Public roadmap

What we're building

The Community Edition roadmap, live from GitHub. Items move as work ships — nothing here is a promise with a date.

View on GitHub

Now

In progress on Community Edition.

Platform#18
Redis cache adapter
Multi-instance deployments need a shared cache rather than process memory or a local filesystem.
Platform#54
Federated admin login, MFA, and session revocation controls
Production administration needs modern identity options and visible session control beyond password-only login.
Platform#94
Safe custom JavaScript and third-party snippet injection
#73 shipped custom CSS in the page builder. Authors also need to add JavaScript — analytics snippets, chat widgets, structured-data blocks, small interactions — per page or…
Platform#105
WebAuthn passkey sign-in for administrators and users
#70 shipped TOTP and #54 covers federated login and session revocation. Passkeys (WebAuthn) are now the strongest widely-supported option: phishing-resistant, no shared secret,…
Content#143
Federated API parity for comment spam policy management
#109 shipped local heuristic spam scoring, admin-curated block/allow rules, and admin-curated spam-signal terms for public comments — but only through the cookie-authenticated…
Platform#146
Umbrella: Elsa Workflows connector and managed cloud
Use Justflows as the customer/workspace, configuration, billing, quota, and support layer for an Elsa Workflows cloud offering. This umbrella covers both: 1. Elsa Connector…
Platform#198
Security program: harden core and extension trust, build a Security Center, and verify recovery
Make Justflows CE secure by default and give operators a built-in Security Center with actionable checks, security events, integrity status, and recovery guidance. Essential…
Extensions#231
Umbrella: Shop Stripe payment suite
Make Stripe a complete, first-class payment provider for the Shop plugin (plugin-registry-service/plugins/ecommerce), covering online checkout, wallets, local methods, saved…
Extensions#241
Stripe: fees, balance transactions, and payout reconciliation
- [ ] Store the Stripe fee and net amount per payment from balance transactions. - [ ] Payouts listed with the orders/refunds/disputes they contain; payout. webhooks update…
Extensions#242
Stripe: optional Stripe Tax calculation and tax transactions
Merchants can use Stripe Tax instead of Shop's own tax rates. - [ ] Setting to use Stripe Tax per site; Shop tax remains the default. - [ ] Tax calculated at checkout via Tax…
Extensions#243
Stripe: Stripe Invoicing and Quotes for B2B orders
- [ ] Admin can send an order as a Stripe Invoice (hosted invoice page, due date, payment terms). - [ ] Optional Stripe Quotes for draft orders; accepted quotes become orders.…
Extensions#244
Stripe Connect for multisite: per-site connected accounts and platform fees
On a multisite/multi-tenant installation (see #23), every site currently needs its own Stripe secret keys. Operators running a hosted network (like Justflows Cloud) need sites…
Extensions#245
Stripe: admin setup, test mode, diagnostics, and agent tools
- [ ] Guided setup in Payments settings: keys or Connect onboarding, webhook registration, payment methods, wallet domains. - [ ] Separate test and live credentials with a…
Extensions#246
Stripe: test suite and merchant documentation
- [ ] Unit tests using recorded fixtures for every API call and webhook type. - [ ] Optional integration suite against stripe-mock and Stripe CLI webhook forwarding, kept out…
Operations#257
Network backup and restore for root site and all subsites
The current backup and restore workflow is scoped to the site selected in Admin. A multisite operator must back up and restore every subsite separately, and a root-site archive…
Platform#269
Run a scoped independent security review
Part of #198. Someone outside the development of the new security surface reviews it before broad availability. - Scope the review to the Security Center, extension trust, and…

Queued once the current slice lands.

Later

On the horizon, not scheduled.

Shipped

111

Already in Community Edition.

This page reads the public Justflows GitHub project. Columns can change without a release date attached.

Your free website is a minute away

Pick a name and your site is live, ready to edit. No credit card, no server, nothing to install.

Create your free website Star on GitHub

What we're building

Now

Redis cache adapter

Federated admin login, MFA, and session revocation controls

Safe custom JavaScript and third-party snippet injection

WebAuthn passkey sign-in for administrators and users

Federated API parity for comment spam policy management

Umbrella: Elsa Workflows connector and managed cloud

Security program: harden core and extension trust, build a Security Center, and verify recovery

Umbrella: Shop Stripe payment suite

Stripe: fees, balance transactions, and payout reconciliation

Stripe: optional Stripe Tax calculation and tax transactions

Stripe: Stripe Invoicing and Quotes for B2B orders

Stripe Connect for multisite: per-site connected accounts and platform fees

Stripe: admin setup, test mode, diagnostics, and agent tools

Stripe: test suite and merchant documentation

Network backup and restore for root site and all subsites

Run a scoped independent security review

Next

Editorial workflow with draft, review, approval, and publish states

Shop: support lifetime subscription discounts for limited signup offers

First-party Helpdesk plugin: multisite + Shop customer service, tickets, visibility, handover, secure uploads, support popup, subscription limits

Analytics network tag: decide consent on sites without a consent plugin

Load only the JavaScript and CSS each page needs (code splitting, per-page assets, hashed caching)

Workspace Subscription page: current plan, upgrades, usage, and root-site limit visibility

Elsa: agree supported API, authentication, tenancy, and hosting contract

Elsa connector: health sync, usage sync, diagnostics, and observability

Elsa connector: signed callbacks and webhook replay protection

Elsa cloud: build private provisioning API and environment state machine

Elsa cloud: provision shared multi-tenant pools for small plans

Elsa cloud: provision dedicated instances for larger plans

Elsa cloud: migrate customers from shared pools to dedicated instances

Elsa cloud: connect subscriptions, quotas, suspension, retention, and deletion

Elsa integration: security, isolation, disaster recovery, and production readiness

Elsa integration: define Justflows hook catalog and versioned event envelopes

Elsa integration: build hook-to-workflow mappings and durable delivery

Elsa integration: provision workspace-scoped service identities and capability consent

Elsa integration: publish official Justflows Elsa activity package

Elsa integration: end-to-end internal, external, and isolation test suite

Sandbox unverified plugins and let only verified releases run outside it

Open the marketplace to third-party publishers safely

Add publisher accounts, namespaces, and plugin ownership

Add a review queue with reviewer roles and an audit trail

Sign marketplace releases only after approval, in a separate signing service

Accept plugin source through a GitHub App and a CLI

Build submissions in isolated throwaway environments

Run automated security checks on every submission

Roll out marketplace updates in stages

Let Justflows remotely disable confirmed malicious plugins

Monitor listed plugins and respond to publisher compromise

Pilot third-party publishing with invited publishers, then open it up

Later

Multiple language selector designs and customization

Optional separate mobile and desktop cache variants

Configurable GDPR and PSD2/PSD3 readiness and compliance controls

Default privacy policy page generator and setting

Plugin and theme quality checker for authors

Shareable draft preview links

Maintenance mode and coming-soon page

First-party Related Content plugin

First-party Newsletter and subscriber management plugin

First-party Announcements and site-wide banners plugin

First-party Paid memberships and subscriptions plugin

First-party Documentation and knowledge-base theme

First-party Portfolio and agency theme

First-party Magazine and news theme

OpenLiteSpeed / LiteSpeed hosting and LSCache integration

First-party Content access control and gating plugin

First-party Ticketing and event tickets plugin

First-party Interactive maps plugin

Create new patterns

Create a Cpanel plugin

Stripe: Terminal for in-person payments

Stripe: Identity verification for customers

Stripe: evaluate remaining Stripe products (Issuing, Treasury, Capital, Financial Connections, Climate)

First-party Moneybird integration: full API suite and official-plugin compatibility

Allow closed-source paid plugins under a commercial agreement

Shipped

Persist custom content types and fields

Public content REST API and OpenAPI for headless use