About
Broadleaf Commerce is a source-available, composable ecommerce platform founded in 2008 and headquartered in Plano, Texas. The privately held, employee-owned company is built on Java and the Spring Framework, supporting MACH architecture — Microservices, API-first, Cloud-native, Headless — and counts Major League Baseball, O'Reilly Auto Parts, and The Container Store among its customers, alongside its 2022-launched Broadleaf Commerce Cloud managed PaaS. As a dotCMS Technology Partner, Broadleaf provides the commerce engine — catalog, cart, checkout, pricing, and promotions — paired with dotCMS as the content and experience layer, making the combined stack a best-of-breed composable option for customers like Jostens needing product configurators and personalization across content and commerce surfaces.
Related Posts
Managing Users, Roles and Tools Just Got Easier
Manage access in dotCMS with new dedicated Roles, Tools and Users screens. Create roles, grant tool groups, customize admin navigation, and manage users in a searchable table, all under Settings with a modern, unified admin experience.Manage access in dotCMS with new dedicated Roles, Tools and Users screens. Create roles, grant tool groups, customize admin navigation, and manage users in a searchable table, all under Settings with a modern, unified admin experience.
Marc Boutillette
Outbound Product Manager
Go from AI that Assists to AI that Acts
Put agents to work with one command:npx dotcms agent setup. Connect Claude, Cursor, VS Code, Codex, and more, then let agents safely search APIs, execute tasks in a sandbox, create and verify pages, manage assets, and operate under your existing roles, permissions, and workflows.
Marc Boutillette
Outbound Product Manager
The Timeline Was Written by the Attacker
A state-linked supply chain attack, AI-built exploits active in the wild today, and why dotCMS is doubling down on open source.
Stephen Freudenthaler
Director of Engineering
Is dotCMS affected by the PHP2Shell vulnerabilities?
No. dotCMS doesn't run on PHP, so dotCMS Cloud and self-hosted dotCMS are not affected by CVE-2026-109618 or CVE-2026-109619.
Freddy Montes
VP of Product