Who still runs CakePHP
CakePHP is a PHP framework that gained popularity in the late 2000s for its convention-based approach, and many small businesses and agencies built portals, booking systems, directories and admin tools on it. BuiltWith trends for the top 1M sites (October 2026) show CakePHP on about 900 sites, a small but real group that is mostly forgotten by general PHP advice.
These applications are often between five and fifteen years old and were built by freelancers.
What goes wrong when nobody is looking after it
- The PHP version underneath is out of support. Hosts retire old PHP, and CakePHP 1.x and 2.x code written for old PHP stops working after a hosting change.
- Old major versions are retired. The project ends support for older lines on its published schedule, so a very old application gets no framework fixes.
- The upgrade path is a port. CakePHP 3 changed the ORM and naming conventions, so older apps cannot simply update.
- Plugins and vendor code are frozen. Third-party plugins were copied into the project and are no longer maintained.
- Configuration is hand-set. Database credentials, salts, email and cache settings sit in files that differ between servers.
- Few developers know old Cake. Searching for help brings up answers for versions that do not match.
Support and takeover options
CakePHP is Tier B, taken on by arrangement with a PHP specialist. The Takeover Assessment is read-only: identify the CakePHP and PHP versions, list plugins and custom code, document hosting and configuration, and test a database backup restore.
Options after that:
- Keep it running. Pin a supported hosting environment for the PHP version the app needs, tested backups, monitoring and a person to call. Ongoing Support is arranged case by case.
- Upgrade in stages. Move to a current CakePHP and PHP, fixing the ORM, templates and plugins at each step. Fixes and Upgrades.
- Re-platform. Move to Laravel or another stack if that is the better long-term fit. Modernization and AI.
If the site is down after a hosting change or a crash, Emergency Recovery is the first call. It covers outages from errors, crashes and neglect.
An upgrade from CakePHP 2 in outline
We typically build a new CakePHP application skeleton alongside the old one, port the database layer and models first, then controllers and views by feature, and run both side by side with a shared database until the last pieces are moved. At each step we compare screens and outputs. This takes longer than a rewrite on paper but carries far less risk, because the old site keeps working throughout.
Related PHP guidance
CakePHP shares most of its hosting and PHP-version concerns with other PHP software, so our page on PHP, WordPress and Laravel applies as well. Teams sometimes find that CakePHP code was mixed with plain PHP scripts or Perl, and we handle those in the same assessment.
How we work
Tier B and C stacks are by arrangement with a stack specialist. We scope each in writing and tell you plainly when we are not the right fit. Every engagement starts read-only. Write access is set out in a signed agreement first, and a person reviews every change before it reaches a live system. Work is AI-assisted and human-reviewed, and we explain how at the start.
Related stacks
See PHP, WordPress and Laravel, Perl and CGI and Ruby on Rails.
Request a quote for your CakePHP application and tell us the version if you know it, what the app does and where it is hosted.