shouldiuse.io

Categories

VERDICT

Should I use Pmweb?

This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. - pmweb.com

Depends. Buy if you run large multi-year capital programs — agencies, universities, real estate owners — with budget for implementation and admins. Skip it if you are a small contractor or team wanting simple, self-serve project tracking.

Confidence

Medium. Based on ~50 public sources: review sites, CVE databases, government procurement records, and vendor pages. Review snippets were truncated, so user quotes were not extractable verbatim.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo usable support evidence in sources reviewed.
  • Security posture

Pricing

Not publicly listed

Enterprise (quote-based)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed

Best for

  • Public agencies running capital programs
  • Universities with construction portfolios
  • Real estate owners managing CapEx
  • Enterprise PMOs needing deep cost control

Not for

  • Small contractors wanting simple job tracking
  • Teams without admin or implementation budget
  • Buyers needing transparent, self-serve pricing
  • Field-first daily-log crews (Procore fits better)

Gotchas - check before you buy

high

CVE-2025-1341 authentication bypass; verify your version is patched before signing

medium

Quote-based pricing; expect significant upfront implementation spend before value appears

medium

Web application firewall vulnerability CVE-2024-7466 also disclosed

low

Thin review base (14 G2 reviews) limits peer validation

Pros and cons

Pros

  • Deep cost control, change management, and asset modules built in
  • Selected by CDOT after rigorous evaluation
  • SOC 1 Type 2 and SOC 2 Type 2 certified
  • Enterprise PPM and construction management in one platform
  • Broad adoption: 565 companies including agencies and universities

Cons

  • Requires larger upfront investment than rivals like Procore
  • Modest 3.7/5 G2 rating
  • No public pricing; demo and package selection required
  • Phased, lengthy implementations; CUNY bought in phases
  • Recent authentication-bypass CVE undermines trust

Sources & method

Analyzed 9/30/2026 - 12 sources - SOC 1 Type 2 and SOC 2 Type 2 certified (2025–2026), but multiple CVEs disclosed 2024–2025, including an authentication bypass.

official x3review x5security x2news x2
  • CVE-2025-1341: Authentication bypass, Authentication bypass vulnerability in PMWeb, tracked by NIST NVD and SentinelOne.
  • CVE-2024-7466: Web application firewall flaw, A vulnerability was found in PMWeb's web application firewall, per the NVD record.
  • GHSA-2cmx-w9mj-2wvc: PMWeb 7.2.00 vulnerability, A vulnerability was found in PMWeb 7.2.00 and related versions, per GitHub advisories.

Key stats

  • Value for money: 2/5

    Rating

  • Not publicly listed

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 2/5. Larger upfront investment than rivals; quote-based pricing.
  • Ease of use: 3/5. Capterra calls it easy-to-use; G2 rating middling.
  • Feature depth: 4/5. Enterprise PPM plus cost, change, asset modules.
  • Support quality. No usable support evidence in sources reviewed.
  • Security posture: 3/5. SOC 2 certified, but multiple recent CVEs.
  • 3.7/5 G2 rating 14 reviews across PMWEB products
  • 565 Companies using it per TheirStack tech-usage data
  • 2007 Active since per Chicago Build Expo profile
  • PE-backed Ownership Bregal Sagemount growth investment, Nov 2024

Pricing

Enterprise (quote-based)

Not publicly listed

  • Modular packages: cost, schedule, assets
  • Demo and package selection required

Security

SOC 1 Type 2 and SOC 2 Type 2 certified (2025–2026), but multiple CVEs disclosed 2024–2025, including an authentication bypass.

  • CVE-2025-1341: Authentication bypassAuthentication bypass vulnerability in PMWeb, tracked by NIST NVD and SentinelOne.⁷
  • CVE-2024-7466: Web application firewall flawA vulnerability was found in PMWeb's web application firewall, per the NVD record.⁸
  • GHSA-2cmx-w9mj-2wvc: PMWeb 7.2.00 vulnerabilityA vulnerability was found in PMWeb 7.2.00 and related versions, per GitHub advisories.

What users say

Feedback is mixed-to-moderate: buyers value the enterprise cost controls but report heavier setup and larger upfront costs than rivals.

Alternatives

Compare Pmweb with each alternative.

  • Procore

    Contractor-friendly construction management; lighter upfront lift.

    Pmweb vs Procore

  • Kahua

    Modern alternative construction managers call pretty solid.

  • Zoho Projects

    Cheaper general project tracking for non-construction teams.

Companies that use it

  • Colorado Department of Transportation (CDOT)⁴
  • City University of New York (CUNY)⁵
  • Passaic Valley Sewerage Commission (PVSC)
Full analysis

Based on ~50 public sources: review sites, CVE databases, government procurement records, and vendor pages. Review snippets were truncated, so user quotes were not extractable verbatim.

Enterprise capital-construction PPM for big owners and agencies; heavy and quote-priced — overkill for small contractors.

Methodology

Based on ~50 public sources: review sites, CVE databases, government procurement records, and vendor pages. Review snippets were truncated, so user quotes were not extractable verbatim.

Sources

  1. PMWEB Reviews 2026: Details, Pricing, & Featuresg2.com
    review
  2. PMWeb Software Pricing, Alternatives & More 2026capterra.com
    review
  3. PMWEB: Construction Project Management Softwarepmweb.com
    official
  4. PMWeb - FAQs (CDOT OnTrack)sites.google.com
    official
  5. CUNY PMWeb System Acquisition Resolutioncuny.edu
    official
  6. PMWeb vs Procorefollowupcrm.com
    review
  7. CVE-2025-1341: PMWeb Authentication Bypassnvd.nist.gov
    security
  8. CVE-2024-7466 Detailnvd.nist.gov
    security
  9. PMWEB Achieves SOC 2 Type 2 Certificationpmweb.com
    news
  10. PMWeb Receives Strategic Growth Investment from Bregal Sagemountfinsmes.com
    news
  11. Companies that use PMWeb (565)theirstack.com
    review
  12. Construction Management Software (Reddit)reddit.com
    review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.