Skip to content
GDPR-compliant B2B shops

Operations, performance & security

A portal that carries orders is part of the operating infrastructure — outages and long loading times cost revenue and trust immediately. This category deals with day-to-day operations: response times and Core Web Vitals under real load, caching strategies for customer-specific prices, search performance with large assortments, update and patch routines, access protection for customer accounts, backups and recovery. We explain which measurements are meaningful, how to narrow down bottlenecks systematically and how to plan a maintenance window that does not slow down sales. Organisational questions are covered too: responsibilities, documentation, escalation paths during incidents and working with service providers. We also show how to summarise the state of a portal in a handful of metrics that management can interpret without technical explanation.

Shopware maintenance plan: set the window yourselfSupport status of the Shopware lines (release policy)2025202620272028Shopware 6.5Shopware 6.6Shopware 6.728 Feb 202728 Feb 2028actively maintainedextended supportsecurity fixes onlyend of lifeUpgrade path: five steps before the production windowInventorycore, PHP, pluginsStaging cloneanonymised live dataDry runDB migrationsSmoke tests10 B2B flowsRollback plandefined fallback time119new vulnerabilities per dayon average, +24 % (BSI)28 Feb 2027end of 6.5 security fixesand of 6.6 extended support (Shopware)31 Dec 2026PHP 8.2 without security fixes6.7 runs on 8.3 and 8.4 (PHP.net)Set the maintenance window yourself — rather than letting a CVE set it

Upgrading to Shopware 6.7: A B2B Maintenance Plan

Shopware 6.5 gets security fixes only until February 2027. How B2B stores set up the move to 6.7 as a planned maintenance window instead of an emergency.

14 min read
IT Security and NIS2 for Your B2B ShopNIS2 Implementation Actin force since 6 Dec 2025around 29,500 entitiesGDPRData protection and reportingaround EUR 1.2bn fines in 2025PCI-DSS 4.0.1Card payment securityMFA required since 31 Mar 2025Harden the B2B shopMFA and phishing-resistant loginsUpdates and patch managementBackups and monitoringSupply-chain securityB2B shop (Shopware)IncidentReporting chain to the BSI24 hoursEarly warning72 hoursReport with assessment1 monthFinal reportEUR 289bndamage to the economy 2025 (Bitkom)50 staff · EUR 10mthreshold for important entity (BSI)119 / daynew vulnerabilities 2025 (BSI)Registration · Hardening · Reporting · Maintenance — IT security as an ongoing process

IT Security and NIS2 for Your B2B Shop

What NIS2, GDPR and PCI-DSS mean for B2B store operators: scope assessment, reporting deadlines, supply-chain security, MFA and technical hardening.

13 min read
B2B Store Performance ArchitectureB2B Store FrontendShopware Open Source + Lazy LoadingCDN + HTTP/2 + Brotli CompressionRedis CacheSession CacheObject CacheHTTP CacheOpenSearchFull-Text SearchFaceted FilteringAggregationsDatabaseQuery OptimizationIndexingRead ReplicasQueue WorkersImport JobsIndex UpdatesPrice Calculation<200msTTFB Target95%Cache Hit Rate100k+Products Scalable50msSearch ResponsePerformance Optimization Path1. Measure + Profile2. Set Up Caching3. Tune Database4. CDN + Frontend5. Monitoring

Performance Optimization for B2B Stores with Large Catalogs

Redis, OpenSearch, database tuning and CDN: How to make your B2B store with 100,000+ products fast and scalable.

11 min read