Download websites that use XWiki

About XWiki

Wiki software mostly lives where a crawler cannot follow. XWiki is built for internal knowledge bases, team documentation and intranets, and an internal knowledge base by definition does not answer an anonymous request from the public internet. Anything we can count is the exposed edge of an installed base whose bulk sits behind a login, a VPN or a firewall.

As of October 2026 our crawl records XWiki on 1 site, and the figure has to be read with that limitation standing in front of it. Public instances are the documentation portals, community wikis and project sites that an organisation deliberately opened up. Every other install of the same software is invisible to us and to every other external scan, which is a structural gap rather than a coverage problem we could fix with a bigger crawl.

XWiki SAS maintains the platform under the LGPL, and the codebase goes back to 2004, which is old for web software and tells you something about who runs it. Written in Java, the platform expects a servlet container and a database behind it, so nobody ends up on it by accident through a one-click installer on cheap shared hosting. Presence implies a deliberate operations decision and somebody employed to keep a JVM alive.

The licence is not a footnote either. The LGPL sits between permissive and strict copyleft, which lets a company embed the platform inside a larger internal system without opening their own code, and that is precisely the reading corporate legal teams need before a self-hosted wiki gets approved. Self-hosting also means there is no vendor customer list to buy, no billing system that knows who is running it, and no subscription telemetry. A crawl is the closest thing to a public census that anyone has.

The missing vendor list is what makes an exported set different from a lookup on a domain you already have. Checking one host confirms one host. The full set shows which organisations run an open-source wiki in public, which sectors cluster there, and how those choices shift between two crawls, and shifts are the useful part: a public instance that disappears has usually been consolidated into a commercial documentation service, and a new one appearing is usually a team that outgrew a hosted tool. Anyone selling documentation software, offering hosting and support for it, or tracking exposure after a published vulnerability is asking one of those questions.