Secure your production apps for 15 years
Get 15 years of security patches and browser compatibility updates for your current version. Extended Maintenance gives you long-term stability and lets you upgrade when you’re ready, not when the framework forces you to.
Your application stays secure, compatible, and production‑ready
From security patches and browser compatibility updates to framework and integration enhancements. Vaadin Maintenance ensures your application remains stable, secure, and compatible — today, next year, and well beyond the next decade.
Security updates
Patches for known vulnerabilities to keep your application protected.
Bug fixes
Corrections to framework issues that impact stability or functionality.
Secure by design
Regular updates to maintain seamless functionality across all major browsers, ensuring a consistent user experience.
Components for real apps
Minor refinements that reduce friction in development and operations.
Consistent releases, long-term stability
Vaadin's release model ensures a steady flow of new features and improvements while prioritizing stability, easy upgrades, and long-term maintainability. It consists of three types of releases:
Weekly
Maintenance Releases
It deliver critical bug fixes and patches between minor releases. These updates are trivial to apply and released weekly to maintain stability and address security issues quickly.
- e.g. 24.4.2
- Bug fixes
- Trivial update
- Immediately replaces previous release
QUARTERLY
Minor Releases
It occurs quarterly, introducing new features and improvements while maintaining backward compatibility whenever possible. Bug fixes are applied to the latest version, and critical security
- e.g. 24.4.2
- New features
- Easy update
- Previous minor maintained for 3 months. Or up to 15 years with Extended Maintenance for 24 minor versions.
Yearly
Major Releases
It occurs approximately every 12 to 24 months and may introduce breaking changes, such as Java version upgrades or removal of deprecated features, to keep the framework modern...
- e.g. 24.0
- New features + removed deprecations
- Might require rework
- Previous major maintained as open source for 6 months
Extended Maintenance Coverage
Long-term protection for every version
Whether you're on legacy Vaadin 7 or a locked Vaadin 24 minor version, Extended Maintenance gives you up to 15 years of continued security and stability.
Version
Coverage Scope
End of Free
Maintenance
Extended
Maintenance
Vaadin 7
Core framework with Pro and official add-ons.
Supports Java 7–25 and Spring Boot 3.
Feb 2019
2032
Vaadin 8
Core framework with Pro and official add-ons.
Supports Java 8–25 and Jakarta Servlet 6.0 (via MPR).
Feb 2022
2032
Vaadin 14
Security patches, browser compatibility, and bug fixes. Ideal for Java 11 and Spring Boot 2.x.
Feb 2024
2034
Vaadin 23
Security patches, browser and JVM updates. For apps not yet ready to move to V24+.
Feb 2024
2037
Version
Vaadin 7
Version:
Core framework with Pro and official add-ons.
Supports Java 7–25 and Spring Boot 3.
Coverage Scope:
Feb 2019
End of Free
Maintenance:
2032
Vaadin 8
Version:
Core framework with Pro and official add-ons.
Supports Java 8–25 and Jakarta Servlet 6.0 (via MPR).
Coverage Scope:
Feb 2022
End of Free
Maintenance:
2032
Vaadin 14
Version:
Security patches, browser compatibility, and bug fixes. Ideal for Java 11 and Spring Boot 2.x.
Coverage Scope:
Feb 2024
End of Free
Maintenance:
2034
Vaadin 23
Version:
Security patches, browser and JVM updates. For apps not yet ready to move to V24+.
Coverage Scope:
Feb 2024
End of Free
Maintenance:
2037
Free vs Extended Maintenance
Upgrade at your own pace with the coverage level that fits your needs.
Free Maintenance
Each major release includes 3 months of free maintenance after the next major release, and 1 month after the minor release. During this period, you receive security updates and critical bug fixes at no cost — giving your team time to plan the upgrade.
- Major Version Support:
- 6 months after next major release
- Versions covered:
- Latest minor only (e.g., V24.3)
- Latest Minor Version:
- Supported
- Past Minor Versions (e.g., 24.2):
- Not Supported (End of Life)
- Security Patches:
- Latest release only
Recommended
Extended Maintenance
Extended Maintenance provides long-term stability and security, with 15 years of coverage. Ideal for long-lived, regulated, or carefully planned projects that require ongoing access to critical updates.
- Major Version Support:
- 15 Years
- Versions covered:
- All majors (V7, V8, V10, V14, V23, V24+) + any minor version (24.0-24.3)
- Latest Minor Version:
- Supported
- Past Minor Versions (e.g., 24.2):
- Supported (only for 24.0-24.3)
- Security Patches:
- Backported to your specific version
Navigating your options forward after maintenance ends
Applications that reach end of maintenance still run — but become exposed to risks such as unpatched security vulnerabilities, browser incompatibilities, and evolving platform requirements. Here are your options.
1
Upgrade to latest
The recommended path. Stay current with the latest release for new features, performance improvements, and active maintenance.
Upgrade guide
2
Extended Maintenance
Not ready to upgrade? Get up to 15 years of continued coverage — security patches, browser updates, and stability fixes on your current version.
Get 15 years of maintenance
3
Modernization help
Need hands-on assistance?
Vaadin's expert services can help you plan and execute your migration with minimal disruption.
Modernization services
Frequently asked questions
Vaadin core is open source and free. However if you need more than that, you can select a plan that meets the requirements of your organization.
What is the license model for the Vaadin platform?
Type an answer
Do Vaadin Pro, Premium, and Ultimate subscriptions include access to all current and upcoming versions of commercial components?
Type an answer
Can I buy separate licenses for different tools?
Type an answer
How does the extended maintenance work?
Type an answer
How many licenses do I need?
Type an answer
Ready to secure your apps for the next 15 years?
Every day on an unpatched version accumulates technical debt and security risk. Let's talk about Extended Maintenance for your applications.
Contact us to talk about extended maintenance.
Contact us to talk about extended maintenance.