shouldiuse.io

VERDICT

Should I use Oroinc (OroCommerce / OroCRM)?

Not disclosed - oroinc.com

Depends. OroCommerce fits mid-size and enterprise B2B manufacturers and distributors with complex pricing and developers on staff. Small teams wanting a simple store or CRM will find it heavy, quote-priced, and overkill.

Confidence

Medium. Based on 25+ public sources: G2, Capterra, Trustpilot, Gartner, GitHub, NVD/SentinelOne, vendor pricing and case studies.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Community Edition

Free (open source, self-hosted)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Enterprise EditionCustom quote

Best for

  • Mid-size and enterprise B2B manufacturers and distributors
  • Teams with in-house PHP/Symfony developers
  • Complex customer-specific pricing and large catalogs

Not for

  • Small businesses that just need a simple storefront
  • Teams without developers — self-hosting is technical
  • Buyers wanting published prices and a free trial
  • Anyone wanting plug-and-play SaaS CRM

Gotchas - check before you buy

high

Open-source core means hosting, upgrades, and security patching fall on your team

medium

Pricing is fully custom — expect a sales negotiation, not a pricing page

medium

No free trial; only a self-guided demo before you commit

medium

Repeated XSS CVEs (2021–2024) mean you must track and apply patches promptly

Pros and cons

Pros

  • Open-source and highly customizable
  • Purpose-built B2B commerce with integrated CRM
  • Strong ratings: 4.3/5 on 37 G2 reviews, 4.7 Capterra
  • Real enterprise customers: Wastequip, Azelis, Dunlop, PartsBase
  • Runs a public bug bounty program

Cons

  • No published pricing — custom quotes only
  • No free trial; demo only
  • Multiple public CVEs, including OroPlatform XSS
  • Thin review base; Trustpilot averages just 3.7
  • Self-hosted open source demands developer resources

Sources & method

Analyzed 9/21/2026 - 12 sources - Bug bounty program exists, but several XSS CVEs from 2021–2024 require prompt patching.

official x4review x5security x3
  • CVE-2024-50677: OroPlatform CMS XSS, Cross-site scripting vulnerability in OroPlatform CMS.
  • CVE-2023-32064, Vulnerability tracked against the orocommerce GitHub repository.
  • CVE-2021-41236, Users were advised to upgrade as soon as possible.

Key stats

  • Value for money: 2/5

    Rating

  • Free (open source, self-hosted)

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 2/5. Custom quotes only, no free trial
  • Ease of use: 2/5. Open-source, self-hosted, developer-driven setup
  • Feature depth: 4/5. Deep B2B commerce plus integrated CRM and extensions
  • Support quality: 3/5. Mixed ratings, thin review volume
  • Security posture: 3/5. Bug bounty exists but repeat XSS CVEs
  • 4.3/5 G2 rating 37 verified reviews
  • 4.7/5 Capterra rating vs 3.7 on Trustpilot
  • 2012 Founded Private, Los Angeles
  • $13M Funding raised 2023

Pricing

Community Edition

Free (open source, self-hosted)

  • Self-hosted
  • Community support
  • You manage upgrades

Enterprise Edition

Not disclosed

  • Pricing structured per business
  • Vendor support

Security

Bug bounty program exists, but several XSS CVEs from 2021–2024 require prompt patching.

  • CVE-2024-50677: OroPlatform CMS XSSCross-site scripting vulnerability in OroPlatform CMS.⁹
  • CVE-2023-32064Vulnerability tracked against the orocommerce GitHub repository.10
  • CVE-2021-41236Users were advised to upgrade as soon as possible.

What users say

Ratings are decent but thin — 4.3/5 across 37 G2 reviews and 4.7 on Capterra, versus 3.7 on Trustpilot.

“Oro inc website scam?”
Reddit, r/Scams

Companies that use it

  • Wastequip11
  • Azelis
  • Dunlop11
  • PartsBase
  • DiversiTech
Full analysis

Based on 25+ public sources: G2, Capterra, Trustpilot, Gartner, GitHub, NVD/SentinelOne, vendor pricing and case studies.

Enterprise B2B ecommerce with CRM depth — great for big manufacturers with devs, overkill for small shops. No trial.

Methodology

Based on 25+ public sources: G2, Capterra, Trustpilot, Gartner, GitHub, NVD/SentinelOne, vendor pricing and case studies.

Sources

  1. review
  2. review
  3. review
  4. review
  5. official
  6. official
  7. official
  8. security
  9. security
  10. security
  11. official
  12. review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.