Download websites that use Squiz Matrix

About Squiz Matrix

Open source licensing and enterprise content management rarely appear together, and Squiz Matrix is one of the products where they do. The platform comes from Squiz, carries a GPL v2 licence and is written in PHP, so the code behind a large institutional site can in principle be read, audited and hosted by the organisation running it rather than rented as a sealed service.

The licence says less about the buying process than it appears to. Software in this bracket is not installed on a whim. A content platform built around workflow, granular permissions and multi site publishing arrives as a project, with a budget, an implementation partner and a replacement cycle measured in years, and the choice usually outlasts the people who made it. That is what makes the detected population worth having as a list rather than as a lookup: a site running this CMS represents a decision that has already been made and is expensive to reverse, which is a completely different conversation from a site sitting on a hosted builder.

As of October 2026 we see the platform on 75 sites. The count is modest, and modest is the point. Fingerprints for enterprise content management undercount, because installations often sit behind a CDN, a reverse proxy or a heavily customised front end that strips the markers a scanner reads, and because a large share of the biggest deployments are intranets, staff portals and extranets that a public crawl never reaches. Read the figure as the visible floor of the installed base rather than as the installed base itself.

A per domain lookup answers whether one site runs the platform. The export answers the questions that only the whole set can answer: which organisations are on it, how the population spreads across countries and domain suffixes once you join our other fields, which sites have moved off since the previous snapshot, and which of them share hosting or a common integrator. Agencies use lists like this to size a migration market before pitching one. Security teams use them to build a watch list when an advisory lands for a platform they do not run themselves. Competitors use them to find accounts whose contract renewal is approaching.

The software has been shipping since 2004, which is long enough for several generations of front end fashion to pass over it without disturbing the sites underneath. Long lived platforms accumulate installations nobody is actively maintaining alongside estates under genuine investment, and the two look identical from the outside. A list of live sites, compared against itself over time, is the fastest way to tell one from the other.