--- title: "Shopware 5 EOL: The Decision Shop Owners Now Face" description: "Shopware 5 has been end-of-life since July 2024. The risks of staying, the three realistic options — and how to make the call properly." canonical_url: "https://nuonic.de/en/insights/shopware-5-end-of-life" last_updated: "2026-08-21" --- Since July 31, 2024, Shopware 5 has [officially been end-of-life](https://www.shopware.com/en/migration/shopware-5-to-shopware-6/): no security updates, no bug fixes, no vendor support. Three options remain — hardened interim operation, migration to Shopware 6, or replatforming to another system. Two years on, many shops still run on Shopware 5, and by now every month of continued operation isn't a saving, it's an unquantified liability. ## What end-of-life really means End-of-life sounds like a date, but it's a process that keeps getting worse: security holes stay unpatched, PCI DSS and GDPR compliance tip over, the plugin and payment ecosystem dies off, and every further investment flows into a platform without a future. The shop won't fail tomorrow — but the risk grows every month while your options shrink. The four mechanisms in detail: - **Security holes stay open.** When a vulnerability is found in Shopware 5 or one of its dependencies, nobody patches it anymore. Every published vulnerability is an invitation with assembly instructions. - **Compliance tips over.** If you process card payments, [PCI DSS](https://www.pcisecuritystandards.org/standards/pci-dss/) requires supported software. The [GDPR](https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng) likewise demands state-of-the-art protection in Article 32 — a system without security patches is the opposite of that. - **The ecosystem dies with it.** Plugin vendors no longer maintain their Shopware 5 extensions, payment providers switch off legacy interfaces, and modern PHP versions and current server environments become a compatibility risk. - **Every investment is sunk.** Every line of custom code still written for Shopware 5 today is money spent on a platform without a future. Whoever migrates under pressure migrates expensively. ## The three options — an honest assessment Three paths are open: harden what you have and buy time, migrate to Shopware 6, or replatform to another system. For most Shopware 5 merchants, migrating to Shopware 6 is the logical path — the data world is related and the team knows the vocabulary. The other two options have clear but narrow use cases. **1. Hardened interim operation.** If you can't take on the migration right away, harden what you have: isolate systems, put a WAF and monitoring in front, freeze the plugin inventory, test your backups. That buys time — nothing more. Interim operation is a bridge with an expiry date, not a strategy. What you actually forfeit without Shopware 6 in the meantime — compliance from the core, GEO visibility — is [broken down separately](/en/insights/shopware-6-migration-necessary). **2. Migration to Shopware 6.** For most Shopware 5 merchants the logical path: the data world is related, the team knows the vocabulary, and Shopware 6 isn't a polished-up version but a new architecture — API-first, with the Rule Builder and B2B capability in its core. Important: it's a [migration, not an update](/en/shopware-agency/migration). Data and business logic move; old code stays behind. Planning it as an update is how budgets fail. **3. Replatforming to another system.** The EOL moment is also the right time for the fundamental question. If you have no custom processes, no B2B and no integration landscape, a cloud site builder may be the more honest choice. Once real process requirements appear, the calculation flips back — that threshold should be calculated, not guessed. ## How to decide now The decision doesn't need months — it needs a clean four-step inventory: stock-take of the plugins and integrations that carry revenue, a price on downtime and data-breach risk, a target picture without legacy, and a realistic budget frame. With those four answers, every migration quote becomes comparable — and oversized or under-scoped offers become obvious. In detail: 1. **Take stock:** Which plugins, which custom code, which integrations actually carry revenue? What is dead inventory? 2. **Price the risk:** What does a day of downtime cost, what does a data breach cost? That's the reference figure for every migration quote. 3. **Define the target:** Migration is the best moment to cut legacy — if you rebuild the status quo one-to-one, you pay for ten years of mistakes a second time. 4. **Frame the budget realistically:** Replatforming projects start at around €30,000 and scale with data volume and integrations. The cost blocks in detail are on our [pricing page](/en/shopware-agency/pricing). For the execution itself — from data migration through SEO preservation to a go-live without downtime — our [migration page](/en/shopware-agency/migration) covers the complete process including a checklist. And for how such a switch plays out in practice, see the [Handelskönig replatforming](/en/case-studies/handelskoenig-focus): JTL-Shop to Shopware 6, with zero breaks in data, SEO and operations. Shopware 5 is past its end. The only open question is whether you plan the switch — or it plans you. ### Official sources - [Shopware: migration from Shopware 5 to Shopware 6 – support ended July 2024](https://www.shopware.com/en/migration/shopware-5-to-shopware-6/) - [Shopware release policy and support cycles](https://developer.shopware.com/release-notes/) - [PCI Security Standards Council: PCI DSS](https://www.pcisecuritystandards.org/standards/pci-dss/) - [General Data Protection Regulation – Regulation (EU) 2016/679](https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng)