Authored on
Title

Your Legacy Website Isn’t Saving You Money

Subheader

The real costs of staying on a legacy CMS — or no CMS at all — and how to make the case for modernization.

Featured Image
office worker at desk in front of laptop and desktop monitor
Lead-in

When it comes to upgrading their website, many government and higher ed leaders fall back on the same logic to put it off: upgrades are too expensive, and the old system still works. Whether that system is an older content management system ("CMS"), a static HTML site, or something built years ago in a language like ColdFusion, the reasoning tends to be the same.

The problem is that staying put has its own real costs. They're just spread out in ways that are harder to see on a budget line: staff hours, IT bandwidth, missed opportunities, and technical debt that gets heavier every year you wait.

Let's look at the main costs of staying put — and how they build the case for an upgrade.

Sections
1. Institutional Knowledge in One Person’s Head

In a lot of the agencies and institutions we work with, the website only works because one person knows how to run it. Not because it’s well-built, but because they’ve spent years learning its quirks, applying patches, and building workarounds for things the system can’t do natively.

Think of an older site like a junk drawer. Things accumulate over time with no rhyme or reason. If there’s only one person putting everything in there, they can probably find what you need. No one else can.

One or two patch files become dozens. Custom overrides stack up. Single-use workarounds get buried under years of additions. When that person leaves, so does the institutional memory. And finding a replacement is hard when the required skill set is specific to a platform very few people still work with.

2. Mounting Technical Debt

Technical debt has a concrete shape. Patches applied because the system couldn’t handle something natively. Custom modules built years ago by an agency that no longer exists. Workarounds that have to be dismantled before anything else can move forward.

What starts as a redesign request frequently becomes a backend rescue mission.

Security compounds the problem. Legacy systems often run on outdated versions of PHP, or on languages like ColdFusion that are no longer actively developed. Security patches stop coming, and your IT team is left defending a platform that gets harder to protect over time. Known vulnerabilities are well documented, which makes aging systems easier targets, not harder ones.

For some organizations, the final straw is an end-of-life notice from the platform itself. When a system stops receiving updates, putting off the upgrade stops being a choice and becomes an emergency. Rebuilds under that kind of deadline pressure are more expensive, more disruptive, and rarely produce the best outcomes.

3. Drag on Communications Teams

While IT manages the maintenance burden, communications and marketing teams are dealing with a different kind of drag. A modern CMS handles most of what they need out of the box. An old system forces them to work around it at every turn:

  • No CRM or enrollment integrations — Tools like Slate sit outside the CMS, which means more manual data management and missed personalization.
  • Campaign assets require IT — Landing pages and microsites need a ticket to get built, if they get built at all.
  • Content spread across third-party platforms — Teams end up stitching together what the primary CMS can’t support.
  • Newsletters managed separately — Instead of publishing from the site, teams maintain a parallel workflow.

There’s also the question of content governance. 

Older systems typically have no built-in rules around who can publish what, no approval workflows, and no way to enforce standards across departments. In large institutions where dozens or hundreds of contributors have site access, that leads to content sprawl, inconsistent messaging, and no practical way to clean it up without a full rebuild.

None of that is free, and the cost compounds alongside everything else.

4. The Strategic Ceiling

When leadership asks what the organization is doing about emerging priorities, legacy systems tend to produce the same answer: not much. The platform simply can’t support it, and that ceiling shows up across several areas:

  • AI-enhanced search, chatbots, and editorial tools — These require integrations no one is building for outdated platforms.
  • Personalization and multilingual expansion — Both depend on modern architecture that legacy systems weren’t designed to support.
  • Accessibility compliance — For visitors and editors, this is effectively out of reach on a system built before current WCAG standards existed. The typical workaround is a third-party widget, which doesn’t fix the underlying code, it just makes the problem less visible.

Every forward-looking initiative shut down because the platform can’t support it is a cost, even if it never appears on an invoice.

What starts as a small redesign request frequently becomes a backend rescue mission.
How to Make the Case for an Upgrade

An upgrade has an upfront cost that’s easy to see on a budget proposal. The cost of staying is harder to itemize but just as real. A useful starting point is to add up what your organization is actually spending on its current system today:

  • Staff time — If someone’s full-time or near-full-time role is managing and maintaining the existing system, ask whether that position would still be necessary on a modern, well-supported CMS. Factor in IT hours spent fielding requests from communications teams, applying patches, and troubleshooting issues a current platform would handle automatically.
  • Workaround spending — Third-party tools, microsites, and outside contractors all accumulate when a system can’t do what the organization needs. Each line item may seem minor. Add them together across a year or two and they often represent a significant recurring expense.
  • Delayed or abandoned initiatives — Every campaign that couldn’t launch on time, every integration that was never built, every deferred accessibility remediation has real organizational consequences, even when it doesn’t show up on an invoice.

When organizations lay all of this out honestly, the crossover point — where the total cost of an upgrade becomes less than the total cost of staying — tends to arrive faster than expected. 

The real question is whether that accounting happens proactively, or gets forced by a staff departure, a security incident, an end-of-life notice, or a leadership question no one can answer.

Final Word

The organizations that fare best are the ones that don’t wait. If you’re starting to recognize these patterns in your own organization, we’re glad to talk through what a realistic path forward might look like.

About the Author

About the author

headshot of Dan

Dan Moriarty is the co-founder, CEO and chief strategist with Electric Citizen.