Webflow, Inc.

United States · owned by Independent (United States) · webflow.com · 55 vendors

Webflow is an AI-native website experience platform that enables users to create, manage, and optimize websites visually without coding. The company provides a comprehensive platform for web design, content management, hosting, and website optimization.

Resilience scores

Disruption prediction

Webflow, Inc. has a 72% probability of disruption in the next 6 months.

Partial disruption reported (last checked 2026-09-18 15:25 UTC): Reports of 500 errors on some hosted sites

26 of Webflow, Inc.'s 55 vendors monitored for disruptions.

Technology vendors

Services catalogue

4 services in catalogue across 3 categories; runs on 55 sub-vendors.

Insights

Last updated 2026-06-08 · revision 11

55 direct vendors, 352 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Webflow exhibits high migration readiness, scoring 80 out of 100. This is largely due to its highly modern, cloud-native, and modular architecture. The company explicitly leverages AWS infrastructure and a MACH (Microservices, API-first, Cloud-native, Headless) architecture, along with modern frameworks like Next.js, Astro, and React. This technical foundation suggests a high degree of portability for applications and data, making it easier to adapt to new environments or scale existing ones. Financially, Webflow's strong revenue growth (doubling ARR in two years) indicates a healthy financial position, providing the necessary resources to fund complex migration initiatives. The company also maintains extensive regulatory compliance (GDPR, SOC 2, ISO, PCI-DSS, CCPA) and has established mechanisms for international data transfers (DPF, SCCs), which, while requiring careful management during migration, demonstrate a mature approach to data governance. The primary challenge for migration readiness lies in the inherent vendor lock-in associated with its foundational infrastructure. Despite the 'Vendor Relationships' data stating 'Total Vendors: 0' (which is a significant inconsistency), Webflow's 'Internal Tech Stack' clearly indicates a heavy reliance on Amazon Web Services (AWS) and Cloudflare. Migrating away from these core infrastructure providers would represent a substantial undertaking due to the deep integration of services and potential re-platforming efforts. While the MACH architecture promotes modularity, a full-scale migration from AWS to another cloud provider would still be complex and costly. The concentration of these critical infrastructure vendors in the United States also presents a geographic concentration risk, though both AWS and Cloudflare are globally distributed within their own ecosystems. Overall, the technical agility and financial strength position Webflow well for migration, but the dependency on key infrastructure vendors introduces a notable complexity.

Compliance

4 in-scope frameworks identified; showing 3.

ISAE 3000 (source) — Assessment Required

While Webflow maintains SOC 1 Type 2 and SOC 2 Type 2 certifications which are related assurance frameworks, specific ISAE 3000 compliance status is not clearly documented. As a cloud service provider, they may have ISAE 3000 relevant controls but this requires further assessment. Risk is medium due to uncertainty about specific ISAE 3000 compliance.

Evidence: https://trust.webflow.com/

SOC 2 (source) — Compliant

Webflow maintains SOC 2 Type II compliance, demonstrating strong operational controls over security, availability, and confidentiality. This is appropriate for their cloud services business model. Risk is low due to active certification and regular audits by independent third parties.

Evidence: https://trust.webflow.com/, https://webflow.com/security

ISO 27001 (source) — Compliant

Webflow is ISO 27001:2022 certified, demonstrating structured, organization-wide security controls and information security management systems. This certification is regularly audited and maintained. Risk is low due to active certification and comprehensive security framework implementation.

Evidence: https://trust.webflow.com/, https://webflow.com/security

Financials

Three-year financials

Financial Resilience Score: 6/10

Webflow is a venture-backed, late-stage private SaaS company with a credible mid-hundreds-of-millions ARR run-rate (~$200M as of 2024), blue-chip enterprise customer logos (Dropbox, DocuSign, NCR, Reddit, NYT, Spotify), and strong investor backing from Accel, Silversmith, CapitalG (Google), General Catalyst, and YC Continuity. The company has raised ~$335M+ in disclosed funding across Series A/B/C, with the last valuation marked at ~$4.0B in 2022 (reportedly flat in a 2024 extension). The company demonstrated capital discipline through two rounds of layoffs in 2023 (~1.5% then ~17% of headcount), pivoting to efficiency and Enterprise focus. Its subscription/SaaS model provides predictable recurring revenue, and ARR growth remained strong at ~50% in 2023 and ~30-35% in 2024. However, GAAP revenue, EBIT, net income, cash position, and shareholders' equity are not publicly disclosed, limiting external verification of solvency and profitability. Key risks include intense competition from Framer, Wix, Squarespace, WordPress/Elementor, and AI-first builders (Lovable, v0, Bolt); AI disruption to the visual no-code value proposition; macro sensitivity in SMB/mid-market segments; and down-round risk given the flat 2024 valuation. Profitability has not been confirmed publicly.

Key strengths: Blue-chip enterprise customer base (Dropbox, DocuSign, NCR, Reddit, NYT, Spotify, monday.com), Subscription/SaaS recurring revenue model with multi-tier pricing, Strong investor backing (Accel, CapitalG/Google, General Catalyst, YC Continuity, Silversmith), ~$335M+ cumulative funding raised across Series A/B/C, ARR growth of ~50% (2023) and ~30-35% (2024), Product moat: template marketplace, partner agencies, Webflow University, AI/AEO suite, Workforce restructuring completed in 2023 ahead of peers

Risk factors: Limited financial transparency - no audited financials, balance sheet, or cash position public, Competitive pressure from Framer, Wix, Squarespace, WordPress, and AI-first builders (Lovable, v0, Bolt), AI disruption to visual no-code value proposition, Macro sensitivity - SMB churn and mid-market marketing budget cyclicality, Down-round risk with flat ~$4B valuation since 2022, Profitability not publicly confirmed; 2023 layoffs imply cash burn, Two rounds of layoffs in 2023 (~17% combined headcount reduction)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report