shouldiuse.io

Categories

VERDICT

Taotesting (TAO Platform) Review

Depends

Should I use Taotesting (TAO Platform)?

We value your privacy - taotesting.com

· 2 weeks ago

Buy if you run large-scale, high-stakes assessments and have technical staff for an open-source platform. Skip it if you need simple quizzes, transparent pricing, or no admin overhead.

Confidence

Medium. Based on ~30 public sources; user-review evidence is thin, product and security facts are solid.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo evidence in sources reviewed
  • Security posture

Pricing

Free

Community Edition

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
TAO ProInquire

Best for

  • Ministries and districts running high-stakes exams
  • Certification bodies testing at scale
  • Orgs with in-house engineering for open source
  • Teams needing QTI/LTI interoperability

Not for

  • Small teams making simple quizzes
  • Non-technical orgs without admins or DevOps
  • Buyers needing published, transparent pricing
  • Anyone wanting plug-and-play SaaS onboarding

Gotchas - check before you buy

high

Community Edition is self-hosted: you own patching, backups and scaling

medium

Enterprise pricing hidden behind 'inquire'; budget discovery needs a sales call

medium

Content migration is painful enough that the vendor blogs about controlling it

medium

Open-source core has public CVE and advisory history; verify patch status

Pros and cons

Pros

  • Free, open-source Community Edition available
  • Enterprise-scale track record; NYC Department of Education deployment won an award
  • Full item banking, scoring, accessibility tools and remote proctoring
  • APIs, LTI compliance and extensible open-source framework
  • Vendor publishes ISO 27001 certification claims

Cons

  • No public pricing; enterprise tiers require sales inquiry
  • Self-hosting demands technical setup and ongoing maintenance
  • Zero completed user reviews on major comparison sites
  • Multiple public XSS and CSRF advisories against the platform

Sources & method

- 9 sources - Vendor claims ISO 27001 certification, but researchers have disclosed XSS, CSRF and CVE entries against TAO.

official x2review x1security x3news x3
  • CVE-2020-23050, NVD lists this vulnerability as affecting TAO; published October 2021. Verify patched before deploying.
  • Multiple XSS vulnerabilities, SEC Consult disclosed multiple cross-site scripting issues in the TAO open source assessment platform.
  • Cross-Site Request Forgery (CSRF), Immuniweb advisory HTB23211 documented a CSRF issue in TAO.

Key stats

  • Value for money: 4/5

    Rating

  • Free

    Starting price

  • 9

    Sources

  • Analyzed

  • Value for money: 4/5. Free open-source core; enterprise pricing opaque
  • Ease of use: 2/5. Self-hosting, web installer, technical setup required
  • Feature depth: 4/5. Item banking, scoring, proctoring, LTI, APIs
  • Support quality. No evidence in sources reviewed
  • Security posture: 3/5. ISO 27001 claimed; public XSS/CSRF/CVE history
  • 2013 Founded Open Assessment Technologies, Luxembourg
  • Yes Free tier Open-source Community Edition
  • None Public pricing Enterprise tiers via sales inquiry
  • Sparse Independent reviews Comparison sites show no completed reviews

Pricing

Community Edition

Free

  • Open-source, self-hosted
  • Core assessment authoring and delivery

TAO Pro

Inquire

  • Hosted — removes hosting burden
  • Enterprise support and features

Security

Vendor claims ISO 27001 certification, but researchers have disclosed XSS, CSRF and CVE entries against TAO.

  • CVE-2020-23050NVD lists this vulnerability as affecting TAO; published October 2021. Verify patched before deploying.⁵
  • Multiple XSS vulnerabilitiesSEC Consult disclosed multiple cross-site scripting issues in the TAO open source assessment platform.⁶
  • Cross-Site Request Forgery (CSRF)Immuniweb advisory HTB23211 documented a CSRF issue in TAO.⁷

What users say

Independent user reviews are scarce; comparison sites list TAO Platform with no completed reviews.

Companies that use it

  • New York City Department of Education³
Full analysis

Based on ~30 public sources; user-review evidence is thin, product and security facts are solid.

Enterprise open-source exam platform. Powerful at scale, technical to run, pricing hidden. Not for casual quizzes.

Methodology

Based on ~30 public sources; user-review evidence is thin, product and security facts are solid.

Read how a report is made.

Sources

  1. TAO Testing: Assessment Software | Open Sourcetaotesting.com
    official
  2. Next-Gen TAO Community Edition Debutsnatlawreview.com
    news
  3. TAO and NYC Department of Education Win Silver Medalnewswire.com
    news
  4. TAO Platform Reviews in 2026sourceforge.net
    review
  5. CVE-2020-23050 Detailnvd.nist.gov
    security
  6. Multiple XSS Vulnerabilities In TAOsec-consult.com
    security
  7. CSRF in TAO — HTB23211immuniweb.com
    security
  8. TAO web installer documentationuserguide.taotesting.com
    official
  9. TAO (e-Testing platform)en.wikipedia.org
    news

Add this review to your site

This check for Taotesting (TAO Platform) says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Taotesting (TAO Platform) Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.