shouldiuse.io

VERDICT

Should I use Oroinc (OroCommerce / OroCRM)?

Not disclosed - oroinc.com

Depends. OroCommerce fits mid-size and enterprise B2B manufacturers and distributors with complex pricing and developers on staff. Small teams wanting a simple store or CRM will find it heavy, quote-priced, and overkill.

Confidence

Medium. Based on 25+ public sources: G2, Capterra, Trustpilot, Gartner, GitHub, NVD/SentinelOne, vendor pricing and case studies.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Community Edition

Free (open source, self-hosted)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Enterprise EditionCustom quote

Best for

  • Mid-size and enterprise B2B manufacturers and distributors
  • Teams with in-house PHP/Symfony developers
  • Complex customer-specific pricing and large catalogs

Not for

  • Small businesses that just need a simple storefront
  • Teams without developers — self-hosting is technical
  • Buyers wanting published prices and a free trial
  • Anyone wanting plug-and-play SaaS CRM

Gotchas - check before you buy

high

Open-source core means hosting, upgrades, and security patching fall on your team

medium

Pricing is fully custom — expect a sales negotiation, not a pricing page

medium

No free trial; only a self-guided demo before you commit

medium

Repeated XSS CVEs (2021–2024) mean you must track and apply patches promptly

Pros and cons

Pros

  • Open-source and highly customizable
  • Purpose-built B2B commerce with integrated CRM
  • Strong ratings: 4.3/5 on 37 G2 reviews, 4.7 Capterra
  • Real enterprise customers: Wastequip, Azelis, Dunlop, PartsBase
  • Runs a public bug bounty program

Cons

  • No published pricing — custom quotes only
  • No free trial; demo only
  • Multiple public CVEs, including OroPlatform XSS
  • Thin review base; Trustpilot averages just 3.7
  • Self-hosted open source demands developer resources

Sources & method

Analyzed 9/21/2026 - 12 sources - Bug bounty program exists, but several XSS CVEs from 2021–2024 require prompt patching.

official x4review x5security x3
  • CVE-2024-50677: OroPlatform CMS XSS, Cross-site scripting vulnerability in OroPlatform CMS.
  • CVE-2023-32064, Vulnerability tracked against the orocommerce GitHub repository.
  • CVE-2021-41236, Users were advised to upgrade as soon as possible.

Key stats

  • Value for money: 2/5

    Rating

  • Free (open source, self-hosted)

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 2/5. Custom quotes only, no free trial
  • Ease of use: 2/5. Open-source, self-hosted, developer-driven setup
  • Feature depth: 4/5. Deep B2B commerce plus integrated CRM and extensions
  • Support quality: 3/5. Mixed ratings, thin review volume
  • Security posture: 3/5. Bug bounty exists but repeat XSS CVEs
  • 4.3/5 G2 rating 37 verified reviews
  • 4.7/5 Capterra rating vs 3.7 on Trustpilot
  • 2012 Founded Private, Los Angeles
  • $13M Funding raised 2023

Pricing

Community Edition

Free (open source, self-hosted)

  • Self-hosted
  • Community support
  • You manage upgrades

Enterprise Edition

Not disclosed

  • Pricing structured per business
  • Vendor support

Security

Bug bounty program exists, but several XSS CVEs from 2021–2024 require prompt patching.

  • CVE-2024-50677: OroPlatform CMS XSSCross-site scripting vulnerability in OroPlatform CMS.⁹
  • CVE-2023-32064Vulnerability tracked against the orocommerce GitHub repository.10
  • CVE-2021-41236Users were advised to upgrade as soon as possible.

What users say

Ratings are decent but thin — 4.3/5 across 37 G2 reviews and 4.7 on Capterra, versus 3.7 on Trustpilot.

“Oro inc website scam?”
Reddit, r/Scams

Companies that use it

  • Wastequip11
  • Azelis
  • Dunlop11
  • PartsBase
  • DiversiTech
Full analysis

Based on 25+ public sources: G2, Capterra, Trustpilot, Gartner, GitHub, NVD/SentinelOne, vendor pricing and case studies.

Enterprise B2B ecommerce with CRM depth — great for big manufacturers with devs, overkill for small shops. No trial.

Methodology

Based on 25+ public sources: G2, Capterra, Trustpilot, Gartner, GitHub, NVD/SentinelOne, vendor pricing and case studies.

Sources

  1. Oro, Inc Reviews on G2g2.com
    review
  2. OroCommerce on Trustpilottrustpilot.com
    review
  3. OroCommerce Reviews & Ratings — Gartnergartner.com
    review
  4. Who's Oroinc.com? — Ecommerce Platformsecommerce-platforms.com
    review
  5. OroCommerce Pricing — officialoroinc.com
    official
  6. OroCommerce 2023 Year in Revieworoinc.com
    official
  7. oroinc/orocommerce on GitHubgithub.com
    official
  8. Oro Bug Bounty Programoroinc.com
    security
  9. CVE-2024-50677 — SentinelOnesentinelone.com
    security
  10. CVE-2023-32064 — NVDnvd.nist.gov
    security
  11. Wastequip Case Studyoroinc.com
    official
  12. Oro inc website scam? — Redditreddit.com
    review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.