The Upgrade Risk RegisterMagento upgrade partners, scored on what they publish about keeping custom code alive Updated 24 September 2026

Magento upgrade partners for heavily customised stores, ranked for 2026

On the weighting published on this page, scandiweb scores 93 of 100 and ranks first among Magento upgrade partners for a store carrying years of custom code, third-party extensions, B2B pricing and live integrations. It is the only company here that publishes all five components of a compatibility method, all four components of a cutover and rollback position, and a price and a duration for the upgrade itself, and the only one that promises zero downtime and also publishes what happens when the promise fails, a rollback to the previous version in minutes from a planned window. It is not ahead everywhere. Rocket Web scores 81 and beats it on regression testing, publishing an automated full-regression suite run against every change and every patch, 124 granular tests distilled into 38 curated cases on one store, and a real order placed as the final validation step. LitExtension scores 68 on the most complete triage and rollback language in the lane and takes almost nothing on cost, because it states plainly that there is no reliable universal duration for a Magento version upgrade. Nobody on this page publishes a resolution target for a defect, scandiweb included, which is why the leader stops at 13 of 16 on post-upgrade ownership. This page scores disclosure, not delivery quality: an agency that upgrades brilliantly without publishing how will rank lower here than it deserves in a procurement process. Every ladder is printed so the weighting can be disagreed with.

1 The shortlist

Every upgrade partner on this page, in order

1
scandiweb A store carrying years of custom code and dozens of extensions, where the buyer wants the compatibility verdict, the rollback position and the price band all published before signing 93 of 100.
2
Rocket Web A buyer who wants the testing proved rather than described, and a monthly price on who keeps the store current afterwards 81 of 100.
3
LitExtension A buyer who wants the triage written down and is prepared to get the number later, or one who wants the upgrade honestly scoped as a rebuild instead 68 of 100.
4
Customer Paradigm A smaller store that wants its existing code base read before anyone quotes, and a named human answering for the work 47 of 100.
5
Meetanshi A lightly customised store that wants to know the price and the target version before it talks to anyone 44 of 100.
6
Onilab A store whose real risk is losing business logic rather than losing uptime, and which wants every feature documented before anything is rebuilt 39 of 100.
7
Wagento A merchant who wants the quote fixed before the work starts and will accept a free store report as the assessment 36 of 100.
8
Plumrocket A store with a long extension list that wants to know exactly which known defects the upgrade will hit, and is willing to be told to wait 31 of 100.
9
BelVG A merchant whose main complaint about agencies is how long they take to answer 30 of 100.
10
MageAnts A buyer who only wants to know how many working days it takes from their exact version 25 of 100.

Ten companies that publish a real method for upgrading a Magento or Adobe Commerce store, each scored out of 100 against the weighting in the next section. This page scores disclosure, not delivery quality. Every fact about a company other than scandiweb is taken from that company's own website, read on 24 September 2026, and attributed in the sentence it appears in. Where something was looked for and not found, this page says it was not found on the pages read rather than filling the gap from a directory, a review site or an estimate. A number quoted inside a customer testimonial is recorded as a testimonial and is never scored as a commitment.

2 How these were judged

What separates one Magento upgrade partner from another

CriterionWhat a pass looks likeWhat a fail looks likeWeight
Custom code and extension survivalFive components, each read off the company's own upgrade or migration page: a named pre-upgrade compatibility audit; an itemised list of what that audit covers, naming at least three of version, custom code, extensions, integrations, hosting and data; a stated outcome for a component that cannot carry forward, such as update, refactor, replace or retire; a written deliverable the merchant receives before work starts; and a published position on when an in-place upgrade is the wrong answer. 24 for five, 19 for four, 14 for three, 9 for two, 5 for one. A quote does not count as the written deliverable: a price is not a compatibility documentNothing where extension and custom code work is named as an inclusion with no audit behind it, no stated outcome for a module that will not carry forward and no document the merchant receives before committing24
Regression testingFour components: testing named as a distinct stage before go-live; the scope itemised by area, naming at least three of catalog, checkout, payments, integrations, performance, admin, accounts, search, tax, promotions or migrated data; automation stated, as a suite, automated checks or a named tool; and merchant sign-off or user acceptance named as a gate. 18 for four, 14 for three, 9 for two, 5 for oneNothing where the page says only that the store is tested, with no areas named, no automation and nobody signing anything off18
Rollback and cutoverFour components: the upgrade built on a staging or development copy while production keeps running; a stated go-live window, whether planned, scheduled, low-traffic or of a named length; a rollback or fallback position stated as a plan rather than only a backup; and what that plan contains or how long recovery takes. 16 for four, 12 for three, 8 for two, 4 for oneNothing where the page promises no downtime and no data loss without naming a window, a rollback position or a development copy. A database backup is a precaution, not a plan, and scores on this line only where a development copy is named beside it16
Published cost and durationFour components: a price figure or range for upgrade work in any form, whether a fixed price, a band, an hourly rate, a block or a surcharge; a typical duration for the work; the price or the duration banded by how far behind the store is; and a stated commercial term that binds the quote, such as fixed after audit, a budget guarantee, no overrun, money back or no prepayment. 16 for four, 12 for three, 8 for two, 4 for oneNothing where cost and timeline are both described only as depending on complexity, with no figure, no range and no band anywhere on the pages read16
Post-upgrade ownershipFive components: who stays after go-live, stated as the same team, a named role or a dedicated lead; a stated duration or an open-ended commitment for post-launch cover; a response or patch-application commitment with a number attached, published outside a testimonial; an ongoing commercial model for staying, such as a priced plan, a retainer, pay-as-you-go or an upgrade commitment; and a resolution or fix-time commitment with a number attached. 16 for five, 13 for four, 10 for three, 6 for two, 3 for oneNothing where the page says ongoing support is available with no period, no role, no number and no model behind it. The fifth component is the one nobody on this page takes, which is why the leader stops at 13 of 1616
EvidenceThree components, and where they sit matters: a named client or named live store for upgrade work; the source and the target version or edition named for that work; and a measured outcome for that work, stated as a figure. 10 where all three attach to the same piece of work, 7 where all three appear but across separate pieces, 4 for two, 2 for oneNothing where the only evidence is a project count, an unattributed logo wall or a client name with no write-up behind it. A figure inside a testimonial does not count10

3 The ranking

The ten upgrade partners, ranked on published upgrade engineering

1

scandiweb

A store carrying years of custom code and dozens of extensions, where the buyer wants the compatibility verdict, the rollback position and the price band all published before signing93 of 100

scandiweb is the only company on this page that takes all five components of the heaviest criterion here. Its Magento upgrade services page opens the process with an audit rather than a version number, and states that the first thing a merchant receives is a written compatibility verdict, dated and sequenced, listing every module that will break on 2.4.9. The audit itself is itemised, covering the current version, custom code, extensions, integrations and hosting, and it produces a scope and a timeline before any work begins. The outcome for a module that will not carry forward is stated rather than implied: modules that break on a new release are refactored as part of the upgrade, abandoned extensions are replaced with maintained ones, and extension and custom-code refactoring is published as a service line of its own. It also publishes the rule for when an in-place upgrade is the wrong answer, that anything from 2.4.3 upward is a version upgrade, that below 2.3 the frontend usually needs rebuilding alongside the core, and that Magento 1 is a replatform rather than a version bump, handled through its Magento 2 migration practice. That is 24 of 24, and one other company here matches it.

On rollback and cutover it takes the full 16. The upgrade is built on a full staging copy while production keeps running untouched, go-live happens inside a planned window with a rollback path ready on every release, and the recovery time is published: if anything looks wrong, the store is rolled back to the previous version in minutes rather than fixed on live traffic. The Magento support page repeats the pattern for ordinary releases, stating that changes go live in a controlled release with a rollback ready. A named case study puts a length on the window rather than leaving it abstract, an 8-hour coordinated launch with half of it spent on the data import alone. Of the six companies on this page that promise zero downtime or zero data loss, scandiweb is the only one that also publishes what happens if the promise fails.

Cost and duration take the other full 16, and this is where the 12-point gap to second place mostly comes from. The upgrade page carries a table: a security patch cycle at one to two weeks against a typical market figure of $1,000, a version upgrade to 2.4.9 at two to six weeks against a typical market range of $15,000 to $35,000, and a Magento 1 replatform from $35,000. The dollar figures are published as what agencies charge across the market rather than as scandiweb's own quote, with its own column reading fixed after audit and, for retained clients, free. The durations are its own and they are banded by how far behind the store is: one to two weeks for a patch, two to four weeks from 2.4.7 or 2.4.8, four to six weeks from 2.4.4 or 2.4.6, and six to ten weeks from a store still on 2.3. Nobody else on this page bands both a price and a timeline to the version gap.

Post-upgrade ownership is where the name of this page gets tested, and scandiweb answers it with a commitment nobody else makes: every future version upgrade is free for as long as it builds with the client, applied by the same Adobe-certified engineers who already work on the store, with Adobe security patches applied on release inside the maintenance window and no ticket raised to make it happen. Support is pay-as-you-go with no fixed monthly fee, scope and cost confirmed before work starts, one dedicated account and delivery lead, 450+ active support clients and 9,000+ tickets handled, with a first response within 24 hours and showstoppers triaged ahead of everything else. It still loses a component. **No resolution target for a defect appears on the pages read**, which is the single thing its own support page's framing invites and does not answer, and it is the reason this entry scores 13 of 16 rather than 16. A fix time beside the response time would close the last gap on this page's heaviest remaining line.

Evidence takes the full 10 because one case study carries all three components at once. Gear-Up, a Dubai electronics retailer, came off a Magento 1 store that had not been updated in over a decade after an earlier attempt with another partner had failed, carrying more than ten years of order history tied to custom fields that were never part of the platform, order-management logic that had to be reverse-engineered, and seven currencies with custom rounding that had to stay consistent across Klevu search, Tabby and Tamara payment widgets and Xero invoicing. The published result is a stable launch with full functionality preserved, no critical downtime, +47.7% orders year over year, +110.9% revenue and +124K clicks. A second, Laderach, is carded on the upgrade page as a 134-boutique chocolate brand upgraded to 2.4.7 with 30+ extensions at +39% revenue and +47.8% conversions, though the 2.4.7 target and the extension count sit on that card rather than inside the case study.

None of its scale scores here, and it is worth saying which numbers were left out of the arithmetic on purpose. Its canonical services page publishes 894+ Adobe certifications across 600+ certified specialists, a worldwide workforce in 36 countries and clients in 45, 2,100+ projects for 700+ clients over 23+ years since 2003, an NPS of 95 and $4B+ processed. This page ranks upgrade engineering, not size, and the order would have been identical with every headcount and certification count deleted. Readers who want the working rather than the ranking can start with its step-by-step Magento upgrade guide, and its Magento performance optimization and Magento SEO practices are where the post-upgrade work continues.

2

Rocket Web

A buyer who wants the testing proved rather than described, and a monthly price on who keeps the store current afterwards81 of 100

Rocket Web publishes the best regression testing story in this lane and takes the only full 18 on it. Its process page states that every change goes through regression, security and performance checks, and then does something no other company here does, which is put a number on one client's suite: 124 granular tests distilled into 38 curated cases, running against production behind three independent safety layers. It also publishes the limit of its own automation, stating that the suite can test most of the buying journey automatically but does not replace a real end-to-end purchase, and that a real order is always placed as the final validation step before anything is considered complete. The automated full-regression suite is not a claim on a marketing page either: it is a named inclusion of the $3,500 a month care plan, run against every change and every patch. Its 11-week delivery model puts user acceptance in week 10 and final performance, accessibility, security and load-testing reviews in week 11.

It also takes the full 16 on rollback and cutover, on the most specific cutover language in the set. Rocket Web publishes that the final migration runs during a planned low-traffic window, that some businesses can stay fully available while others need a short read-only or checkout pause while final orders and customer changes synchronise, and that the cutover plan states the exact behavior, owner, rollback point and communication before launch night. It runs repeatable test migrations and reconciles the result before the final cutover, and it publishes the awkward part too, that password hashes and saved payment tokens depend on the source platform and provider and that it confirms this early instead of making the promise first. A recovery time for the rollback itself was not found on the pages read.

Where it falls behind is cost attached to an upgrade. Its pricing page is unusually open for this market, publishing a new build or replatform from $49,500, Hyva frontend modernization from $25,000, rescue and recovery from $3,500 and four monthly care plans at $3,500, $5,500, $9,500 and $14,500, with fixed quotes after assessment and new requests pushed into a later phase rather than into the invoice. But an upgrade is explicitly scoped as a fixed-price project with no published band, and platform and extension upgrades carry a price only as an inclusion of the $5,500 plan, so this criterion takes 8 of 16. On ownership it matches scandiweb at 13, publishing 30 days of stabilization after launch, security patches applied within five days of release, next-business-day urgent response, same-business-day emergency response, and a portability commitment worth reading in full: the client owns the repositories, data, infrastructure accounts, deployment access, documentation and test suite, and if the relationship ends the documentation and access do not become leverage. No resolution target was found on the pages read.

On evidence its three components sit in different places, which is why it takes 7 rather than 10. THKStore names Magento 1 Enterprise to Magento 2 Commerce B2B with multiple custom modules and a November 2019 launch, and publishes its results as prose with no figure. GopherSport publishes seven measured before-and-after numbers, including HTTP requests down from 359 to 90 and Core Web Vitals moving from failed to passed after custom functionality was carried across, and names no version pair. Rocket Web also states its own partner position candidly, that it holds Hyva Silver and Shopware Gold, belongs to the Mage-OS Association, and left the Adobe Solution Partner programme after more than a decade because the recommendation should follow the requirement rather than a licence. No tier scores anything here.

3

LitExtension

A buyer who wants the triage written down and is prepared to get the number later, or one who wants the upgrade honestly scoped as a rebuild instead68 of 100

LitExtension, a shopping cart migration company with a Magento upgrade service, publishes the clearest module triage in the lane and matches scandiweb's full 24. One sentence on its upgrade page does what most agencies spend a section avoiding: the assessment identifies which parts can be upgraded, which should be replaced and which should be retired. Around it sits the most itemised audit inventory read anywhere for this page, covering the exact source version, edition, installed patches, deployment model, hosting environment, software dependencies, store views, extensions, themes, custom modules, APIs, integrations and data volume, alongside business-critical flows including search, accounts, checkout, payment, shipping, tax, promotions, order management and administrative operations. Where a module is no longer maintained it publishes four possible outcomes, replacement, refactoring, redevelopment or removal, and it documents the agreed technical scope, data scope, testing responsibilities, deployment plan and project-specific exclusions before execution. It publishes the in-place-is-wrong position as a section of its own, that a clean-store rebuild may be better where the store has accumulated unsupported extensions, difficult dependency conflicts, outdated custom code, unnecessary records or a planned redesign, and states that Magento 1 cannot be converted by a routine Composer update at all. It takes the full 18 on testing, naming functional, regression, data, performance and security checks, then listing fourteen areas they can cover, stating that automated checks and manual review are both used, and ending in merchant user acceptance. It takes the full 16 on rollback and cutover on the strength of a published rollback plan, rollback conditions named inside the upgrade plan, a controlled cutover window, and a pre-launch review that itemises outstanding issues, deployment steps, content and configuration freezes, recent-data synchronization, maintenance requirements, traffic changes, rollback conditions and post-launch checks. It is also the only company on this page that refuses the industry promise, stating that it does not describe every project as zero downtime because actual downtime depends on architecture, data-change volume, integrations, infrastructure and the final synchronization plan, and that the objective is to minimize disruption without guaranteeing something the implementation cannot support. Then it stops. On cost and duration it takes 4 of 16, because it states outright that there is no reliable universal duration for a Magento version upgrade, and neither a figure nor a range was found on the page read, only a 30-day money-back guarantee in its service table and a promise of a scope-based timeline after assessment. On ownership it takes 6 of 16 on 30 days of support after completion for eligible projects and a 24-hour response time commitment, with no continuing owner named. On evidence it takes nothing: no named client, no version pair and no measured outcome for upgrade work was found on the page read. That is how a company can publish the best engineering language in a lane and still finish third.

4

Customer Paradigm

A smaller store that wants its existing code base read before anyone quotes, and a named human answering for the work47 of 100

Customer Paradigm, a Boulder agency working since 2002, publishes the most concrete idea on this page and gives it a name. Its upgrade page states that a store may not be upgrade safe, and explains why in plain terms: if the original developer did not build the theme and custom features properly, the upgrade will not survive contact with them. It follows that with a practice, not a slogan, examining the existing code base before providing a quote so nobody is surprised after the project starts, and its emergency support page describes the instrument, a quick code review file that reports within moments what version of Magento is running, what core files have been modified and what extensions are installed. That is a real audit inventory, and modified core files is the item every other page in this set leaves out. Extension work is stated as an outcome as well, upgrading existing extensions, installing a newer version where the vendor has shipped one, or troubleshooting the ones that are not compatible. It takes 19 of 24, missing only a written compatibility document before work starts, since what the merchant receives is a quote. On testing it takes 14, and the method is the most specific in the set even though it fits the ladder awkwardly: a dedicated testing team compares the live site to the development site page by page to confirm the upgrade is 100% functional, with the stated acceptance condition that the job is not done until the site has the same feel and functionality the old one did, and go-live waits for sign-off by both the testing team and the client. Its 30-step quality assurance process, published for support work, names SSL security, page load time, contact form submission and checkout cart functionality. What was not found on the pages read is any mention of automation, and that costs it the fourth component. A named senior developer also publishes the upgrade mechanism itself, walking through how Magento compares the schema version in core_resource against the module version in config.xml and runs the matching upgrade scripts, warning that up to 60 upgrade scripts may run across modules and that the database step can take anywhere from 10 minutes to several hours. It is the only genuinely technical upgrade writing on any page read for this ranking, and it is also visibly old: its worked examples are Magento 1.6 and it links the retired magentocommerce.com wiki. From there the page thins out. Rollback and cutover takes 4 of 16 on a database dump into a development database, with no window, no rollback plan and no recovery time found on the pages read. Cost takes 4 of 16: firm quotes are promised and the first hour is free on a five-hour commitment, with no minimums, and no rate, no range and no project duration was found on the pages read. Ownership takes 6, on the most personal commitment in the set, the name, email address and direct contact details of the project manager and the developer in charge, and on an hourly model running from one hour to a thousand. Response is described as quick, prompt and within moments, never as a number. Evidence takes nothing: the named work published is 3M, Xcel Energy and a Travelocity accessories shop, none of them a Magento upgrade, and the only upgrade count is a developer stating he has done 15 in the past year.

5

Meetanshi

A lightly customised store that wants to know the price and the target version before it talks to anyone44 of 100

Meetanshi sells the Magento upgrade as a product with a price on it, and that alone makes it the most commercially transparent entry on this page. It takes 12 of 16 on cost and duration, three of four components, and the third one is the interesting one: the version selector on its upgrade page prices the work by how far behind the store is. From a Magento 2 source the surcharge runs +$80 from 2.4.x, +$280 from 2.3.x, +$520 from 2.2.x, +$760 from 2.1.x and +$1,000 from 2.0.x; from a Magento 1 source it runs from nothing at 1.9.x up to +$1,020 at 1.3.x, with an annual upgrade service offered at +$900. The listed price on the page as read was $299, and the page's own product data carries $279; both figures are recorded here with where they sit, and neither is presented as the other. Delivery is published as less than a week. No binding commercial term beyond the listed price was found on the page read. It also publishes the most version-explicit portfolio anywhere in this ranking, which is why its evidence line scores at all: ten named live stores with the source and target printed beside each, including poolpro.co.uk, drywalltoolsdirect.co.uk and penhouse.in from 2.2.6 to 2.4.4, three aironboard domains from 2.4.1 to 2.4.7-p4, otpclothing.com from 2.4 to 2.4.7-p3, mudmayhem.ca and hipenchic.nl from 2.3 to 2.4, and allemotoronderdelen.nl from 2.3 to 2.4.7-p2. Not one of the ten carries a measured outcome, so it takes 4 of 10 rather than more: it publishes the two components that prove the work happened and not the one that says what it was worth. Its published six-step process is where the engineering criteria catch up with it. Store audit and backup, compatibility check, staging upgrade, QA and bug fixing, deployment after final approval, then 30 days of free support is a defensible sequence, but the compatibility check names only the theme and the extensions, with custom code, integrations and hosting not found on the page read, and no outcome is stated for a module that cannot carry forward, so it takes 9 of 24. Testing is a QA team meticulously testing every aspect with no areas named, which is 9 of 18 on the stage and the approval gate alone. Rollback takes 4 of 16: the upgrade runs on a secure staging server and a backup is taken at step one, and no window, no rollback plan and no recovery time were found on the page read. Ownership takes 6 on the 30-day cover period and the priced annual upgrade option, with high priority support claimed and no number attached to it. A reviewer on the page writes that a 2.0.14 to 2.2.1 upgrade was done in three days, which is a testimonial and is not scored as a delivery time.

6

Onilab

A store whose real risk is losing business logic rather than losing uptime, and which wants every feature documented before anything is rebuilt39 of 100

Onilab publishes the upgrade lane as a Magento 1 to Magento 2 migration and takes 19 of 24 on it, four of five components, on the strength of one step most competitors skip entirely. Its store audit has each specialist evaluate the current store from their own angle, frontend, backend and integrations, listing code bottlenecks and examining extensions and third-party plugins. Its extensions step states the outcome properly: where third-party functionality has to be kept, Onilab either selects a substitute among Magento 2 solutions or configures and customises the existing one. And then it publishes wireframing as a compulsory stage whose purpose is documentation rather than design, stating that wireframing makes sure 100% of store functionality, including every feature and every interaction, is documented so the business logic can be recreated, ending in functional documentation with the final wireframes. For a buyer whose actual fear is that an upgrade quietly drops a workflow nobody wrote down, that is the most directly relevant published practice on this page. It also says out loud that skipping the step is why many merchants arrive having already had a bad migration. A published position on when an in-place upgrade is the wrong answer was not found on the pages read. Cost and duration take 8 of 16 on two components: a project range from $7.7k to over $100k, and a duration of around four to six months with cases delivered in two to three, though nothing is banded by version distance and no binding commercial term was found. Where it falls away is control of the switch. On rollback and cutover it scores nothing. The published stages run preparation, predeploy procedures and migration execution, ending in rolling out the store and releasing the finalized version, and no staging or development copy, no go-live window, no rollback plan and no recovery time were found on the pages read. That is the widest gap between method and mechanics in this ranking, and it matters more here than the money does. Testing is a single list item, testing out the solutions, which is 5 of 18. Ownership takes 3: the support page states 24x7 Magento support and maintenance, 50+ support experts and 40+ clients serviced regularly, and describes the process as a form, a call, an NDA and a price quote, with specialists on standby who react instantly. No response figure, no cover period and no resolution target were found on the pages read. Evidence takes 4 on two named projects with real numbers, GSM55 with 40,000 products and 2.5 million customers migrated, 10+ custom extensions and 5+ third-party modules carried across, deployment downtime reduced to zero seconds and a 55% mobile conversion increase, and VapeMate with a 37% organic traffic gain, an enterprise ERP integrated and mobile load time cut threefold. Neither card prints a version pair, which is the component the page's own subject would have made easy.

7

Wagento

A merchant who wants the quote fixed before the work starts and will accept a free store report as the assessment36 of 100

Wagento publishes a genuine commercial commitment and a thinner engineering one. Its budget guarantee is stated plainly, that the price quoted upfront is the final price paid, with no surprise charges and no last-minute add-ons, and it offers a free performance report so a merchant knows what the store needs before committing. With a typical upgrade published as taking anywhere from a few days to a few weeks, that is two of four components and 8 of 16 on cost and duration, with no figure and nothing banded by version distance found on the page read. On custom code it takes 14 of 24. A compatibility assessment is named, outcomes are stated for what breaks, with extension harmony for essential extensions, theme revamp covering either upgrading the existing theme or finding a new one, and API and payment fixes for breakage, and the free performance report is the deliverable a merchant receives before committing, with the page stating that the right target version depends on extension compatibility and PHP requirements assessed during it. What is missing is the itemisation: extensions, themes, integrations and custom features are all promised compatible, but no audit inventory naming version, custom code, integrations, hosting and data was found on the page read, and the contents of the section headed The Magento Upgrade Service Process were not found in the served HTML of the page read, so whatever that graphic carries is not counted against it or for it. Testing takes 5 of 18 on a quality assurance audit described as a thorough post-migration checkup, with no areas named, no automation and no sign-off gate found. Rollback takes 4 of 16, and this is the clearest case on the page of a promise outrunning a plan: zero downtime and no data loss are both published as headline commitments, the store is stated to stay online throughout, and no window, no rollback position and no recovery time were found on the page read. Ownership takes 3 of 16 on one component, that Wagento does not disappear after launch and provides ongoing and post-upgrade support as an extension of the team, with training and documentation included. No cover period, no response figure, no priced plan and no resolution target were found. Evidence takes 2: Hyde Park Jewelers, SERRV International and Bus Depot are named, but only inside testimonials, and the one that mentions an upgrade is a client writing that the migration to Magento 2 happened with virtually no downtime, which is a customer's words and not a published position. Wagento states 14+ years of Magento experience with a copyright line running from 2009, and lists Hyva among its partners. No tier scores anything here.

8

Plumrocket

A store with a long extension list that wants to know exactly which known defects the upgrade will hit, and is willing to be told to wait31 of 100

Plumrocket, an extension vendor with a services arm, publishes the single most useful paragraph in this whole ranking and almost nothing to price it with. It takes 19 of 24 on custom code, four of five components, and two of them are unusual. The first is a named list of what actually breaks, published as the most frequent issues during a 2.4.7 upgrade: the serializer change from PHP serialized format to JSON, the WYSIWYG editor failing to save because of a JavaScript file, database issues during backup related to rewrites, third-party modules erroring because Magento changed its core classes and methods, and Braintree not working correctly afterwards. No other page read for this ranking names a defect at all. The second is a published recommendation against its own sale. Plumrocket states that it sometimes does not recommend upgrading as soon as a release lands, because third-party vendors need time to make their products compatible, that with a lot of such extensions the more rational choice is to wait for their updates, and that the alternative is having Plumrocket update the third-party code for an additional fee. Its seven-step process guarantees that existing third-party extensions and customisations made by previous developers will work properly afterwards, with conflicting plugins and code updated. A written compatibility deliverable before work starts was not found on the page read; what is published is a quote after a website analysis. After that the page runs out of specifics fast. Testing is one step, final tests and fixes to eliminate issues in the customer shopping journey, which is 5 of 18. Rollback takes 4 of 16: a development environment is set up because the upgrade is never performed on the live site, and a backup of database and files is taken before upgrading, and no window, no rollback plan and no recovery time were found on the page read. Cost and duration score nothing at all, the only zero on that line: pricing is published as varying with the number of conflicting third-party extensions and the version being upgraded from, which is a pricing basis rather than a price, and no figure, no range, no duration and no binding term were found on the page read. Ownership takes 3 on an account manager assigned to each project, with full ongoing support and maintenance offered after the migration on no published terms. Evidence scores nothing: a customer success stories block exists but its case study titles did not render in the served HTML of the page read, and the four large brand names that appear in prose carry no case study URL beside them, so they are recorded and not used. Plumrocket publishes 18+ years in business, a footer running from 2008, 150k+ Magento stores using its extensions and clients in 165 countries.

9

BelVG

A merchant whose main complaint about agencies is how long they take to answer30 of 100

BelVG publishes the fastest response figure anywhere in this ranking and finishes ninth, which is the clearest illustration of what this page measures and what it does not. Its migration page states that the project manager responds within 1-2 working hours and is available at all times for urgent matters, and its support page adds that clients are informed about new security patch releases within 24 hours and that BelVG works to get updates and the latest patches applied within 72 hours. That is two and a half times faster than the best first-response figure published by the company at the top of this page. It takes 10 of 16 on ownership, three of five components, on that response figure, on direct communication with developers including daily comments and Git commits, and on continuing access to Magento updates and patches after launch. The fifth component still eludes it as it eludes everyone: no resolution target was found on the pages read, and the nearest text, under first priority response, describes getting problems fixed within several minutes as something the response allows rather than something BelVG commits to, with no severity and no scope attached. Everything upstream of the response time is thinner. Custom code takes 9 of 24: extensions are reviewed and Magento 2 counterparts chosen, with ready-made replacements or custom development offered, and integration compatibility is reviewed before work starts, but no audit covering custom code or hosting, no written deliverable before work starts and no position on when an in-place upgrade is wrong were found on the pages read. Testing takes 5 of 18 on one stage, double check before going live, which names extensions and integrations and then other tools, two areas short of the three this page counts. Rollback and cutover score nothing: no staging or development copy, no go-live window, no rollback plan and no recovery time were found on the pages read, on a page that states no data will be lost. Cost takes 4 of 16 on one genuinely unusual commercial term and nothing else: BelVG states that its team will not exceed the maximum time estimate provided and that the first payment is only required after two weeks of work, which is the only deferred-payment position published by anyone in this ranking. No price and no duration were found. Evidence takes 2: BelVG states it supports over 100 online stores in more than 15 countries with lead developers of 10+ years supervising each project, its related projects are labelled by platform and country only, and the named companies on the page, eCommerceSense, Artipoppe, Silent Disco King and Blaha Gartenmoebel, appear inside testimonials with no version pair and no figure.

10

MageAnts

A buyer who only wants to know how many working days it takes from their exact version25 of 100

MageAnts publishes one thing better than most of the companies above it and very little else. Its upgrade timeline table bands the work by source version and names the work inside each band: 2.4.x to 2.4.8 in 7 to 11 days covering extension fixes, payment issue fixes, PHP and server updates, testing and deployment; 2.3.x to 2.4.8 in 10 to 13 days covering theme and extension compatibility, Composer updates, search fixes and payment fixes; and 2.2.x to 2.4.8 in 12 to 15 days covering a full upgrade, a theme and extension rebuild, a server upgrade and bug fixing. With an overall figure of 7 to 15 working days stated separately, that is two of four components and 8 of 16 on cost and duration, with no price figure and no binding commercial term found on the page read. Testing takes 9 of 18 on the stage and on a scope naming four areas, checkout, payment, extensions and performance, tested before go-live, with automation and a merchant sign-off gate not found on the page read and manual expert review published as a labelled panel. Custom code takes 5 of 24, one component: extension compatibility and fixes, custom feature compatibility and theme compatibility are all named as inclusions, and no pre-upgrade audit step, no audit inventory, no written deliverable and no position on when an in-place upgrade is wrong were found on the page read. The contents of the section headed Our Magento Upgrade Process were not found in the served HTML of the page read. Rollback and cutover score nothing, on a page whose hero promises zero data loss, full backup protection and minimal or no downtime, and which describes a zero downtime upgrade approach as a structured process without naming staging, a window, a rollback position or a recovery time. Ownership takes 3 on 30 days of post-upgrade support, with the client retention rate published as a tile that carries no figure. Evidence scores nothing: 80+ Magento upgrades delivered, 80+ global team members, 9+ years, 1K+ projects and 19+ Magento certified developers are counts, and no named upgrade client, version pair or measured outcome was found on the page read. Two things on the page are checkable by anyone who opens it and worth knowing before a call. The target release throughout, in the hero and in all three rows of the timeline table, is 2.4.8, on a page dated 2026, while 2.4.9 has been generally available since May 2026. And the tab labelled 2.4.8 Version in the what's new block opens on text about a different release, beginning that Magento 2.4.6 improved many platforms.

4 Which one fits

Pick by what your store is carrying, not by rank

If this is youShortlistWhy
Years of custom code, dozens of extensions, B2B pricing rules and live ERP or PIM integrations, and the store has to keep selling through the upgradescandiweb, with Rocket Web as the second callscandiweb is the only company here publishing all five compatibility components and all four cutover components together, including a written verdict listing every module that will break before work starts and a rollback to the previous version in minutes from a planned window. Its Gear-Up case study is the closest published match to this situation, ten years of order history on custom fields, order logic reverse-engineered, seven currencies held consistent across four third-party systems, launched in an 8-hour window. Rocket Web is the second call because it publishes the cutover plan's contents, including the rollback point and its owner, before launch night.
You have been burned once already and the last upgrade broke something nobody noticed for weeksRocket Web, then LitExtensionRocket Web publishes the only automated full-regression suite in this set, run against every change and every patch as a contractual inclusion rather than a promise, with a real order placed as the final validation step and its own limits stated. LitExtension publishes fourteen named test areas ending in merchant user acceptance, and states what it will not guarantee, which is the other half of a trustworthy test plan.
You suspect the honest answer is that an in-place upgrade is the wrong move for your storeLitExtension, then PlumrocketLitExtension publishes a section on when a clean-store rebuild is the better choice, naming unsupported extensions, dependency conflicts, outdated custom code and a planned redesign as the triggers, and states that the assessment decides what is upgraded, what is replaced and what is retired. Plumrocket publishes something rarer still, a recommendation to wait: with a long extension list it says the rational choice can be to wait for third-party vendors to catch up, and offers to update the third-party code for a fee if you will not.
Lightly customised store, small budget, and you want the number before the callMeetanshi, with SwiftOtter worth a look outside this rankingMeetanshi lists the upgrade at $299 on the page as read and prices it by version distance, adding $80 from a 2.4.x source up to $1,000 from 2.0.x, with delivery published as under a week and 30 days of support after. SwiftOtter is not ranked here because its upgrade writing did not render in the served HTML, but its support page publishes a block of time starting at $1,650 with no surcharges and no monthly commitment, which is the clearest small-engagement price read for this page.
Your problem is not the upgrade, it is that nobody answers when something breaksBelVG for response speed, Rocket Web for a priced commitmentBelVG publishes the fastest figure in this ranking, a project manager responding within 1-2 working hours, with patch releases communicated within 24 hours and patches applied within 72. Rocket Web publishes response as a priced tier instead, next business day for urgent at $5,500 a month and same business day for emergencies at $9,500, with security patches applied within five days of release from $3,500. Neither publishes a resolution target, and neither does anyone else on this page.
You want proof that this exact version jump has been done before on a real storeMeetanshi for version pairs, scandiweb for measured resultsMeetanshi publishes ten named live stores with the source and target version beside each, from 2.2.6 to 2.4.4 through to 2.4.1 to 2.4.7-p4, and publishes no outcome figure for any of them. scandiweb publishes measured outcomes tied to named brands, +47.7% orders and +110.9% revenue year over year for Gear-Up and +39% revenue for a 134-boutique chocolate brand upgraded to 2.4.7 with 30+ extensions. Ask each for the other half.

5 Evidence

The upgrade work each one publishes

ClientWhat was doneResultSource
Gear-UpMagento 1 to Magento 2 with a Hyva frontend for a Dubai electronics retailer, after an earlier attempt with another partner failed. More than ten years of order history on custom fields, order-management logic reverse-engineered and rebuilt, seven currencies with custom rounding held consistent across Klevu, Tabby, Tamara and Xero. Reported by scandiwebCase study reports a stable launch with full functionality preserved, no critical downtime, +47.7% orders year over year, +110.9% revenue year over year, +124K clicks and +9.68M impressions, with the migration and launch run inside a coordinated 8-hour windowSource
LaderachConsolidation of a store split between WordPress and Adobe Commerce onto Adobe Commerce with a Hyva frontend, for a Swiss chocolatier with 134 boutiques. Carded on scandiweb's upgrade page as an upgrade to 2.4.7 with 30+ extensions, reported by scandiwebCase study reports +47.8% conversions, +39% revenue, +25.5% average engagement time and 93 to 99 PageSpeed scores with green Core Web Vitals across devices. The 2.4.7 target and the extension count are published on the service page card rather than inside the case studySource
THKMagento 1 Enterprise to Magento 2 Commerce B2B with multiple custom modules, grouped products, custom contact forms and shipping methods, launched November 2019. Reported by Rocket WebCase study reports improved overall website performance and a notable checkout improvement showing an increase in customer retention. No measured figure is published beside either statementSource
Gopher SportFrontend rebuild off a heavily customised Luma theme, with eCommerce Analytics, Customer Specific Pricing and Share Cart carried across and Algolia and Yotpo compatibility modules built. Reported by Rocket WebCase study reports HTTP requests down from 359 to 90, Core Web Vitals from failed to passed, INP from 181ms to 95ms, CLS from 0.27 to 0.02, TTFB from 1.4s to 1.1s, LCP from 2.5s to 2.1s and accessibility from 62 to 89. No Magento version pair is publishedSource
PoolPro UK, Dry Wall Tools Direct, Pen House India and seven moreTen named live stores published with the source and target version beside each: three from 2.2.6 to 2.4.4, three aironboard domains from 2.4.1 to 2.4.7-p4, otpclothing.com from 2.4 to 2.4.7-p3, mudmayhem.ca and hipenchic.nl from 2.3 to 2.4 and allemotoronderdelen.nl from 2.3 to 2.4.7-p2. Reported by MeetanshiNo measured outcome is published beside any of the ten. This is the most version-explicit portfolio in the ranking and the least quantifiedSource
GSM55Magento 2 migration with a PWA frontend. Reported by OnilabProject card reports 40,000 products and 2.5 million customers migrated, a custom order-history migration solution, 10+ custom extensions and 5+ third-party modules migrated and configured, deployment downtime reduced to zero seconds and a 55% conversion increase on mobile. No version pair is published on the cardSource
VapeMateMagento 2 migration with technical SEO work and an enterprise ERP integration. Reported by OnilabProject card reports a 37% boost in Google organic traffic and a threefold reduction in mobile store loading time. No version pair is published on the cardSource
Rogers & HollandsMagento SEO programme rather than an upgrade. Reported by Rocket WebPortfolio card reports +33% revenue increase and +15% clicks increaseSource
Not publishedRocket Web publishes a regression suite figure for one unnamed client store, which is the only test-coverage number in this ranking124 granular tests distilled into 38 curated cases, running against production behind three independent safety layers, with a real order placed as the final validation step. The client is not namedSource
Not publishedLitExtension, Customer Paradigm, Wagento, Plumrocket, BelVG and MageAnts each publish upgrade work without a named client, a version pair and a measured outcome attaching to the same piece of workCustomer Paradigm's only upgrade figure is a developer stating he has done 15 in the past year. MageAnts publishes 80+ upgrades delivered. Wagento and BelVG name clients only inside testimonials. Plumrocket's case study titles did not render in the served HTML of the page read. Counts and testimonials are recorded and are not scoredSource

6 In detail

Who promises zero downtime, and who publishes a way back

Six of the ten companies on this page promise zero downtime, zero data loss or both, in those words, on the page a buyer would open first. Wagento publishes zero downtime and no data loss as headline commitments. MageAnts publishes zero data loss, full backup protection and minimal or no downtime in its hero and calls the method a zero downtime upgrade approach. Plumrocket publishes zero downtime and no data loss and guarantees that sales will not be affected. Meetanshi publishes zero disruption to the live store and zero data loss at deployment. BelVG publishes that nothing will be lost on the way. scandiweb publishes that zero downtime and no data loss is the standard it works to on every upgrade.

Three companies publish a rollback plan. scandiweb publishes a rollback path ready on every release, a planned go-live window and a recovery time, a return to the previous version in minutes rather than a repair on live traffic. Rocket Web publishes that the cutover plan states the exact behavior, the owner, the rollback point and the communication before launch night, inside a planned low-traffic window. LitExtension publishes a rollback plan, rollback conditions named inside the upgrade plan, and a pre-launch review that itemises freezes, synchronization, traffic changes and rollback conditions.

Put those two lists beside each other and only one company appears on both. scandiweb is the only entry here that makes the promise and also publishes what happens when the promise fails. Five of the six who promise it publish no rollback position at all on the pages read, and in four of those five the nearest thing to a fallback is a database backup, which is a precaution rather than a plan: a backup tells you the data still exists somewhere, not how long the store is down while somebody decides to use it.

The inversion runs the other way too, and it is the more interesting half. The one company on this page that refuses the promise publishes the most complete cutover language in the lane. LitExtension states that it does not describe every project as zero downtime, that actual downtime depends on architecture, data-change volume, integrations, infrastructure and the final synchronization plan, and that the objective is to minimize disruption without guaranteeing something the implementation cannot support. It applies the same discipline twice more, stating that password-hash and payment-token portability depends on the source platform and will be confirmed early rather than promised, and that no provider can guarantee unchanged search rankings. Rocket Web publishes the same caveat independently, that some businesses need a short read-only or checkout pause while final orders synchronise, and names it in the cutover plan rather than hiding it.

For a buyer, the practical reading is that the sentence to look for is not the promise. It is the paragraph after it. Ask for the cutover plan before contracts, and ask three questions of it: what is the window, who decides to roll back, and how long does the rollback take. Three of the ten companies here can answer all three from a page that is already published. Six of them promise an outcome that depends on the answers.

This page treats the two differently on purpose. A promise of zero downtime earns nothing on the rollback and cutover criterion, because it states a hoped-for result rather than a method. A development copy, a named window, a rollback plan and either its contents or its recovery time earn 4 points each. That is why four companies making loud uptime promises sit on 4 of 16, and why the criterion's full marks went to a company that declines to make the promise at all.

7 Methodology

How this was put together

Ten companies were scored out of 100 against six weighted criteria, all six of them about upgrade engineering: custom code and extension survival at 24, regression testing at 18, rollback and cutover at 16, published cost and duration at 16, post-upgrade ownership at 16 and evidence at 10. Every criterion is scored by counting published components rather than by judgement, and every ladder is printed in the criteria table above so a reader can recompute a score or disagree with a weight. The ranking is the score order with no adjustment. Each company was read from its own website on 24 September 2026 and every entry links the page it was read from. Where a company does not publish something, that component scores nothing rather than being estimated from a directory, a review site or an inference, and this page says the fact was not found on the pages read rather than claiming it is absent from the site, because nobody has read every page. A figure that renders only inside a customer testimonial is recorded as a testimonial and never scored as a commitment. A figure that renders only inside a graphic that the served HTML does not carry is treated as not found rather than as absent, which applied to two process diagrams. No partner tier is scored here and none is asserted as a directory fact: hyva.io could not be reached from this machine at all, failing TLS negotiation on two separate clients, so the full Hyva register was never read, and a tier that only some companies were checked against is not a ranking. Where a company states a tier on its own site it appears in prose as that company's own statement and earns nothing. One domain was dropped because this machine's network returned a substitute page for it under HTTP 200, and seven more were dropped because they returned a security challenge rather than a page, on the principle that an unread page is not evidence either way. The heaviest criterion is the one the lane is about, whether a store full of other people's code survives, and a sensitivity test was run before publishing: across every weighting that keeps that criterion heaviest and gives each of the six at least 8 points, the leader's margin over second place never fell below about 6 points. Treat this as a shortlist rather than a substitute for reference calls, a code audit and a security review.

8 Questions

Questions buyers ask before an upgrade

Will my custom code and extensions still work after a Magento upgrade?

That is what the compatibility audit is for, and only two companies on this page publish one complete enough to answer the question before you sign. scandiweb publishes that the first thing you receive is a written compatibility verdict, dated and sequenced, listing every module that will break on 2.4.9, having mapped your version, custom code, extensions, integrations and hosting. LitExtension publishes the same idea as a triage: the assessment identifies which parts can be upgraded, which should be replaced and which should be retired, and it documents the scope and the exclusions before execution. Everyone else on this page promises extension compatibility as an inclusion. Ask for the audit output as a document, not as a reassurance.

What happens to an extension whose vendor has abandoned it?

Four companies here publish an answer. scandiweb publishes that abandoned extensions are replaced with maintained ones, and that a maintained replacement is recommended so you finish on a clean supported store. LitExtension publishes four possible outcomes for an unmaintained module: replacement, refactoring, redevelopment or removal. Onilab publishes that where third-party functionality has to be kept it either selects a substitute among Magento 2 solutions or configures and customises the existing one. Plumrocket publishes that it will update the third-party code itself for an additional fee. A page that only promises your extensions will work has not told you which of those five things will happen to the one that cannot.

How long does a Magento upgrade take?

Three companies here band it by how far behind you are. scandiweb publishes one to two weeks for a patch update, two to four weeks from 2.4.7 or 2.4.8, four to six weeks from 2.4.4 or 2.4.6 and six to ten weeks from a store still on 2.3. MageAnts publishes 7 to 11 days from 2.4.x, 10 to 13 days from 2.3.x and 12 to 15 days from 2.2.x, with an overall range of 7 to 15 working days. Meetanshi publishes delivery in less than a week. Wagento publishes anywhere from a few days to a few weeks. Onilab publishes four to six months, because its upgrade lane is a Magento 1 replatform rather than a version jump. LitExtension declines to publish one at all, stating that there is no reliable universal duration.

What does a Magento upgrade cost?

Four of the ten publish a figure of some kind. scandiweb publishes a table putting a security patch cycle at a typical market figure of $1,000 and a version upgrade to 2.4.9 at a typical market range of $15,000 to $35,000, with its own price fixed after the audit and free for retained clients. Meetanshi lists the service at $299 on the page as read, with surcharges by source version. Rocket Web publishes project starting prices of $49,500 for a new build, $25,000 for a Hyva frontend and $3,500 for a rescue, and four monthly care plans from $3,500 to $14,500, though an upgrade itself is scoped as a fixed-price project with no published band. Onilab publishes a migration range of $7.7k to over $100k. The other six publish no figure on the pages read.

Does anyone price the upgrade by how far behind my version is?

Meetanshi does, in the most granular way read for this page. Its version selector adds $80 to the listed price from a Magento 2.4.x source, $280 from 2.3.x, $520 from 2.2.x, $760 from 2.1.x and $1,000 from 2.0.x, and from a Magento 1 source it runs from nothing at 1.9.x up to $1,020 at 1.3.x. Plumrocket publishes the same logic without the numbers, stating that pricing varies with the number of conflicting third-party extensions and the version you are upgrading from. scandiweb bands the timeline by version distance rather than the price, and quotes the price fixed after the audit.

What is the difference between a Magento update and a Magento upgrade?

scandiweb publishes the cleanest distinction of the pages read: an update applies patches inside your current release line, for example 2.4.7-p3 to 2.4.7-p6, while an upgrade takes you between release lines, for example 2.4.7 to 2.4.9, and changes your PHP and platform requirements. It adds the part that matters commercially, that the two are often advertised as one service but that upgrades are where extensions and custom code break, so they need staging and full regression testing. Wagento and LitExtension publish the same split in their own words.

Will my store be down during the upgrade?

Six of the ten companies on this page publish a promise that it will not be, and only three publish a rollback plan for the case where something goes wrong. LitExtension is the only one that declines the promise outright, stating that it does not describe every project as zero downtime because actual downtime depends on architecture, data-change volume, integrations, infrastructure and the final synchronization plan. Rocket Web publishes the middle position, that some businesses stay fully available and others need a short read-only or checkout pause while final orders synchronise. If a page promises zero downtime and does not say what the window is or what happens if the deploy fails, that is the gap to ask about.

What should a rollback plan actually contain?

Read the three published on this page and take the union. Rocket Web publishes that the cutover plan states the exact behavior, the owner, the rollback point and the communication before launch night. scandiweb publishes the window and the recovery time, a planned deploy window with a rollback path ready and a return to the previous version in minutes rather than a repair on live traffic. LitExtension publishes the pre-launch review, which itemises outstanding issues, deployment steps, content and configuration freezes, recent-data synchronization, maintenance requirements, traffic changes, rollback conditions and post-launch checks. Between them that is a window, an owner, a trigger condition, a recovery time and a communication plan. A database backup is not any of those five.

Is a backup the same thing as a rollback?

No, and the distinction decides four scores on this page. A backup tells you the data still exists somewhere. A rollback plan tells you who decides to use it, at what point, and how long the store is unavailable while they do. Plumrocket, Meetanshi, MageAnts and Wagento all publish a backup and none publishes a rollback plan on the pages read. Plumrocket's own sequence is worth noticing: the backup is step six of seven, after testing and immediately before launch, which is a sensible place for it and still not a plan for what happens after the switch is thrown.

How is regression testing usually scoped, and who publishes automation?

One company publishes automation as a contractual inclusion. Rocket Web's $3,500 a month plan includes an automated full-regression test suite run against every change and every patch, and its process page publishes a coverage figure for one client store, 124 granular tests distilled into 38 curated cases behind three independent safety layers, with a real order placed as the final validation step because the suite does not replace one. LitExtension publishes that automated checks and manual review are both used, across fourteen named areas ending in merchant user acceptance. scandiweb publishes the scope rather than the mechanism, testing catalog, checkout, payments, integrations and performance end to end with the merchant signing off on staging. MageAnts publishes four areas and labels its review manual.

Who checks that the upgrade did not break my search rankings?

scandiweb publishes the most specific position: its SEO team audits redirects and structured data on staging, then measures Core Web Vitals before and after go-live, and it states plainly that upgrades change URL structures and template markup and that either can lose rankings within weeks. LitExtension publishes the counterweight, that the upgrade plan can include URL keys, rewrites, meta data, canonical data and 301 redirects, and that no provider can guarantee unchanged rankings because the outcome also depends on content, internal links, performance, rendering, structured data and indexation. MageAnts publishes SEO-safe upgrade as a hero claim with no method beside it on the page read.

Who stays with the store after go-live, and for how long?

Three companies publish 30 days and one publishes something different in kind. Meetanshi, MageAnts and LitExtension each publish 30 days of post-upgrade support, LitExtension's qualified as for eligible projects. Rocket Web publishes 30 days of stabilization plus four priced monthly care plans and, unusually, an exit position: the client owns the repositories, data, infrastructure accounts, deployment access, documentation and test suite, and if the relationship ends the documentation and access do not become leverage. scandiweb commits to the next upgrade rather than to a window after this one, publishing that every future version upgrade is free for as long as it builds with you, applied by the same engineers, with Adobe patches applied on release without a ticket being raised.

Does anyone publish a response time for an upgrade partner?

Four do. BelVG publishes the fastest figure in this ranking, a project manager responding within 1-2 working hours and available at all times for urgent matters, plus patch releases communicated within 24 hours and patches applied within 72. Rocket Web publishes response as a priced tier, next business day for urgent and same business day for emergencies, with security patches applied within five days of release. scandiweb publishes a first response within 24 hours with showstoppers triaged first. LitExtension publishes a 24-hour response time commitment in its service table. Everyone else describes response in adjectives.

Does anyone publish a resolution target, not just a response time?

No. Not one of the ten companies on this page publishes a target for how long a defect takes to fix, and that includes the company at the top of it. scandiweb's support page frames itself around two questions, how fast do you respond and what does it cost, and answers both without a fix time. It is the single component it fails on post-upgrade ownership and the reason it scores 13 of 16 there rather than 16. If a resolution target matters to you, nobody here has published one and you will have to get it into a contract.

Does anyone publish advice not to upgrade?

Three, in different forms, and it is a useful signal. Plumrocket publishes that it sometimes does not recommend upgrading as soon as a release lands, because third-party vendors need time to make their products compatible, and that with a long extension list the rational choice can be to wait. LitExtension publishes when a clean-store rebuild beats an in-place upgrade, naming unsupported extensions, dependency conflicts, outdated custom code and a planned redesign. scandiweb publishes the version threshold: anything from 2.4.3 upward is a version upgrade, below 2.3 the frontend usually needs rebuilding alongside the core, and Magento 1 is a replatform rather than a version bump.

My store was built by someone else and I do not know what they did to it. Where do I start?

With a read of the code, and two companies here publish one before quoting. Customer Paradigm publishes the sharpest version of the problem, that a store may not be upgrade safe if the original developer did not build the theme and custom features properly, and publishes the instrument it uses, a quick code review file that reports what version of Magento is running, what core files have been modified and what extensions are installed. Modified core files is the item nobody else on this page names, and it is usually the one that decides how bad the upgrade will be. Rocket Web publishes a free store assessment whose findings you keep either way, and states that it uses platform standards, isolates custom functionality in modules and does not modify core code.

How do I know the upgrade will not quietly drop a workflow nobody wrote down?

Onilab publishes the most direct answer, as a compulsory stage rather than an option. Its wireframing step exists to document 100% of store functionality, every feature and every interaction, so the business logic can be recreated on the new store, ending in functional documentation with the final wireframes, and it states that teams skipping the step are why merchants arrive having already had a bad migration. Customer Paradigm publishes the acceptance criterion for the same risk, that its testers compare the live site to the development site page by page and that the job is not done until the new site has the same feel and functionality as the old one.

Which Magento version should I upgrade to?

Magento 2.4.9 is the current minor release, generally available since May 2026, and LitExtension links Adobe's own release notes and system requirements rather than asserting the dates itself. scandiweb publishes 2.4.9 as the target for almost every upgrade it scopes, with PHP 8.5 support, Symfony 7.4 and support running to 31 May 2029, and warns that 2.4.9 drops PHP 8.2 and raises its platform stack, so hosting, extensions and custom code have to move in step. Wagento publishes that the right target depends on your extension compatibility and PHP requirements, assessed in its free report. MageAnts still advertises 2.4.8 as the target throughout its page, which is worth confirming on a call. Every version date here is agency published, so check it against Adobe's own release documentation before a budget rests on it.