New TYPO3 websites and relaunches
TYPO3 earns its place when a website is more demanding organisationally than technically: several departments or branches maintaining their own pages, graded editing rights, more than one language, a page tree that has grown over the years. Its permission system — backend user groups, page permissions and separate file areas — was built for exactly that. We have used TYPO3 since 2004, and we also say when it is too much. For a company website in one language, with a modest number of pages and a single editor who posts the occasional news item, we build with WordPress and a custom theme. And if the website needs to sell, you get TYPO3 coupled with Shopware 6 rather than a shop squeezed into the CMS. A system the editors avoid is the wrong size.
A new project starts on TYPO3 v14 as a Composer installation. Configuration lives in files and therefore in the Git repository: site configuration and site sets, TypoScript, Fluid templates, and content elements built either with Content Blocks — an extension, not part of the core — or with our own data structures defined in TCA, TYPO3’s table configuration. Editors then see fields that match their content instead of a generic page builder. We build on a staging system you can reach at any time, and approvals happen there, not on screenshots. That is how M&S Armaturen, a company in industrial valves, got a multilingual corporate website that brings products, sustainability, careers and service together in one structure, editable in-house and with its Shopware shop connected. The website explains, the shop sells. Each system does what it was built for.
A relaunch carries over content, page structure, files and URLs; templates and extensions are rebuilt or cleaned up. Every old address that changes gets a 301 redirect, tested on staging before the switch. We estimate in person-days, with separate line items for concept, templates, content elements, extensions, data migration and testing, so you can see what you are paying for. We give the hourly rate and a price on request, after looking at your project, not before. How new builds and relaunches run in detail is described on our TYPO3 agency page. One thing is settled from the start: the domain is registered in your name, and the source code sits in a Git repository that belongs to you.
Support and maintenance with an SLA — including systems we take over
A TYPO3 website is not finished at launch. TYPO3 regularly publishes maintenance and security releases for the supported LTS versions, extensions get their own security advisories, and PHP versions reach end of life. For us, maintenance means: checking every TYPO3 security bulletin against your installation on the day it is published, testing updates on a staging copy before they go live, keeping extensions and the underlying stack current, backups with tested restores, monitoring and a log of the work done. Major upgrades are not included; they are a project in their own right. Our TYPO3 maintenance page sets out exactly what the contract covers. Maintenance does not prevent an attack. It shortens the time a known vulnerability stays open.
You choose the response time through the SLA tier: 24, 8 or 4 hours, as a monthly flat fee excluding VAT, which we quote after the initial review. Without an SLA, requests are handled in order of arrival within 48 hours during our business hours, Mon–Thu 9:00–16:00, Fri 9:00–13:00 (CET); on-call cover outside those hours is only available with an SLA. Your TYPO3 runs on our own servers, a Proxmox VE cluster in Hetzner’s data centre in Falkenstein — in Germany, but not in Oldenburg. That way hosting and maintenance come from a single provider. The trade website of Manotura GmbH & Co. KG, a specialist in irrigation and water technology, runs exactly like this: on TYPO3, editable in-house, operated on our own servers in Germany. For conversations, proximity counts. For servers, what counts is operation and restores, not the postcode.
The most common reason clients come to us is a TYPO3 installation somebody else built. Whether that agency is in Oldenburg or elsewhere makes no difference. Before we commit, we review the system: core version, extensions, custom code, TypoScript, PHP and database versions, backend accounts, backups. We need backend access with administrator rights, SSH access to the server, the repository if there is one, and ideally control of the domain. If your previous provider does not respond, we request the credentials ourselves. We document the state we find and have it confirmed in writing, so it stays clear later what we inherited and what we changed. The installation then moves to our servers and into the regular maintenance cycle. And we decline if a system is built in a way we cannot stand behind.
Extensions where the standard stops
A custom extension pays off where your process departs from the standard and no maintained extension from the TYPO3 Extension Repository (TER) fits. Typical cases are structured data sets with search and filters, imports from other systems, forms with business logic, and backend modules in which editors maintain data that are not pages. Before we build anything, we check whether an existing extension can do the job; a well-maintained solution from the TER is often the better choice. Every extension — from the TER, from a third party or written by us — is an item that has to be checked again with every update. Sometimes the best extension is the one that is not installed.
We build against the interfaces TYPO3 provides for the purpose: Extbase and Fluid for plugins and output, TCA for data structures, PSR-14 events instead of changes to the core, PSR-15 middlewares for requests handled before the page is rendered, and Symfony dependency injection for services. Recurring jobs such as imports run as Symfony Console commands via the Scheduler, and writes to content go through the DataHandler so that permissions and logging apply. Under v14 we register plugins as their own content type instead of using list_type, which has been removed. An extension that only takes the intended routes keeps the next upgrade small. One that works around the core makes it expensive.
At Autohaus Brüggemann — six sites from Rheine to Rostock, eight franchised brands — the TYPO3 website brings a vehicle stock in the four figures together in one shared search, fed from the dealer management system rather than by the editors. At Eschen Nutzfahrzeuge (used trucks and commercial vehicles), the vehicle stock is held as structured records, editable in-house and usable on mobile. For tasks like these there is rarely an off-the-shelf extension that fits without changes. TYPO3 extensions are licensed under the GPL; your own extension sits documented in your repository and is checked again with every update as part of maintenance. Our TYPO3 extensions page describes how we plan, build and look after them. An extension is only finished once it survives the next upgrade.
Updates and upgrades to TYPO3 v14
TYPO3 v14 has been the current LTS version since 21 April 2026 and receives free support until 30 June 2029. v13, the previous LTS, still gets security updates, free of charge until 31 December 2027. Free support for v12 ended on 30 April 2026; since then security fixes have only been available through ELTS, the paid service of TYPO3 GmbH. For v11 and v10 that has been the case for longer, and for v9 and older there are no updates at all, not even for payment. ELTS buys time, for instance until a relaunch that is already scheduled. It does not solve a technical problem: when it runs out, the same question is waiting, only with a greater distance to the current version.
An upgrade starts with a review and an extension audit: is there a v14 release for each extension, is it still needed at all, is there a replacement? The Extension Scanner checks your own code, TYPO3 Rector takes care of part of the changes, and the rest is manual work. We move up through the LTS versions on a test instance; your website stays online until the switch. For many existing systems the biggest single item in v14 is the removal of list_type: plugins still registered that way have to be converted and their content migrated. From v9 and older, the step is technically a rebuild with data migration. We tell you that before the quote, not during the project.
Updates within an LTS line are part of maintenance; the jump between major versions is a project of its own, with a fixed price for the clearly defined parts. Whether v14 directly, v13 as an interim step or a rebuild is the right route depends on the starting version, the amount of custom development, the interfaces and the state of the frontend. In one place proximity genuinely helps with an upgrade: acceptance testing on the test system can be done together round one table, with the people who use the website every day. Support deadlines, ELTS prices and the breaking changes in v14 are covered in detail on our TYPO3 update page. An upgrade that meets its deadline starts well before it.
Public bodies and social organisations: many editors, one website
TYPO3 is widespread among the kind of organisations that shape a university city and regional centre in north-west Germany: universities, public administration, chambers, associations, social welfare organisations. Their websites have one thing in common. Many people maintain them, often alongside their actual job, and each of them should only be able to change their own section. At Diakonisches Werk Oldenburg, facilities, services and counselling centres sit under one roof. Its TYPO3 website reflects this branched structure, can be maintained by many editors and is accessible to all. For websites like this, TYPO3 is the obvious choice. Not because of the technology, but because of the organisation behind it.
A website with many editors stands or falls with its permissions concept. In TYPO3, every facility, department or branch gets a backend user group with access to exactly its part of the page tree and its own file area. We build content elements so that editors enter content rather than design it: headings, text, images with alternative text, contact persons and opening hours as fields instead of freely formatted text. That keeps the website consistent however many people work on it, and turns accessibility into a property of the system instead of a task for every single editor. A field that only accepts the right input needs no instructions.
Public bodies are subject to their own accessibility rules: at federal level BITV 2.0, the German accessibility regulation for public-sector websites, plus corresponding rules in the federal states. Consumer services in e-commerce have also been covered since 28 June 2025 by the BFSG, Germany’s implementation of the European Accessibility Act. Which rule applies to your organisation is a question for your legal adviser, not your agency. Technically, the benchmark in both cases is usually EN 301 549, which refers to WCAG at level AA. That an existing system can be brought up to standard is shown by the corporate website of the Bünting Group from Leer: we raised the existing TYPO3 to BFSG level, with skip links, a contrast mode, text size options and full keyboard operation. An overlay script replaces none of that.