Contact us
Start building

Secure your production apps
for 15 years

Get 15 years of security patches and browser compatibility updates for your current version. Extended Maintenance gives you long-term stability and lets you upgrade when you’re ready, not when the framework forces you to.
GET 15 YEARS OF MAINTENANCE
5 (2)

Your application stays secure, compatible, and production‑ready

From security patches and browser compatibility updates to framework and integration enhancements. Vaadin Maintenance ensures your application remains stable, secure, and compatible — today, next year, and well beyond the next decade.
Security updates
Patches for known vulnerabilities to keep your application protected.
Bug fixes
Corrections to framework issues that impact stability or functionality.
Secure by design
Regular updates to maintain seamless functionality across all major browsers, ensuring a consistent user experience.
Components for real apps
Minor refinements that reduce friction in development and operations.

Consistent releases,
long-term stability

Vaadin's release model ensures a steady flow of new features and improvements while prioritizing stability, easy upgrades, and long-term maintainability. It consists of three types of releases:
Weekly
Maintenance Releases
It deliver critical bug fixes and patches between minor releases. These updates are trivial to apply and released weekly to maintain stability and address security issues quickly.
  • e.g. 24.4.2
  • Bug fixes
  • Trivial update
  • Immediately replaces previous release
QUARTERLY
Minor Releases
It occurs quarterly, introducing new features and improvements while maintaining backward compatibility whenever possible. Bug fixes are applied to the latest version, and critical security
  • e.g. 24.4.2
  • New features
  • Easy update
  • Previous minor maintained for 1 month.
Or up to 15 years with Extended Maintenance for 24 minor versions.
Yearly
Major Releases
It occurs approximately every 12 to 24 months and may introduce breaking changes, such as Java version upgrades or removal of deprecated features, to keep the framework modern...
  • e.g. 24.0
  • New features + removed deprecations
  • Might require rework
  • Previous major maintained as open source for 3 months

Extended Maintenance Coverage

Extended M Timeline

Long-term protection for every version

Whether you're on legacy Vaadin 7 or a locked Vaadin 24 minor version, Extended Maintenance gives you up to 15 years of continued security and stability.
GET 15 YEARS OF MAINTENANCE
Version

Vaadin 7

Version: Core framework with Pro and official add-ons.
Supports Java 7–25 and Spring Boot 3.
Coverage Scope: Feb 2019
End of Free
Maintenance: 2032

Vaadin 8

Version: Core framework with Pro and official add-ons.
Supports Java 8–25 and Jakarta Servlet 6.0 (via MPR).
Coverage Scope: Feb 2022
End of Free
Maintenance: 2032

Vaadin 14

Version: Security patches, browser compatibility, and bug fixes. Ideal for Java 11 and Spring Boot 2.x.
Coverage Scope: Feb 2024
End of Free
Maintenance: 2034

Vaadin 23

Version: Security patches, browser and JVM updates. For apps not yet ready to move to V24+.
Coverage Scope: Feb 2024
End of Free
Maintenance: 2037

Free vs Extended
Maintenance

Upgrade at your own pace with the coverage level that fits your needs.
Free Maintenance
Each major release includes 3 months of free maintenance after the next major release, and 1 month after the minor release. During this period, you receive security updates and critical bug fixes at no cost — giving your team time to plan the upgrade.
  • Major Version Support:
  • 6 months after next major release
  • Versions covered:
  • Latest minor only (e.g., V24.3)
  • Latest Minor Version:
  • Supported
  • Past Minor Versions (e.g., 24.2):
  • Not Supported (End of Life)
  • Security Patches:
  • Latest release only
Recommended
Extended Maintenance
Extended Maintenance provides long-term stability and security, with 15 years of coverage. Ideal for long-lived, regulated, or carefully planned projects that require ongoing access to critical updates.
  • Major Version Support:
  • 15 Years
  • Versions covered:
  • All majors (V7, V8, V10, V14, V23, V24+) 
+ any minor version (24.0-24.3)
  • Latest Minor Version:
  • Supported
  • Past Minor Versions (e.g., 24.2):
  • Supported (only for 24.0-24.3)
  • Security Patches:
  • Backported to your specific version
GET 15 YEARS OF MAINTENANCE

Navigating your options forward after maintenance ends

Applications that reach end of maintenance still run — but become exposed to risks such as unpatched security vulnerabilities, browser incompatibilities, and evolving platform requirements. Here are your options.
1 Upgrade to latest
The recommended path. Stay current with the latest release for new features, performance improvements, and active maintenance.
Upgrade guide
2 Extended Maintenance
Not ready to upgrade? Get up to 15 years of continued coverage — security patches, browser updates, and stability fixes on your current version.
Get 15 years of maintenance
3 Modernization help
Need hands-on assistance?
Vaadin's expert services can help you plan and execute your migration with minimal disruption.
Modernization services

Frequently asked questions

Vaadin core is open source and free. However if you need more than that, you can select a plan that meets the requirements of your organization.
NEED HELP? CONTACT US
What is Vaadin Extended Maintenance?

Extended Maintenance is a paid service that provides up to 15 years of continued security patches, browser compatibility updates, and critical bug fixes for your current Vaadin version. It lets you keep production applications secure and stable without being forced to upgrade on the framework's default timeline.

Why would I need Extended Maintenance?

If your application is long-lived, deployed in a regulated environment, or your team isn't ready to upgrade to a newer major or minor version, Extended Maintenance ensures you continue receiving security patches and browser compatibility fixes. Without it, applications that reach end-of-life still run but become exposed to unpatched vulnerabilities and potential browser incompatibilities.

What does Extended Maintenance cover?

Extended Maintenance includes:

  • Security patches — fixes for known vulnerabilities to keep your application protected.
  • Bug fixes — corrections to framework issues that impact stability or functionality.
  • Browser compatibility updates — regular updates to maintain seamless functionality across all major browsers.
  • Minor refinements — small improvements that reduce friction in development and operations.

What versions of Vaadin are covered?

Extended Maintenance is available for both legacy and current versions: Major versions of Vaadin 7, Vaadin 8, Vaadin 14, Vaadin 23, Vaadin 24 and Minor versions within V24 (e.g., 24.0, 24.1, 24.2, 24.3)

What's included in Vaadin's free maintenance?

Each major release includes free maintenance for a limited window after the next major release — approximately 3 months. During this period you receive security updates and critical bug fixes at no cost. For minor releases, free maintenance lasts about 1 month after the following minor release. Only the latest minor version is covered under free maintenance.

Is my application at risk if I don't have any maintenance coverage?

Yes. Without maintenance, your application won't receive patches for newly discovered security vulnerabilities or fixes for browser compatibility issues. This risk grows over time as browsers evolve and new threats are discovered.

Can I switch from Extended Maintenance to an upgrade later?

Absolutely. Extended Maintenance is designed to give you the flexibility to upgrade on your own schedule. When your team is ready, you can move to the latest Vaadin version — and Vaadin offers upgrade guides and modernization services to help with the transition.

Ready to secure your apps
for the next 15 years?

Every day on an unpatched version accumulates technical debt and security risk. Let's talk about Extended Maintenance for your applications.

Contact us to talk about extended maintenance.