shouldiuse.io

Categories

VERDICT

Totara Learning Review

Depends

Should I use Totara Learning?

Enterprise learning management system for organizations that need flexibility, compliance, and scalable workforce development. - totaralearning.com

· 1 month ago

Buy if you're a mid-size or large organization with compliance needs and staff to administer a customizable LMS. Skip it if you need simple course delivery, transparent pricing, or a lightweight setup — you'll be paying enterprise complexity for features you won't use.

Confidence

Medium. Based on 11+ public sources across reviews, security databases, official pages, and market data. No public pricing found; confidence medium.

Ratings

  • Value for money
  • Ease of useNo usability evidence in sources
  • Feature depth
  • Support qualityNo direct user support evidence
  • Security posture

Pricing

Quote only

Enterprise (via partners)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed

Best for

  • Compliance-heavy enterprises
  • Government and healthcare orgs
  • Global workforces needing customization
  • Teams with dedicated L&D admins

Not for

  • Small teams wanting a simple course library
  • Startups without dedicated L&D staff
  • Buyers needing transparent self-serve pricing
  • Non-technical buyers without a delivery partner

Gotchas - check before you buy

high

Versions 19.1.5 and earlier carry known CVEs; confirm your deployment is fully patched before signing.

medium

Pricing is quote-only via partners; expect negotiation and variable costs.

medium

Despite open-source heritage, a commercial license and subscription agreement governs use — read terms carefully.

medium

FedRAMP appears in marketing analysis, not confirmed authorization — verify before federal procurement.

Pros and cons

Pros

  • Open-source roots deliver flexibility and cost savings
  • Strong compliance, certification, and program management tooling
  • Trusted at scale: USDA, Samsung, NHS, JetBlue among 1,800 customers
  • ISO/IEC 27001:2022 certified
  • Rated 4.3/5 across verified G2 reviews

Cons

  • No public pricing; partner-led sales make cost comparison hard
  • Recent CVEs: CVSS 8 XSS plus login and password-reset flaws
  • Employee rating 3.8/5 on Glassdoor signals possible internal churn
  • Deployments often run through third-party resellers like Titus Learning

Sources & method

- 11 sources - ISO 27001:2022 certified, but three CVEs disclosed in 2026 affecting v19.1.5 and earlier.

official x2review x4security x4news x1
  • CVE-2026-31281: HTML injection in in-app messaging (CVSS 8), Versions 19.1.5 and earlier accept user-supplied HTML in the in-app messaging client, allowing malicious message injection.
  • CVE-2026-31282: Incorrect access control on login page, Flawed access control on the login page permits attacker access.
  • CVE-2026-31283: No rate limiting on forgot-password API, Forgot-password API in releases 19.1.5 and earlier lacks rate limiting, enabling abuse.

Key stats

  • Value for money: 3/5

    Rating

  • Quote only

    Starting price

  • 11

    Sources

  • Analyzed

  • Value for money: 3/5. Open-source roots cut cost, but pricing hidden behind partner quotes
  • Ease of use. No usability evidence in sources
  • Feature depth: 5/5. Deep compliance, certifications, LXP; repeatedly praised for flexibility
  • Support quality. No direct user support evidence
  • Security posture: 2/5. ISO 27001 certified, but three 2026 CVEs disclosed
  • 4.3/5 G2 rating 78 verified reviews
  • 1,800+ Customers incl. USDA, Samsung, NHS
  • 3.8/5 Glassdoor employee rating 16 reviews
  • 27001:2022 ISO certification Certified Dec 2025

Pricing

Enterprise (via partners)

Quote only

  • Partner-led licensing and implementation
  • LMS + LXP + Engage platform
  • Compliance and certification modules

Security

ISO 27001:2022 certified, but three CVEs disclosed in 2026 affecting v19.1.5 and earlier.

  • CVE-2026-31281: HTML injection in in-app messaging (CVSS 8)Versions 19.1.5 and earlier accept user-supplied HTML in the in-app messaging client, allowing malicious message injection.⁵
  • CVE-2026-31282: Incorrect access control on login pageFlawed access control on the login page permits attacker access.⁶
  • CVE-2026-31283: No rate limiting on forgot-password APIForgot-password API in releases 19.1.5 and earlier lacks rate limiting, enabling abuse.⁷

What users say

Reviewers and analysts consistently praise Totara's flexibility, while some employee reviews describe a troubled internal culture.

“Great people * Great work environment and culture. Several colleagues have left in the past, then retur”
Glassdoor, employee review
“Absolutely disgusting and unprofessional work environment.”
Glassdoor, employee review
“Totara Learn and Engage are perfect for the organization that is looking to have maximum flexibility on how learning is delivered.”
Brandon Hall Group review

Companies that use it

  • US Department of Agriculture10
  • Samsung10
  • NHS10
  • JetBlue10
  • United Nations (UNDSS)
Full analysis

Based on 11+ public sources across reviews, security databases, official pages, and market data. No public pricing found; confidence medium.

Enterprise LMS with deep compliance customization — fits big orgs with admins; overkill, quote-only pricing for small teams.

Methodology

Based on 11+ public sources across reviews, security databases, official pages, and market data. No public pricing found; confidence medium.

Read how a report is made.

Sources

  1. Totara Learning Solutions Products — G2 reviewsg2.com
    review
  2. Totara Learning Solutions Reviews — Glassdoorglassdoor.com
    review
  3. Totara LMS Review and Overview — Talented Learningtalentedlearning.com
    review
  4. Brandon Hall Group review of the Totara Talent Experience Platformtotara.com
    review
  5. CVE-2026-31281 — XSS vulnerabilityapp.opencve.io
    security
  6. CVE-2026-31282 — access control flawapp.opencve.io
    security
  7. CVE-2026-31283 — forgot password API flawapp.opencve.io
    security
  8. Totara ISO/IEC 27001:2022 certificationtotara.com
    security
  9. Totara Learn on UK G-Cloud Digital Marketplace (Titus Learning)applytosupply.digitalmarketplace.service.gov.uk
    official
  10. Totara Learn named Market-Leading Corporate LMStotara.com
    official
  11. Totara market share and competitors — 6sense6sense.com
    news

Add this review to your site

This check for Totara Learning says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Totara Learning Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.