EspoCRM Review

Overview

EspoCRM is a self-hosted CRM under AGPLv3 that has been in development since 2011, started in Ukraine and now owned by EspoCRM, Inc., a Delaware corporation, and it moves fast: 10.0.7 shipped on September 3, 2026, three months after the 10.0 line landed. The free core covers accounts, contacts, leads, opportunities, cases, a knowledge base, customer portals, mass email campaigns with target lists and mail merge, web-to-lead forms, kanban, and a formula engine with dynamic logic for calculated fields and conditional UI; version 10 added multiple pipelines, record locking, and categories for custom entity types. What the free edition leaves out matters when you compare it with commercial CRMs: workflow automation, the business process management designer, and reports are paid extensions sold together as the Advanced Pack, as are VoIP and Twilio telephony, Google Workspace and Outlook sync, and the AI add-on. That add-on, called Intelligence and first released in August 2026, connects to OpenAI, Gemini, Claude, or any OpenAI-compatible provider and adds summarization, intelligent paste, an AI email composer, and formula functions for classification, data extraction, and summaries, which is the only AI surface in the product. Integration work is well served: a documented REST API at api/v1 with an OpenAPI spec since version 9.3 and official API clients in PHP, JavaScript, Python, Rust, Java, Go, and Zig. Requirements are PHP 8.3 through 8.5 with MySQL 8 or later, MariaDB 10.3 or later, or PostgreSQL 15 or later, plus an optional WebSocket daemon for real-time updates. Installation is an archive with a browser wizard, a shell script with Let's Encrypt options, or Docker. Vendor-hosted cloud plans run from € 12.90 per user monthly on Basic to € 59 on Ultimate, each including the Advanced Pack. We have not run EspoCRM; this assessment is from the repository, the docs, and the vendor site.

How to install

1. Fastest route is the official installer script: wget -N https://github.com/espocrm/espocrm-installer/releases/latest/download/install.sh then sudo bash install.sh. Add --ssl for certificates, or run unattended with sudo bash install.sh -y --ssl --letsencrypt --domain=my-espocrm.com [email protected].
2. Docker route per the docs: create an espocrm-network and four volumes (espocrm-db, espocrm-data, espocrm-custom, espocrm-custom-client), then run a MariaDB container plus espocrm/espocrm published on 8080, and an espocrm-daemon container alongside. Default login is admin / admin_password.
3. Archive route: extract the release archive to your web server directory (the docs name public_html or www), set 755 for directories, 644 for files, and 775 for the data directory, with ownership typically www-data:www-data, then open the domain in a browser to run the wizard.
4. Scheduled jobs need cron: add * * * * * /usr/bin/php -f /var/www/html/espocrm/cron.php > /dev/null 2>&1 through crontab -e -u WEBSERVER_USER.
5. Real-time updates are optional and separate: a WebSocket daemon (websocket.php) runs under systemd and needs the ZMQ PHP extension.

Requirements

PHP 8.3 to 8.5 with pdo_mysql or pdo_pgsql, gd, openssl, zip, mbstring, iconv, curl, xml, xmlwriter, exif, and bcmath. Database: MySQL 8.0 or later, MariaDB 10.3 or later, or PostgreSQL 15 or later. The docs ask for max_execution_time and max_input_time of 180, memory_limit of 256M, and 50M upload and post sizes. Apache, Nginx, and IIS are supported; Elasticsearch and RabbitMQ are not part of the documented stack.

Best for

Small and mid-sized teams that want a self-hosted CRM with real mass email, target lists, case handling, and a customer portal out of the box, and that will pay once for the Advanced Pack rather than per seat. Agencies and IT teams that want a documented REST API with an OpenAPI spec and clients in seven languages will find the integration path unusually well covered.

Not for

Teams that need workflow automation, BPM, or reporting without paying: those are Advanced Pack extensions, not free core. Also skip it if AI features are a buying requirement for the free edition, since Intelligence is a paid add-on released in August 2026, and if you want an OSI license without copyleft, since AGPLv3 applies to modifications served over a network.

Review notes

Assessed from the repository, docs.espocrm.com, and espocrm.com; we have not run an instance. The correction worth making up front: workflow automation, the BPM designer, and reports are paid extensions in the Advanced Pack, not part of the free edition, so the free product's automation surface is the formula engine and dynamic logic rather than rule-based workflows. Cloud plans bundle the Advanced Pack, which changes the comparison with per-seat SaaS CRMs considerably.

Release cadence is the strongest freshness signal in this category: the 10.0 line shipped July 2, 2026 and reached 10.0.7 by September 3, with 9.x maintained in parallel at 9.3.10. Version 10 brought multiple pipelines, record locking, cascade removal with restore, and categories for custom entities; 9.x added collaborators, scheduled email send, web-to-lead forms, and the OpenAPI spec. Two releases in the 10.0 line were security fixes with published GitHub advisories, which is the pattern you want to see in a project that handles customer data.

The extension catalog is where EspoCRM monetizes, and pricing is not published on the product pages: neither the Advanced Pack nor the Intelligence add-on shows a number on espocrm.com, so budget planning means contacting the vendor. Cloud hosting is the exception, with published € pricing: Basic at € 12.90 per user monthly with a three-user minimum, Enterprise at € 22 with five users, and Ultimate at € 59 with ten users, all including the Advanced Pack and official extensions.

The API story is better than most open-source CRMs manage: a documented REST API under api/v1, an OpenAPI spec available at /api/v1/OpenApi since 9.3, and first-party clients for PHP, JavaScript, Python, Rust, Java, Go, and Zig. No native AI ships in the free core; the Intelligence extension is the AI surface, and its release notes show it arrived in August 2026 with OpenAI-compatible provider support added two weeks later.

Verdict

A fast-moving, well-documented self-hosted CRM whose free core covers the sales and support basics, with the automation, reporting, and AI depth sitting in paid extensions and cloud plans.

Similar Tools