Webnus

United States · webnus.net · 11 vendors

Webnus Inc. is a Toronto-based software company that specializes in creating WordPress themes and plugins. They develop tools such as the Modern Events Calendar plugin and the Deep theme, which help businesses build and manage websites, event platforms, and online stores. The company focuses on providing affordable, reliable, and user-friendly solutions for WordPress users.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 11 sub-vendors.

Insights

Last updated 2026-04-17 · revision 2

11 direct vendors, 171 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 3/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Webnus demonstrates low migration readiness, primarily due to its deeply embedded and monolithic WordPress ecosystem. The core products (Modern Events Calendar, Kata WordPress Theme, ShopPress) are built on WordPress, Elementor, and WooCommerce, creating significant platform lock-in. Migrating away from this stack to a more cloud-native, containerized, or microservices architecture would require extensive re-architecture and redevelopment, representing a high level of effort and cost. The internal tech stack of WordPress, PHP, and MySQL is not inherently designed for easy migration to modern cloud environments without substantial refactoring. While they use modern front-end technologies like React.js and integrate with various APIs, these do not mitigate the challenges of migrating the core backend and application logic. Crucially, financial stability data (revenue concentration, growth history) is unavailable, making it difficult to assess Webnus's capacity to fund a large-scale migration project. Similarly, the absence of specified regulatory environment and data residency requirements introduces uncertainty and potential complexities that would need to be addressed during any migration planning. While vendor geographic diversity is present, the primary lock-in risk stems from the foundational WordPress platform rather than individual vendors. The lack of information on contract complexity with vendors also prevents a full assessment of vendor lock-in risks during migration.

Compliance

3 in-scope frameworks identified; showing 3.

GDPR (source) — Assessment Required

While Webnus is US-based, they likely process personal data of EU/EEA residents through their global customer base of 200,000+ users. Their privacy policy mentions data transfers to Hong Kong and processing personal data including email addresses, names, and usage data. Non-compliance could result in fines up to 4% of annual turnover. Risk is medium due to their global reach but unclear EU-specific compliance measures.

Evidence: https://webnus.net/privacy-policy/

SOC 2 (source) — Assessment Required

SOC2 is relevant for service organizations that store customer data in the cloud. Webnus provides cloud-based services (customer accounts, license management, support systems) and processes customer data including payment information and personal details. While not legally required, SOC2 compliance would be valuable for customer trust and competitive positioning. Risk is medium due to customer data handling without evidence of formal security controls.

ISO 27001 (source) — Assessment Required

ISO 27001 is an international standard for information security management systems. Given Webnus handles customer data, payment information, and intellectual property (software products), implementing ISO 27001 would be beneficial for security posture and customer confidence. Risk is medium as they handle sensitive data without evidence of formal information security management systems.

Financials

Three-year financials

Financial Resilience Score: 6/10

Webnus demonstrates meaningful qualitative indicators of financial resilience despite complete opacity on quantitative financial metrics. Its 15+ year operating history without disclosed external funding strongly suggests a self-sustaining, likely bootstrapped business model that has survived multiple market cycles. The freemium distribution model for its flagship Modern Events Calendar plugin provides a capital-efficient, low customer acquisition cost channel, while the 200,000+ customer base and 98% satisfaction rate indicate strong product-market fit and low churn risk. The company's diversified portfolio of 36 WordPress products across event management (MEC), theming (Kata), and WooCommerce building (ShopPress) reduces single-product revenue dependency. Strategic partnerships, such as the ClimaxThemes collaboration on ShopPress, suggest an ability to expand product lines without proportional R&D spend increases. An active affiliate program further keeps customer acquisition costs variable rather than fixed. However, the score is tempered by significant structural risks. The company is 100% dependent on the WordPress and WooCommerce ecosystem, creating platform concentration risk. The competitive landscape includes well-resourced rivals such as The Events Calendar (Tribe) and Amelia. The freemium model inherently carries conversion rate uncertainty, and the large free user base on WordPress.org does not directly generate revenue. The complete absence of audited financials, investor relations disclosures, or any third-party verified financial data makes it impossible to assess leverage, cash reserves, profitability margins, or equity value. This opacity is the single largest constraint on the resilience score, as no external party can verify whether the business is thriving or under financial stress.

Key strengths: 15+ years of continuous operation suggesting financial self-sustainability, 200,000+ customers with 98% satisfaction rate indicating strong retention, Freemium model with low customer acquisition cost via WordPress.org, Diversified portfolio of 36 products across three main product lines, No disclosed external debt or investor pressure (likely bootstrapped), Active affiliate program providing variable-cost marketing channel, Trustpilot rating of 4.2 ('Great') supporting brand equity and reduced churn, Strategic partnership model (ClimaxThemes) enabling capital-efficient expansion

Risk factors: 100% revenue dependency on WordPress and WooCommerce ecosystem, Complete financial opacity — no audited accounts, no public filings, no verifiable revenue or profit data, Highly competitive WordPress plugin market with price-sensitive customers and well-resourced rivals, Large free user base on WordPress.org with unknown paid conversion rates, No disclosed funding, cash reserves, or balance sheet — debt levels entirely unknown, Vulnerability to WordPress.org policy changes or structural decline in WordPress market share, Potential geographic concentration of development talent creating operational risk

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report