your developer | [6.12.2; 2026-09-27](https://downloads.apache.org/myfaces/source/) (file date) |
| [Apache Turbine](https://turbine.apache.org) <!-- project:turbine --> | Provides reusable services for developers building Java web applications. | Your developer | [7.0; 2025-04-01](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache Velocity](https://velocity.apache.org) <!-- project:velocity --> | Generates website pages and other text from templates. | Your developer | [2.4.1; 2024-10-14](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache Velocity Tools](https://velocity.apache.org/tools/) <!-- project:velocity-tools --> | Supplies helper tools for applications that use Velocity templates. | Your developer | [3.0; 2021-02-27](https://projects.apache.org/json/foundation/projects.json) (registry) |
| [Apache Websh](https://tcl.apache.org/websh) <!-- project:tcl-websh --> | Provides Tcl tools for developers building web applications. | Your developer | [3.6.0b5; 2009-09-14](https://projects.apache.org/json/foundation/projects.json) (registry) (preview) |
| [Apache Wicket](https://wicket.apache.org) <!-- project:wicket --> | Helps developers build interactive Java web applications. | Your developer | [10.11.0; 2026-08-05](https://projects.apache.org/json/foundation/projects.json) (registry) |

Release dates marked “registry” are the latest recorded directory data and may lag current component releases. “File date” is a distribution modification date, not an announcement. JSPWiki, Roller and Allura were independently rechecked. This group has no currently Incubating catalog entries; older release names may retain historical labels. Inclusion is not a recommendation to deploy an old framework.

## JSPWiki: put the procedure where staff can find it

JSPWiki gives a small team editable pages with links, page history and access controls. Its default file storage means a small wiki need not bring along a separate database. That makes the job fairly contained for a capable owner with a server helper. Someone still has to manage Java, the web container, permissions and backups.

The [download page](https://jspwiki.apache.org/general/downloads.html) lists 3.0.0, released August 22, 2026. There is a material caution: its [release notes](https://jspwiki-wiki.apache.org/Wiki.jsp?page=NewIn3.0.0) say, “multiple security advisories have been received regarding 3.0.0.” The page says updates are coming. Do not treat the newest download as proof that every issue is resolved. Have your operator review advisories before exposing a new wiki or putting sensitive records in it.

For example, a nine person HVAC contractor keeps service procedures in text messages and a folder only the owner understands. The owner and an outside helper make ten author accounts and create pages for recurring equipment checks. A technician can find the current procedure before calling the office. The illustration uses ten paid members in the hosted comparison and the low labor case below; it promises no measured time saving.

A coffee business with two locations and 14 staff has a different problem: opening and cleaning instructions drift between shifts. Ten supervisors and experienced staff edit the shared instructions, while the other four staff read exported copies. Giving those readers Notion workspace membership would also incur member charges. Use the same ten paid editors in the comparison, with the high labor case for more frequent access changes and maintenance. The daily benefit is one maintained procedure with an accountable editor, whichever product hosts it.

### Start with release-specific requirements

The [3.0.0 README](https://raw.githubusercontent.com/apache/jspwiki/3.0.0/README.md) requires JDK 17 or later and Servlet API 6.0, recommending Tomcat 10.1 or later. It assumes previous server administration experience. The older [Getting Started page](https://jspwiki-wiki.apache.org/Wiki.jsp?page=Getting%20Started) describes older requirements; do not combine that stack with the current package without checking compatibility.

The tagged README describes deploying the WAR into the servlet container and completing the browser installer. It publishes no numeric CPU or RAM minimum. Our Small server is a test allowance for a modest wiki. Load real-sized attachments, confirm free disk space and test simultaneous edits before calling it sufficient. Keep the wiki private while configuring it, remove the installation page afterward, and follow the [security guidance](https://jspwiki-wiki.apache.org/Wiki.jsp?page=Security).

Back up the page and attachment stores, users and groups, and custom properties. Test a restore with a separate copy. Upgrading Java alone is not a complete maintenance plan; the container, application and plugins also matter. Skip JSPWiki when nobody wants that responsibility, or while your operator cannot resolve the current release warning.

### Cost against a shared hosted workspace

All prices are US dollars before tax, read October 29, 2026. We use the shared employee compensation proxy of $68.09/hour: [BLS median wage](https://data.bls.gov/oesprofile/?areas=INDUSTRY,STATE,MSA&major_group=150000&measure=01&occupation=151244&year=2025) $47.66 divided by a [70.0% wage share](https://data.bls.gov/timeseries/CMU2020000000000P). An outside IT provider bills more, so ask for a quote. [DigitalOcean Small](https://www.digitalocean.com/pricing/droplets) is $24/month for 2 vCPU, 4 GiB RAM and 80 GiB disk; Medium is $48 for 4 vCPU, 8 GiB and 160 GiB. These are our pilot allocations, not project-published minimums.

Our retained backup volume is fixed at 100 GB in both labor cases. [B2 pricing](https://www.backblaze.com/cloud-storage/pricing) gives (100 minus 10) x $0.00695 = $0.6255/month. We assume no chargeable excess transfer or Class D calls. Setup = hours x $68.09; monthly = hosting + backup + administration hours x $68.09; 36 months = setup + 36 x monthly. Savings = alternative total minus self hosted total. Break even = ceiling(setup divided by monthly savings), or never if monthly costs are higher.

Setup, access, backups, a restore rehearsal and updates are included in the labor assumptions. Custom development, content writing, migration, training, domain renewal, taxes and major incidents are excluded on both sides. Alternative incremental setup is zero at both ends for an existing workspace or a ready-to-use subscription; adoption work still needs a separate allowance.

[Notion Plus](https://www.notion.com/pricing) is $10/member/month billed yearly. Ten members cost $100/month equivalent, paid as $1,200/year; over 36 months that is $3,600 at an unchanged price. Notion does more than a wiki, so this only compares the procedure-writing job. [Confluence Free](https://www.atlassian.com/software/confluence/pricing) supports up to ten users with 2 GB storage and community support; check whether that fits before paying for either route.

Our JSPWiki assumptions are 4 to 12 setup hours and 1 to 3 administration hours/month on one Small server, with fixed ten hosted members and 100 GB retained backups.

| Cost | Low labor case | High labor case |
|---|---:|---:|
| Setup | $272 | $817 |
| Monthly operations | $93 | $229 |
| Self hosted, 36 months | $3,610 | $9,057 |
| Alternative monthly | $100 | $100 |
| Alternative, 36 months | $3,600 | $3,600 |
| Savings from self hosting | Negative $10 | Negative $5,457 |
| Break even month | 38 | Never |

The low labor case takes 38 months to break even against Notion, just beyond this comparison; the high case never does. A free hosted plan that fits your requirements makes the financial case for running your own wiki weaker. Control over the files may still matter, but it is a separate reason to pay.

## Setup time when Claude or ChatGPT does the typing

We keep JSPWiki's $24 server, 100 GB backups and ten Notion editors. These are our paired planning assumptions, not measured installations: AI setup uses 50%/80% of manual hours; administration uses 75%/100%. Prompting, corrections and review are included, including 1 to 3 setup review hours and 0.5 to 1.5 monthly review hours. Studies do not validate Apache deployment savings. [57]

| View | Setup hours, low / high | Monthly admin hours, low / high | 36 months, low | 36 months, high |
|---|---:|---:|---:|---:|
| Manual JSPWiki | 4 / 12 | 1 / 3 | $3,610 | $9,057 |
| Claude Pro subscription | 2 / 9.6 | 0.75 / 3 | $3,061 | $9,094 |
| ChatGPT Plus subscription | 2 / 9.6 | 0.75 / 3 | $3,061 | $9,094 |
| API: Claude Opus 5.5 | 2 / 9.6 | 0.75 / 3 | $2,876 | $9,008 |
| API: GPT-6 Astra | 2 / 9.6 | 0.75 / 3 | $2,899 | $9,179 |

Each subscription costs $20/month: charge a separate $20 setup month, then 25%, or $5/month, only if other work uses the remainder. Without sharing, add $540 over 36 months. Equal prices do not imply equal allowances; check limits before starting. [58, 59]

Our API budgets assume 200,000 to 1,000,000 setup input tokens and 20,000 to 100,000 output; monthly budgets are half. Low input splits 30% ordinary, 10% short cache writes, 60% reads; high input has no caching. Opus input/write/read/output rates per million are $4/$5/$0.20/$20; Astra rates are $10/$12.50/$1/$50. Tokens include retries and billed reasoning; subscriptions and API bills are separate. [60, 61]

Let S/A be manual setup/monthly hours, q/r the shares above, H = $24.6255 hosting plus backup, and T0/Tm setup/monthly tool costs. We calculate fully, then round totals to dollars:

```text
Manual = S x $68.09 + 36 x (H + A x $68.09)
AI = S x q x $68.09 + T0 + 36 x (H + A x r x $68.09 + Tm)
API fee = (input x input rate + writes x write rate + reads x read rate + output x output rate) / 1,000,000
```

The shared subscription low case now beats Notion's $3,600 and breaks even in month 9; either API low case breaks even in month 6. High cases still lose. A dedicated subscription costs $3,601 even at low hours, so sharing determines that narrow conclusion. The JSPWiki security warning remains.

Claude Code or Codex can draft the WAR deployment and backup commands. Desktop Commander, through its server device service or authorized SSH, can install Java, edit wiki configuration and inspect Tomcat logs; the free local version is our allowance. [58, 62, 63] Claude in Chrome can inspect Cloudflare DNS, the provider panel and wiki permissions; ChatGPT Work offers a separate cloud browser where enabled. [64, 65]

Use a new server, approve commands or restrict a sandbox, and keep secrets out of chat. Watch dashboard actions; use supported subscriptions for supervised work and API keys for custom automation. Review changes and restore pages and attachments before accepting the setup. [66, 67]

## Roller: a blog server brings a database with it

Roller is a multi-user blog server with individual and group blogs. It may fit an organization that already operates Java applications and wants to control its publishing system. For an owner who just wants to change next week's menu, it is usually too much machinery.

The [downloads page](https://roller.apache.org/downloads/downloads.html) calls 6.1.6 the best available general release. Its [distribution files](https://downloads.apache.org/roller/roller-6.1/v6.1.6/) carry September 24, 2026 modification times. Those are artifact dates. A release candidate found elsewhere should not silently replace the general release in a purchase decision.

For example, a six person bakery wants one place for seasonal menus, cake-order guidance and photos. An existing IT helper could deploy Roller and let two staff members publish posts. On a normal day they edit a page rather than ask someone to change HTML. The low labor case below is what operating that stack could cost under our assumptions; the hosted alternative can provide the publishing outcome with much less administration.

A 12 person landscaping company wants separate project journals written by crew leaders, with office review before publication. Roller could provide group blogs. The high labor case makes sense only if the business values its existing Java platform and has a helper who will maintain it. Neither illustration requires a custom framework merely to publish photos and words.

### Check the guide against the actual release

The [6.1.6 installation guide](https://raw.githubusercontent.com/apache/roller/roller-6.1.6/docs/roller-install-guide.adoc) describes a Java servlet container, relational database, JDBC driver and optional mail service. It deploys a WAR and configures the database. The guide still contains old Java requirements; the [release build file](https://raw.githubusercontent.com/apache/roller/roller-6.1.6/pom.xml) targets Java 11. Ask the operator to confirm the supported Java and servlet versions for this release rather than copying the oldest paragraph.

No numeric CPU or RAM minimum is published in that guide. Our Medium machine runs the application and database together for a small pilot, with no high availability. The [project README](https://raw.githubusercontent.com/apache/roller/master/README.md) describes its convenient development recipes as tests or demos, so those are not evidence of a ready production configuration.

Before publishing, test registration restrictions, page preview, media uploads and a full database restore. Back up media and configuration as well as the database. Make sure a second person can publish when the regular editor is away. Skip Roller if the maintenance contract costs more than the publishing control is worth.

### Cost against WordPress.com

[WordPress.com Personal](https://wordpress.com/pricing/) lists $4/month billed every 12 months and says the plan auto-renews at $4 per month (monthly billing is $9). Our 36 month subscription calculation is 36 x $4 = $144, assuming that renewal price holds. Domain renewal and custom work are excluded from both routes. The free first-year domain is not treated as permanently free.

The Roller illustration uses one Medium server and the IT oversight range: 24 to 60 setup hours and 6 to 16 administration hours/month. That is our allowance for operating the application and database, not an upstream staffing requirement.

| Cost | Low labor case | High labor case |
|---|---:|---:|
| Setup | $1,634 | $4,085 |
| Monthly operations | $457 | $1,138 |
| Self hosted, 36 months | $18,092 | $45,056 |
| Alternative monthly | $4 | $4 |
| Alternative, 36 months | $144 | $144 |
| Savings from self hosting | Negative $17,948 | Negative $44,912 |
| Break even month | Never | Never |

The hosted blog wins the cost comparison by a wide margin. If a supplier proposes Roller, ask which requirement the hosted plan cannot meet and what that requirement is worth over three years.

## Allura: keep control of code and tickets you already own

Allura is a software forge. It combines source repositories with tickets, discussions, wikis and blogs. The owner meets it through developers who maintain a custom quoting tool, store connector or internal application. It is not a general website builder.

The [1.22.0 announcement](https://allura.apache.org/posts/2026-allura-1.22.0.html), dated October 12, 2026, gives a fresh release check and describes security fixes. Use its upgrade instructions and dependency changes when planning a release; “the code is backed up” does not mean the running forge is patched.

For example, an eight person ecommerce brand uses two outside developers and one owner account to maintain an inventory connector. Allura could keep the repository and tickets under the business's administration. On a normal day the owner sees which reported stock error is linked to a reviewed change. The low comparison uses three GitHub Team seats. Ownership, exports and account recovery deserve the same attention on the hosted option.

An 18 person machine shop has four technical staff and two contractors maintaining quoting and file-conversion software. The six-person development group could use Allura to record changes when a contractor leaves. That is the high seat-count example below. The rest of the shop does not need a paid developer seat merely because it uses the resulting quoting application.

### Six containers do not mean six rented servers

The [release installation instructions](https://raw.githubusercontent.com/apache/allura/rel/1.22.0/Allura/docs/getting_started/installation.rst) describe a Compose arrangement with web, database, task processing, search and mail containers. They can share a host. Production configuration adds HTTPS, disables debugging and limits exposed ports. The [production Compose definition](https://raw.githubusercontent.com/apache/allura/rel/1.22.0/docker-compose-prod.yml) is a starting point for an operator, not permission to reuse example accounts and keys.

No numeric RAM or CPU minimum is given there. Our one Medium server is a test allocation, subject to repository size, search indexing and concurrent use. IT must maintain the application, MongoDB, Solr, repository storage, mail and certificates. Back up the repositories, database and configuration; preserve or rehearse rebuilding the search index. Test restoring a ticket and its related commit together.

Start by importing a harmless sample repository and inviting a small test group. Confirm who can create accounts, read private repositories and delete projects. Decide how contractors lose access and how the business regains administration if its original developer disappears. Skip Allura if there is no named operator or if your only reason is avoiding a modest subscription.

### Cost against GitHub Team

[GitHub Team](https://github.com/pricing) is $4/user/month with monthly billing on the checked signup link. Three to six developer seats therefore cost $12 to $24/month, or $432 to $864 over 36 months. Usage extras and separately priced security add-ons are excluded; do not assume every GitHub product is included. GitHub Free may already fit a simpler repository-and-ticket need.

The Allura model uses one Medium server, 24 to 60 setup hours and 6 to 16 monthly hours. Low and high columns change both labor and the explicitly stated three to six seat counts. Code review, application development and account administration remain work on either platform.

| Cost | Low labor case | High labor case |
|---|---:|---:|
| Setup | $1,634 | $4,085 |
| Monthly operations | $457 | $1,138 |
| Self hosted, 36 months | $18,092 | $45,056 |
| Alternative monthly | $12 | $24 |
| Alternative, 36 months | $432 | $864 |
| Savings from self hosting | Negative $17,660 | Negative $44,192 |
| Break even month | Never | Never |

Self hosting is much more expensive here. Data-control or contractual requirements might justify it, but a business should record those requirements before approving the ongoing bill.

## Needs your IT department or a provider

**Pony Mail needs specialist attention before any new deployment.** It provides a searchable mailing-list archive, with a web server, Python, Elasticsearch and a separate mailing-list delivery system. Its [install page](https://ponymail.apache.org/docs/installing.html) explicitly says the instructions are out of date. The [downloads page](https://ponymail.apache.org/downloads.html) lists original release 0.11 from April 20, 2019 and no released Foal successor. A current secure production minimum could not be verified; do not copy the old operating-system versions in its instructions.

For example, a nonprofit with 12 staff and 300 volunteers might inherit an archive it must preserve. A specialist should test private-list permissions, export messages and document who maintains the search service. Our platform allowance is 6 to 16 administration hours/month, or $409 to $1,089 labor alone before servers. [Groups.io Premium](https://groups.io/static/pricing) charges $0.04/member/month with a $20 monthly minimum: 300 x $0.04 = $12, so this example pays $20/month. It is hosted list management with archives, not hosted Pony Mail. Check attachment storage, imports, moderation and privacy before moving.

## Your developer's toolbox

These projects usually arrive as dependencies in an application contract. Ask for the exact component versions, the source repository, a reproducible build and an update owner. A framework name by itself tells you little about the finished site's accessibility or editing experience.

- **Apache Causeway:** Your developer can build forms around business records; you still need rules for who may read and change each record.
- **Apache Cordova:** A mobile app supplier can package web code for phones; device permissions and supported mobile platforms need ongoing review.
- **Apache Flex:** You may inherit an ActionScript or MXML interface; ask for a supported delivery route and a migration plan before funding new features.
- **Apache FreeMarker:** Your website may use it to turn templates and data into pages; only trusted staff should edit executable templates.
- **Apache Grails:** A supplier may use Groovy and Java to build your portal; ask who owns framework updates after launch.
- **Apache mod_perl:** An older hosted application may run Perl inside the web server; the host must patch both the server and application code.
- **Apache MyFaces:** A Java portal may use these interface components; accessibility still needs checking in the actual forms your customers use.
- **Apache rivet:** A specialist may maintain Tcl pages inside the web server; confirm that another developer can support the application.
- **Apache Royale:** A developer can build browser interfaces from ActionScript and MXML; this is development tooling, not a hosted site subscription.
- **Apache Sling:** A custom content site may use Sling around a repository; editing workflows, permissions and backups belong to the delivered application.
- **Apache Struts:** A custom Java application may depend on Struts; require an inventory and a clear owner for security updates.
- **"Apache Tapestry":** A Java developer may assemble a site from components; the owner buys the resulting application and maintenance, not a ready-made CMS.
- **Apache Tobago:** Your portal supplier may use its interface controls; test keyboard access and validation in the assembled application.
- **Apache Turbine:** A developer can reuse application services for a custom site; staffing depends on the finished application and its dependencies.
- **Apache Velocity:** A site or document generator may use its template engine; treat templates as trusted application assets and review changes.
- **Apache Velocity Tools:** These helpers support Velocity-based sites; they are not a second content-management product to install.
- **Apache Websh:** You might inherit this in an older Tcl application; the catalog preview date warrants a support discussion, not a fresh recommendation.
- **Apache Wicket:** Your Java supplier may use it for interactive forms; keep business logic, dependency updates and accessibility in the maintenance contract.

## Risks and support

Use the project-specific [JSPWiki security guidance](https://jspwiki-wiki.apache.org/Wiki.jsp?page=Security), [Roller advisories](https://roller.apache.org/security.html), Allura release notices, [Struts security page](https://struts.apache.org/security/) and [ASF security guidance](https://www.apache.org/security/). An owner does not need to patch Java libraries personally, but does need someone who knows those libraries are present. Include dependency reporting and update responsibility in the contract.

A quiet release date is a reason to check the mailing list, issue tracker and [Apache Attic](https://attic.apache.org/). It is not proof by itself that all subprojects are abandoned. Pony Mail's own stale-install warning is more useful evidence than guessing from its age. Conversely, a recent release is not a guarantee that all current advisories are resolved, as the JSPWiki warning shows.

The checked project pages offer community help, with no contracted response time established here. No priced commercial JSPWiki, Roller or Allura maintenance package was verified. Ask a prospective provider which versions it supports and what happens when a restore fails. The hosted vendors support their own offerings; their presence in this article does not mean they maintain your Apache installation.

The [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0) permits commercial use and modification under its conditions, including applicable notices on redistribution. It supplies no warranty or automatic support contract, and does not grant permission to imply ASF endorsement. This is a plain-language explanation, not legal advice.

## Download the kit

[Download the websites and web-apps kit](/downloads/apache-websites-cms-web-apps-small-business-kit.md) for the wiki's first-week plan, IT project cards, the full catalog and filled cost worksheets. If the actual job is launching a simple business website, the restrained budget approach in *The $97 Launch* is a better starting question than choosing a framework first.

## Related reading

- [Apache projects for small business](/blog/apache-open-source-projects-small-business/)
- [Search and knowledge bases](/blog/apache-search-knowledge-base-small-business/)
- [Web servers and API gateways](/blog/apache-web-servers-api-gateways-small-business/)
- [Security and remote access](/blog/apache-security-identity-remote-access-small-business/)
- [n8n for small business](/blog/n8n-small-business-automation-guide/)

## Fact-check notes and sources

Project spot checks and comparator prices were read October 29, 2026, from 21:37 to 21:40 UTC; catalog and shared cost inputs were read earlier that day. Requirements without a published hardware floor are explicitly marked; our allocations are planning assumptions, not installation results. The source table retains registry evidence for projects outside the three detailed selections.

1. [Apache Allura](https://allura.apache.org). Read October 29, 2026.
2. [Apache Allura 1.22.0 released, with security fixes](https://allura.apache.org/posts/2026-allura-1.22.0.html). Read October 29, 2026.
3. [apache causeway](https://causeway.apache.org). Read October 29, 2026.
4. [projects.apache.org, projects.json](https://projects.apache.org/json/foundation/projects.json). Read October 29, 2026.
5. [Apache Cordova](https://cordova.apache.org). Read October 29, 2026.
6. [Apache Flex®, Home Page](https://flex.apache.org). Read October 29, 2026.
7. [FreeMarker Java Template Engine](https://freemarker.apache.org). Read October 29, 2026.
8. [Apache Grails® Framework](https://grails.apache.org). Read October 29, 2026.
9. [grails-core release v8.0.0 on GitHub](https://github.com/apache/grails-core/releases/tag/v8.0.0). Read October 29, 2026.
10. [Apache JSPWiki](https://jspwiki.apache.org/). Read October 29, 2026.
11. [Downloads](http://jspwiki.apache.org/general/downloads.html). Read October 29, 2026.
12. [mod_perl: Welcome to the mod_perl world](https://perl.apache.org/). Read October 29, 2026.
13. [Apache MyFaces](https://myfaces.apache.org). Read October 29, 2026.
14. [Index of /myfaces/source](https://downloads.apache.org/myfaces/source/). Read October 29, 2026.
15. [Apache Pony Mail](https://ponymail.apache.org). Read October 29, 2026.
16. [Apache Pony Mail](https://ponymail.apache.org/downloads.html). Read October 29, 2026.
17. [Apache Rivet](https://tcl.apache.org/rivet). Read October 29, 2026.
18. [Apache Roller](https://roller.apache.org/). Read October 29, 2026.
19. [Index of /roller/roller-6.1/v6.1.6](https://downloads.apache.org/roller/roller-6.1/v6.1.6/). Read October 29, 2026.
20. [Apache Royale](https://royale.apache.org). Read October 29, 2026.
21. [Apache Sling :: Apache Sling, Bringing Back the Fun!](https://sling.apache.org/). Read October 29, 2026.
22. [Index of /sling](https://downloads.apache.org/sling/). Read October 29, 2026.
23. [Welcome to the Apache Struts project](https://struts.apache.org). Read October 29, 2026.
24. [Index of /struts/7.4.0](https://downloads.apache.org/struts/7.4.0/). Read October 29, 2026.
25. [Apache MyFaces](https://myfaces.apache.org/#/tobago). Read October 29, 2026.
26. [Apache Turbine™ , Apache Turbine](https://turbine.apache.org). Read October 29, 2026.
27. [The Apache Velocity Project](https://velocity.apache.org). Read October 29, 2026.
28. [velocity.apache.org, tools](https://velocity.apache.org/tools/). Read October 29, 2026.
29. [Websh, Welcome](https://tcl.apache.org/websh). Read October 29, 2026.
30. [Apache Wicket](https://wicket.apache.org). Read October 29, 2026.
31. [JSPWiki: NewIn3.0.0](https://jspwiki-wiki.apache.org/Wiki.jsp?page=NewIn3.0.0). Read October 29, 2026.
32. [raw.githubusercontent.com, README.md](https://raw.githubusercontent.com/apache/jspwiki/3.0.0/README.md). Read October 29, 2026.
33. [JSPWiki: Getting Started](https://jspwiki-wiki.apache.org/Wiki.jsp?page=Getting%20Started). Read October 29, 2026.
34. [JSPWiki: Security](https://jspwiki-wiki.apache.org/Wiki.jsp?page=Security). Read October 29, 2026.
35. [Occupational Employment and Wage Statistics Profiles](https://data.bls.gov/oesprofile/?areas=INDUSTRY,STATE,MSA&major_group=150000&measure=01&occupation=151244&year=2025). Read October 29, 2026.
36. [Bureau of Labor Statistics Data](https://data.bls.gov/timeseries/CMU2020000000000P). Read October 29, 2026.
37. [Droplet Pricing, DigitalOcean](https://www.digitalocean.com/pricing/droplets). Read October 29, 2026.
38. [B2 Cloud Storage Pricing, Backblaze](https://www.backblaze.com/cloud-storage/pricing). Read October 29, 2026.
39. [Notion Pricing Plans: Free, Plus, Business, & Enterprise.](https://www.notion.com/pricing). Read October 29, 2026.
40. [Confluence Pricing: Free and Paid Plans, Atlassian](https://www.atlassian.com/software/confluence/pricing). Read October 29, 2026.
41. [Apache Roller](https://roller.apache.org/downloads/downloads.html). Read October 29, 2026.
42. [raw.githubusercontent.com, roller install guide.adoc](https://raw.githubusercontent.com/apache/roller/roller-6.1.6/docs/roller-install-guide.adoc). Read October 29, 2026.
43. [raw.githubusercontent.com, pom.xml](https://raw.githubusercontent.com/apache/roller/roller-6.1.6/pom.xml). Read October 29, 2026.
44. [raw.githubusercontent.com, README.md](https://raw.githubusercontent.com/apache/roller/master/README.md). Read October 29, 2026.
45. [WordPress.com Pricing, Find the Perfect Plan for Your Site](https://wordpress.com/pricing/). Read October 29, 2026.
46. [raw.githubusercontent.com, installation.rst](https://raw.githubusercontent.com/apache/allura/rel/1.22.0/Allura/docs/getting_started/installation.rst). Read October 29, 2026.
47. [raw.githubusercontent.com, docker compose prod.yml](https://raw.githubusercontent.com/apache/allura/rel/1.22.0/docker-compose-prod.yml). Read October 29, 2026.
48. [GitHub plans and pricing · GitHub](https://github.com/pricing). Read October 29, 2026.
49. [Apache Pony Mail](https://ponymail.apache.org/docs/installing.html). Read October 29, 2026.
50. [Groups.io: Plans & Pricing](https://groups.io/static/pricing). Read October 29, 2026.
51. [Apache Roller](https://roller.apache.org/security.html). Read October 29, 2026.
52. [Security](https://struts.apache.org/security/). Read October 29, 2026.
53. [ASF Security Team, Apache Software Foundation](https://www.apache.org/security/). Read October 29, 2026.
54. [The Apache Attic, The Apache Attic was created in November 2008 to provide process and](https://attic.apache.org/). Read October 29, 2026.
55. [apache.org, LICENSE 2.0](https://www.apache.org/licenses/LICENSE-2.0). Read October 29, 2026.
56. <a href="https://tapestry.apache.org">Source</a> (2026-10-29).

57. [METR: experienced developer study](https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/). Read October 29, 2026, 23:30:58 UTC.
58. [Claude pricing](https://claude.com/pricing). Read October 29, 2026, 23:31:08 UTC.
59. [ChatGPT pricing](https://chatgpt.com/pricing/). Read October 29, 2026, about 23:27 UTC.
60. [Claude API pricing](https://platform.claude.com/docs/en/about-claude/pricing). Read October 29, 2026, 23:31:14 UTC.
61. [OpenAI API pricing](https://developers.openai.com/api/docs/pricing). Read October 29, 2026, 23:31:13 UTC.
62. [Codex CLI](https://developers.openai.com/codex/cli). Read October 29, 2026, 23:32:01 UTC.
63. [Desktop Commander documentation](https://raw.githubusercontent.com/wonderwhy-er/DesktopCommanderMCP/main/README.md). Read October 29, 2026, 23:31:41 UTC.
64. [Claude in Chrome](https://support.claude.com/en/articles/12012173-get-started-with-claude-in-chrome). Read October 29, 2026, 23:31:11 UTC.
65. [ChatGPT Work cloud browser](https://help.openai.com/en/articles/20001280-using-cloud-browser-in-chatgpt). Read October 29, 2026, 23:32:01 UTC.
66. [Anthropic consumer terms](https://www.anthropic.com/legal/consumer-terms). Read October 29, 2026, 23:31:08 UTC.
67. [OpenAI terms of use](https://openai.com/policies/terms-of-use/). Read October 29, 2026, about 23:27 UTC.
68. [Desktop Commander pricing](https://desktopcommander.app/pricing/). Read October 29, 2026, 23:31:08 UTC.
69. [Using Codex with a ChatGPT plan](https://help.openai.com/en/articles/11369540-using-codex-with-your-chatgpt-plan). Read October 29, 2026, 23:31:16 UTC.
70. [OpenAI prompt caching](https://developers.openai.com/api/docs/guides/prompt-caching). Read October 29, 2026, 23:32:00 UTC.

*Apache, the Apache feather logo and the Apache project names are trademarks of The Apache Software Foundation. This site is not affiliated with or endorsed by the ASF. Other product names are used for identification only.*


---

Canonical HTML: https://jwatte.com/blog/apache-websites-cms-web-apps-small-business/
RSS: https://jwatte.com/feed.xml
JSON Feed: https://jwatte.com/feed.json
Hero image: https://jwatte.com/images/apache-websites-cms-web-apps-small-business.webp