Kadence

United States · www.kadencewp.com · 20 vendors

Kadence WP develops WordPress themes and plugins, such as Kadence Theme and Kadence Blocks, to enable users to create customizable, fast, and responsive websites. The company aims to simplify website development by providing user-friendly tools for both beginners and experienced developers.

Resilience scores

Disruption prediction

Kadence has an estimated 11% probability of disruption in the next 6 months.

11 of Kadence's 20 vendors monitored for disruptions.

Technology vendors

Services catalogue

4 services in catalogue across 3 categories; runs on 20 sub-vendors.

Insights

Last updated 2026-08-02 · revision 2

20 direct vendors, 269 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Kadence exhibits medium migration readiness. The primary challenge stems from its core technology stack, which is built around WordPress and PHP. While widely used and supported, this architecture is typically monolithic and not inherently cloud-native, containerized, or microservices-based. A full migration to a modern, distributed cloud architecture would therefore necessitate significant re-architecture and development efforts for their core product offerings. Additionally, crucial data regarding regulatory environment, data residency requirements, and financial stability (which would impact the ability to fund a large-scale migration) is not provided, introducing uncertainty into the assessment. While 'Total Vendors: 0' is noted, the 'Total Services: 20' suggests a potentially complex service landscape, and the deep integration with the WordPress ecosystem represents a form of platform lock-in for their business model. On the positive side, Kadence utilizes modern frontend technologies like React and is developing an AI-powered site builder, indicating a forward-looking approach within its chosen ecosystem. WordPress itself is highly adaptable and can be hosted effectively on various cloud infrastructures (e.g., IaaS/PaaS offerings), making an infrastructure-level migration feasible, even if a full platform re-architecture is a larger undertaking. The geographic diversity of their implied vendors could also offer flexibility in sourcing cloud services.

Compliance

5 in-scope frameworks identified; showing 3.

PCI DSS (source) — Assessment Required

Kadence processes subscription payments (plans at $99, $299, $499/year) and its parent company Liquid Web explicitly states that its data centers are assessed for PCI-DSS compliance. Kadence's WooCommerce integration (Shop Kit) enables e-commerce functionality on customer websites, which may involve payment card data flows. The parent company's data center page states: 'Hosting data centers are regularly assessed for HIPAA, HITECH, PCI-DSS, GDPR, and Privacy Shield compliance.' However, no specific PCI-DSS certification level (SAQ, ROC) or QSA report has been publicly identified for Kadence's own payment processing or the Kadence software platform. Risk is Medium because payment processing is involved at the subscription level and WooCommerce integration is a core product feature.

Evidence: https://www.liquidweb.com/data-centers/, https://www.liquidweb.com/software/kadence/, https://software.liquidweb.com/cart/

SOC 2 (source) — Assessment Required

Kadence is a SaaS/software product (WordPress plugin and theme ecosystem) sold via subscription, which typically triggers SOC2 relevance for cloud service providers. The parent company Liquid Web displays an AICPA SOC compliance badge on its website, and also displays an SSAE-16 audit compliance badge, suggesting that SOC audit processes exist at the parent/hosting level. However, no SOC2 Type I or Type II report specific to Kadence or its software subscription platform (software.liquidweb.com) has been publicly identified. Risk is Medium because enterprise customers increasingly require SOC2 reports from SaaS vendors, and the absence of a publicly available SOC2 report for Kadence's software platform could be a barrier to enterprise sales and a compliance gap.

Evidence: https://www.liquidweb.com/data-centers/, https://www.liquidweb.com/software/kadence/, https://www.liquidweb.com/policies/privacy-policy/

ISO 27001 (source) — Assessment Required

No ISO 27001 certification has been publicly identified for Kadence or its parent company Liquid Web/Nexcess Corp. The parent company displays SSAE-16, AICPA SOC, HIPAA, and other compliance badges, but ISO 27001 is not among them. ISO 27001 is an internationally recognized information security management standard that is increasingly expected of SaaS and cloud service providers, particularly for enterprise customers and EU/UK market access. The absence of ISO 27001 certification represents a medium risk, as it may limit enterprise sales opportunities and could be a gap in the information security management framework, especially given the company's EU data center operations and global customer base.

Evidence: https://www.liquidweb.com/data-centers/, https://www.liquidweb.com/software/kadence/, https://www.liquidweb.com/policies/privacy-policy/

Financials

Three-year financials

Financial Resilience Score: 6/10

Kadence is a private WordPress product brand within a PE-backed US hosting/software group (Liquid Web / Nexcess Corp, historically backed by Madison Dearborn Partners). No audited financials or SEC filings exist at the Kadence, Liquid Web, or Nexcess level. This opacity limits confidence in any resilience assessment. However, the business model exhibits several favorable traits: recurring annual subscription revenue (Essentials $99/yr, Pro $299/yr, Elite $499/yr), a large installed base of 600,000+ websites providing renewal and upsell potential, and a free-tier funnel via the WordPress.org repository that lowers customer acquisition costs. Kadence benefits materially from parent-group support, including cross-sell into Nexcess/Liquid Web hosting and the broader StellarWP portfolio (LearnDash, The Events Calendar, GiveWP, iThemes Security, etc.). Diversification across theme, blocks, WooCommerce Shop Kit, security, memberships, and multi-site management reduces single-product dependency. Third-party estimates (ZoomInfo, Growjo, RocketReach) place revenue in the low millions ($5M–$25M range) but are unaudited model outputs. Offsetting these strengths are meaningful risks: 100% exposure to the WordPress ecosystem (highlighted by the 2024–2025 WP Engine/Automattic dispute), intense competition from Elementor, Divi, Astra, Bricks, Beaver Builder, and native Gutenberg full-site editing, PE ownership implying an eventual monetization event, and apparent lag on AI-native site building (Kadence AI marketed as 'coming soon'). Overall resilience is moderate—supported by parent backing and recurring revenue but constrained by platform concentration and disclosure opacity.

Key strengths: Recurring annual subscription revenue model with tiered pricing ($99/$299/$499), Large installed base of 600,000+ websites, Backed by PE-owned parent (Liquid Web / Nexcess Corp; Madison Dearborn Partners), Free-tier WordPress.org distribution funnel reduces CAC, Diversified product suite (theme, blocks, WooCommerce, security, memberships, multi-site), Cross-sell within StellarWP portfolio and Liquid Web/Nexcess hosting

Risk factors: 100% platform concentration in WordPress ecosystem, Intense competition from Elementor, Divi, Astra, Bricks, Beaver Builder, native Gutenberg, Private-equity ownership implies eventual monetization/exit event, No public financial disclosures — high opacity for counterparties, AI disruption risk; Kadence AI still 'coming soon', Strategic changes at Automattic/WordPress.org could compress value proposition

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report