shouldiuse.io

Categories

VERDICT

Cityworks Review

Depends

Should I use Cityworks?

GIS-centric asset and work-order management for local government and utilities (Trimble) - cityworks.com

· 1 month ago

Buy if you are a mid-size or large city, county, or utility already running Esri ArcGIS with staff to administer it. Small teams, small water utilities, and non-GIS shops should skip it — it is heavy, quote-priced, and was actively exploited via a critical 2025 RCE.

Confidence

Medium. Based on 40+ public sources: municipal contracts, G2/Capterra reviews, Reddit r/gis threads, and CISA/EPA/Talos security advisories.

Ratings

  • Value for money
  • Ease of useNo usable usability evidence in reviewed sources.
  • Feature depth
  • Support qualityNo support evidence in reviewed sources.
  • Security posture

Pricing

Quote-based

Enterprise (contract)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed

Best for

  • Cities, counties, utilities on Esri ArcGIS
  • Public works asset and work-order fleets
  • Permitting and licensing workflows
  • Orgs with dedicated GIS/admin staff

Not for

  • Small teams needing a simple work-order list
  • Small water utilities without GIS staff
  • Orgs with no Esri ArcGIS investment
  • Buyers lacking dedicated admin and IT security capacity

Gotchas - check before you buy

high

CVE-2025-0994 critical RCE was actively exploited by China-linked hackers against US municipalities; patch discipline mandatory.

high

AMS customers are being migrated to Trimble Unity Maintain with repricing — expect migration friction.

medium

Quote-only contract pricing; implementation, Esri licensing, and dedicated admin costs sit beyond the sticker.

medium

Deep Esri lock-in: leaving means migrating GIS-integrated work orders, asset data, and configurations.

Pros and cons

Pros

  • Deep GIS-native asset and work-order management built on Esri ArcGIS
  • Covers permitting, licensing, inspections, warehousing, and analytics in one suite
  • 4.8/5 across 244 customer reviews and case studies
  • ~941 organizations use it; extensive public-sector case-study base
  • Trimble ownership since 2019; continued investment and integrations

Cons

  • No public pricing; quote-based contracts typical
  • Requires Esri ArcGIS plus GIS expertise — double vendor dependency
  • Oversized for small utilities; cheaper alternatives target that gap
  • Cityworks AMS being sunset into Trimble Unity Maintain — migration pain
  • Critical RCE actively exploited against municipalities in 2025

Sources & method

- 11 sources - Critical: CVE-2025-0994 RCE was actively exploited by China-linked actor UAT-6382 against US municipalities; CISA and EPA issued advisories.

official x3review x4security x3news x1
  • CVE-2025-0994 — critical RCE, actively exploited, Remote code execution in Trimble Cityworks exploited since January 2025 by China-linked group UAT-6382 targeting US local governments; CISA advisory ICSA-25-037-04 and an EPA alert followed; Trimble released patches in February 2025.

Key stats

  • Value for money: 2/5

    Rating

  • Quote-based

    Starting price

  • 11

    Sources

  • Analyzed

  • Value for money: 2/5. Quote-only contracts; cheaper rivals target small utilities.
  • Ease of use. No usable usability evidence in reviewed sources.
  • Feature depth: 5/5. Full GIS-native suite: assets, permits, inspections, analytics.
  • Support quality. No support evidence in reviewed sources.
  • Security posture: 1/5. Critical RCE actively exploited; CISA and EPA advisories.
  • 4.8/5 Customer rating 244 reviews & references on FeaturedCustomers
  • 14 reviews G2 review base Cityworks AMS on G2 — small sample
  • ~941 Organizations using it per TheirStack company data
  • Trimble Owned by acquired Azteca Systems in Oct 2019

Pricing

Enterprise (contract)

Quote-based

  • Per-agency agreement via RFP/contract
  • Implementation, Esri licensing, admin costs extra

Security

Critical: CVE-2025-0994 RCE was actively exploited by China-linked actor UAT-6382 against US municipalities; CISA and EPA issued advisories.

  • CVE-2025-0994 — critical RCE, actively exploitedRemote code execution in Trimble Cityworks exploited since January 2025 by China-linked group UAT-6382 targeting US local governments; CISA advisory ICSA-25-037-04 and an EPA alert followed; Trimble released patches in February 2025.⁵

What users say

Reddit GIS admins treat Cityworks as the serious GIS-native choice for asset fleets and FeaturedCustomers shows 4.8/5 across 244 reviews, but users flag heavy administration and the AMS sunsetting into Trimble Unity.

“Cityworks is the right c...”
Reddit, r/gis
“Current Cityworks admin”
Reddit, r/gis
“I reviewed 14 providers ...”
Reddit, r/gis

Alternatives

Compare Cityworks with each alternative.

Companies that use it

  • City of O'Fallon, IL
  • St. Johns County Utilities (FL)
  • Haines Borough, AK
  • City of Morgantown, WV
  • City of Leduc, AB
Full analysis

Based on 40+ public sources: municipal contracts, G2/Capterra reviews, Reddit r/gis threads, and CISA/EPA/Talos security advisories.

GIS-native asset management for cities/utilities — powerful but heavy; overkill for small teams and hit by exploited 2025 RCE.

Methodology

Based on 40+ public sources: municipal contracts, G2/Capterra reviews, Reddit r/gis threads, and CISA/EPA/Talos security advisories.

Read how a report is made.

Sources

  1. review
  2. review
  3. review
  4. review
  5. security
  6. security
  7. security
  8. news
  9. official
  10. official
  11. official

Add this review to your site

This check for Cityworks says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.