We're proud to announce BoxLang 1.11.0, a highly focused performance and stability release that delivers measurable speed improvements across every BoxLang application, with zero code changes required. The team invested deeply in bytecode generation, class loading, lock management, and type casting to produce one of the most impactful runtime optimization releases to date. Alongside the performance wave, this release resolves critical concurrency bugs, hardens DateTime handling, and ships powerful new developer tooling.
Blog
Ortus & BoxLang Feb Recap 2026
This month in the Ortus Solutions ecosystem was marked by major releases, enhancements to core tools like BoxLang and ColdBox, and strategic content focused on modernization, security, performance, and team optimization.
What If the JVM Felt Lightweight Again?
For two decades, the JVM has powered some of the most important systems in the world...
SocketBox: Security, Authentication, and Authorization
Welcome back to our series on SocketBox the premier WebSocket module for CommandBox and the BoxLang runtime!
Why Legacy CFML Applications Block Innovation
APIs, OAuth, SSO and Cloud Services in a Modern Architecture
For many organizations, legacy CFML applications still run core business processes reliably. They generate revenue, process transactions and support customers every day.
The problem is not always stability.
The problem is velocity.
Over time, older ColdFusion or Lucee environments begin to limit what the organization can build next. Not because the business lacks vision, but because the underlying platf...
ColdFusion Security Isn’t Optional: 7 Hidden Risks Lurking in Mature CFML Environments
ColdFusion applications are often stable for years.
They keep running.
They serve users.
They “just work.”
And that stability creates a dangerous illusion:
“If nothing’s broken, we must be secure.”
In mature CFML environments — especially those running Adobe ColdFusion 2021, Adobe ColdFusion 2018, Adobe ColdFusion 2016, Adobe ColdFusion 11, Lucee 5.4, or Lucee 5.3 or older — risk rarely appears as a dramatic failure.
It accumulates quietly.
...BoxLang Homebrew Installer Released
We're excited to announce the official BoxLang Homebrew tap — the easiest way to get BoxLang up and running on macOS (and Linux with Homebrew). One command, and you're in business.
Is Your JVM Build Pipeline Slowing Down Your Entire Organization?
The Problem Nobody Puts on the Roadmap
Most engineering teams using Java, Kotlin, Groovy, Scala, or Clojure don’t say:
“Our build system is the problem.”
Instead, they say:
- “CI is just slow.”
- “Gradle sometimes breaks after upgrades.”
- “SBT takes forever.”
- “Kotlin compilation is heavy.”
- “Classpath issues again?”
- “Why did this pass locally but fail in CI?”
Into the Box Sessions Round 2 is now Out!
Into the Box 2026 is shaping up to be our most dynamic event yet! Building on the momentum of our first release, we are thrilled to announce the second round of sessions for this year's conference.
As the ecosystem continues to evolve, teams are balancing the realities of maintaining critical legacy applications while adopting modern tools, architectures, and practices. Into the Box has always been about meeting developers where they are and giving them practical paths to what’s next.
Why UK Financial Institutions are reassessing ColdFusion Licensing
Rising ColdFusion Licensing Costs, Oracle JVM Risk and Financial Exposure in the United Kingdom
Across the United Kingdom, many financial institutions continue to rely on legacy Adobe ColdFusion (ACF) platforms to power internal banking systems, insurance portals, reporting tools, and regulatory workflows.
For years, these systems were stable and cost-effective.
Today, however, Adobe ColdFusion licensing costs