CF411: 2,000+ Tools and Resources for CFers,
(in over 170 categories) by Charlie Arehart (Last Updated: Jun 27, 2017)

How often do you see a question asked on a list, "does anyone know where I can find CFML resources about xxx", or "what tools are available to do yyy?". Now you have one place you can point people to answer most such questions. See the bottom of this page for additional background information on this service.

This is (for now) one long page. Please use the category links below or your browser "find" feature (ctrl-f) to search for something specific, not the search box on the right, which searches the entire site.

The Categories (first resources, then tools)

I don't here recommend any tools (since needs are so different between folks), and I can't offer an exhaustive list of all tools for all developers, but I do want to help list some of the alternatives available in a variety of categories that are either written for, or are useful by, CF developers. In some cases, I am able to offer below links to other sites that offer reviews of some of these tools.


This is a perpetual work in progress. While I don't check the list with any guaranteed regularity, I do run various link check tools occasionally, and also manually review each link in each section on occasion. I will strike out any links which I find no longer work, or when there are many "striken" entries in a section, I will create a new entry tracking seemingly "defunct" tools/resources. If I ever strike out something that you think should not be, just let me know.

If a tool clearly lists when it was last updated, I try to indicate if it has not been updated in more than a few years, and I'll indicate when that check was made.

I welcome additions or corrections to this list. If you have any to offer, please let me know. Be sure to clarify that you're providing additional items for "the 'CF411' list".

CFML-Oriented Resources

CFML Blog Aggregators (and bloggers) [link]

There are literally hundreds of blogs from CFML/CF developers. Some blogs are popular and known by most, while some less popular ones may well offer some hidden gems. Rather than try to list them all here, and indeed rather than you having to read them all, the following aggregators focus on CF-oriented blogs.

Some blogs are in all the aggregators, but it's worth keeping an eye on more than one. I provide as well a link to the list of all CFML blogs that each aggregator follows. This way, you can find out all the folks who blog about CF.

CFML Blog Highlight Services [link]

Related to the last section, I want to mention, separately from the aggregators above, that there have some bloggers who tried organizing periodic highlights of what they deem to be "best of the blogs" in the CF blogosphere. It's a tough job, hard for them to keep it up, but let's enjoy (and thank) them for what they do or did.
Don't forget to consider using a Feed Reader or one of many RSS to Email services to be kept informed of updates to these.

CFML Books [link]

Following are books that have been written on the subject of ColdFusion or CFML, listed approximately in order of recency. I'm focusing here only those published in the last several years.

While those are books available on Amazon, consider also these which are not: I welcome additions/corrections/feedback.

CFML Certification Preparation Resources [link]

The tools mentioned may still be oriented only toward a prior rlease of CF, so if you're looking for that latest release-specific information to help with getting certified, the best bet is the CFML documentation.
  • Adobe ColdFusion Certification site (including exam guidelines, example questions, and information on registering to take the exams)
  • CF ExamBuster (, commercial by inexpensive. (Still only for CF8, as of 2013.)
  • ColdFusion Certification Resources (, by Ben Nadel
  • Learn by Heart CF Exam Practice (, has been "retired"
  • uCertify CF certification prepkit (
  • Note also, though it's not been updated since CF7, Ben Forta had a well-received book, ColdFusion MX 7 Certified Developer Study Guide
  • I welcome additions/corrections/feedback

CFML Conferences [link]

The following conferences have some, if not an entire, focus on ColdFusion and CFML. While I normally list other tools and resources in alphabetical order, in this case it seems useful to list them in order of their occurrence during the year. I present these in the order of the month they occur (did or will), regardless of the year, in case either they are delayed in announcing the date for a new year, or I am late in getting that information here. The assumption is that each event tends to repeat around the same time each year. I do bold the year to help warn you of the current information at the time of my last edit here.

About the Strikeouts: I will also strike out the whole date after it passes.
  • MuraCon, the Mura conference, organized by BlueRiver Interactive (Sacramenta, CA; Feb 9-10 2017
  • Adobe Government Summit, organized by Adobe (Washington, DC, USA; Apr 18-19 2017)
  • Into the Box, "ColdFusion & Java, Redefined", organized by the ColdBox team (Houston, TX, USA; Apr 26-28 2017)
  • cf.Objective(), "Developing Apps, Developing Skills, Developing Community", organized by the cfObjective team (Washington, DC, USA; Jul 21-22 2017)
  • NCDevCon, "North Carolina's Premier Web & Mobile Conference", organized by Dan Wilson, et al (Raleigh, NC, USA; Oct 7-8 2017)
  • Adobe ColdFusion Summit, organized by Adobe (Las Vegas, NV, USA; Nov 16-17 2017)
  • CFCamp, organized by Michael Hnat, et al (Munich, Germany; Oct 19-20 2017)
  • You can also sometimes find CF conferences listed on the site Lanyrd (that's a link that searches only for coming CF/CFML conferences). I'm not contributing to keeping that updated, myself, but thanks to those who are
  • I welcome additions/corrections/feedback

The following events are (or seem) defunct. (I move items here if I notice there's no announcement of the next event 13 months after the previous event, or of course if an event is announced as no longer happening, or if the URL breaks for an extended.):
  • Adobe MAX longer offers ColdFusion content as of 2013. See the Adobe CF Summit above, instead
  • BFlex and BFusion (, organized by Bob Flynn, et al (Bloomington, IN, USA), last held Sep 2010
  • BR Conference (, Brazilian Adobe products conference, organized by Francisco Paulino (Rio de Janeiro Brazil), last scheduled for 2010 but did not happen
  • CF Dev Camp (, organized by Sidney Maestre, Alan Rother, et al (Phoenix, AZ, USA), last held Nov 2010
  • CF Edge Conference, organized by Sys-con (New York, NY, USA), last held Sep 2001
  • CFDevCon (, organized by Russ Michaels, et al, (London, England), last held 2007
  • cf.Objective(ANZ) (, organized by Mark Mandel, et al (Melbourne, Australia), last held Nov 2012
  • ColdFusion Unconference at MAX, organized by Ray Camden, et al, last held Oct 2011
  • CFUnited (, organized by Michael Smith, et al (Washington, DC area, USA), last held Jul 2010
  • Dallas TechFest (, a one-day event with many tracks (Dallas, TX, USA), last held Aug 2011
  • D2W (, "designer/developer workflow conference", organized by Dee Sadler (Kansas City, MO, USA; last held Sep 2013)
  • OpenCF Summit (, organized by Matt Woodward, et al (Garland, TX, USA; last held Feb 2012)
  • Open Source CFML for Government Conference (, organized by Open CFML Foundation (Washington, DC, USA), last held Oct 9 2012
  • PhillyMerge (, organized by Adam Tuttle and Steve Rittler (Philadelphia, PA, USA), last held July 2011
  • Powered By Detroit (, organized by Cornel Ivanescu (Detroit, MI, USA), last held July 2005
  • RIAAdventure Cruise (, organized by Joshua Cyr, et al (Western Carribean), last held Dec 2009
  • RIACon (, organized by Phil Nacelli and AboutWeb (Rockville, MD, USA; last held Aug 2012
  • RIA Unleashed, organized originally by Brian Rinaldi, (Waltham, MA, USA), last held Oct 2011
  • Scotch on the Road (, organized by Andy Allan, et al (Europe), last held Oct 2009
  • Scotch on the Rocks (, organized by Andy Allan, et al (Edinburgh, Scotland; last held Jun 2014)
  • Spring <br> (, organized by Dave Hannum, et al (Athens, OH, USA), last held Jun 2009
  • WebDU (, organized by Geoff Bowers, et al (Sydney, Australia), last held May 2012
  • Webmaniacs (, organized by Fig Leaf Software (Washington, DC, USA), last held 2009

CFML Documentation/Help Tools and Resources [link]

While the Adobe docs are the best source for CFML documentation, there are online versions of that both from Adobe and others, providing access to the docs in various ways. Please note, though, that while most of the other resources show only the CFML reference, the actual Adobe docs contain more than just the CFML Reference, including a Developer's Guide, Installation Guide, Administration Guide, and more. Don't focus solely on the CFML Reference. You wouldn't learn a language by reading a dictionary, right?
  • Adobe ColdFusion docs page, with CF2016 docs available in online and PDF format. Note also the available link there to a page with PDFs of the docs for CF11 and older (back to CF 6.1).
  • While the first link above shows online (non-PDF) docs for CF2016, there do still remain the non-PDF form of the docs for CF10 and CF9. (Tthe URLs for online docs for CF2016 seem to be the same as those which had been used for CF11, so it seems one can no longer access the CF11 docs in other than PDF format.)
  •, a web-based alternative for accessing the CFML Reference and some select other resources. An open source project started by Pete Freitag of Foundeo.
  • CFQuickDocs, by Jacob Munson. "helps you quickly look up documentation on ColdFusion tags and functions". (Current up to CF8 docs, as of Feb 2015. If selected, CF9 docs do not function.)
  • CFML Guide, a PDF of 48 pages with reference info on CFML , indicating support for tags/functions across multiple CFML engines, from CENTINATED Gmbh (Current up to CF11 as of Feb 2015)
  • ColdFusionDocs, web-based access to CF 9, 8, 7 CFML reference, by Anuj Gakhar (Current up to CF9 docs, as of Feb 2015)
  • ColdFusion Documentation, an Android app, by Pyae Phyoe Shein (Current up to CF8 docs, as of Feb 2015)
  • Pete Freitag's "Cheat Sheets" (limited simple documentation of just some features) for ColdFusion and CFSCRIPT, and DateFormat
  • See also Pete Freitag's available bookmarklets for various CF doc sites
  • See also related ColdFusion "documentation" from Adobe available at CFML-oriented Security Resources, below
  • For help, as in assistance, see CFML Mailing Lists and Forums (finding help and support) and Professional CF-oriented Assistance (whether for help with development, troubleshooting, training, or otherwise)
  • I welcome additions/corrections/feedback

CFML Hosting Alternatives [link]

This is not an ultimate list of all CF hosts. These are just some of the more widely-used and -named hosts who have specific CF support listed on their site (some offering BD and Railo/Lucee hosting as well). If there is a specific page on a host's site that talks more about CF hosting specifically, I may have linked to that. But since web site links do change over time, if the page fails or seems outdated, look to other pages on the host's site for more info.

And be aware that some hosts may not support the latest version, and some support only older versions, so note that with regard to Adobe support and potential security issues. Still, there are hosts who support the latest edition. I've indicated below which support ColdFusion 2016, 11, or 10, the currently supported Adobe versions as of April 2016. (I determined this from a review of their site. I could well have missed some page that may indicate support of a later release. As always, I am grateful for feedback and would change any misinformation immediately.)

Most hosts offer a choice of either shared, private/dedicated, or virtual private servers (VPS). Note that I may point to one specific type for a given host, simply as representative of their CF-specific support. Again, see the rest of their site for more plan options, including levels of management, updates, and coding that may or may not be offered.

There are so many different hosting plans for so many different needs. At least there are many options, and again these are only some. See as well that I offer links to still other lists of CF hosts, after my list below.

CFML Job Resources (Hire/Be Hired) [link]

The following resources can help someone either offering or looking for a CF job/contract. Most let you post a listing for free, and many are CF-specific. For the ones that are more generic, I did a seach for ColdFusion. You may want to try CFML to be more broad, or of course you could search for Lucee, etc. if you use other CFML engines.
  • Ben Nadel's Jobs board (showing current jobs as of a check in Jun 2017), free to apply for jobs (right there often), and $29 to post a job. Jobs are listed not only there but in all blog posts and comment emails on Ben's site
  • CFML #jobs channel on the CFML slack (showing current jobs as of a check in Jun 2017). Signup using this link, and for more on the CFML slack channel, see this blog post
  •, from Akbar Sait (showing current jobs as of a check in Jun 2017)
  • (showing current jobs as of a check in Jun 2017), free to post or apply for jobs (also available as a twitter feed)
  • Indeed's list of CF jobs (showing nearly 200 CF jobs, current as of a check in Jun 2017), free to post (with paid options also) or apply for jobs
  • (showing current jobs as of a check in Jun 2017), free to post or apply for jobs
  • SimplyHired's list of CF jobs (showing over 200 CF jobs, current as of a check in Jun 2017), free to post and apply
  • Upwork's list of CF gigs, for contractors (showing current jobs as of a check in Jun 2017), free to post and apply
  • ZipRecruiter's CF jobs posted in the last 30 days (showing nearly 300 CF jobs, current as of a check in Jun 2017), free to post and apply
  • Finally, consider also the new (in June 2017) Google Jobs search result feature, which aggregates many job sites.
    If you just search "coldfusion jobs", it will default to looking for any near you. Of course there may be none, for some locations.

    But if you're willing to move (or consider telecommuting with a company elsewhere, or just interested to use this as a gauge of health of CF jobs elsewhere), note that you can also search for a city, like "coldfusion jobs washington dc" and you will find jobs there as well as near it as in MD and VA, which is nice.

    But don't fall for (or spread) the old wives' tale that DC is the only place left with CF jobs! I did this with search several major US cities (NY, LA, Chicago, Miami, and so on) and it found at least several CF jobs for each, as of a check in June 2017. (And again, consder using CFML, Lucee, or other search terms as may suit your interests.)

    For my international readers, I also tried searching outside the US and found none, but that was true of PHP jobs as well, so I think it is US-only, perhaps for now, or perhaps the country-specific google domains may serve up jobs for cities in/near that country.
  • Consider also that CFWebTools often has CF job openings, and most support telecommuting.
  • I am moving here to the bottom any sites where I find that they have not shown updates since 2016:
  • Of course, many user group mailing lists permit sharing of jobs. See Adobe's list of CF user groups
  • You may want to also look at my category of CF-oriented Application Development Consultants (to find or offer a job or engagement)
  • The following are (or seem) defunct: Atlanta CF User Group jobs mailing list (, Bay Area (SF) CFUG jobs board (, Ben Forta's jobs category on his blog (, CFBlogs jobs ( ColdBox CFML Jobs (, was not limited to ColdBox only), ColdFusion Careers (, Adobe CF General Job Opportunities (, Freelance CF gigs (, House of Fusion's CF Jobs forum/mailing list (, JustColdFusionJobs (, Mid-Michigan CFUG list of jobs (, Rob Gonda's list of CF/Flex jobs (, WhoUsesColdFusion Jobs list (
  • I welcome additions/corrections/feedback

CFML Mailing Lists and Forums (finding help and support) [link]

Following are several mailing lists, discussion lists, forums (most support both web-based and email-based dicussion), and other media (facebook and slack-based CFML channels) where you can find ask or find answers to common questions and challenges. Some have come and gone over the years (most notably CF-talk), but several do remain.

Note as well that at the end of the list, I also offer links to several individuals who are open to taking direct questions. (If you use the forums first, though, you may get answers from more people and also help educate more readers.)

Do beware, though, that when reviewing older forum messages or mailing list archives, you may see suggestions or ideas that are dated. They may even no longer apply in later versions of ColdFusion or other CFML engines. Be aware also that even recent comments could reflect misunderstanding from people not aware of newer information, or in today's world of twitter-level answers, often what's shared in these media may not provide enough info for you to make a truly informed decusion on a matter. If you're in need of urgent assistance, you can get direct help from folks focused on providing such troubleshooting assistance.

(If you're looking for CF-based forums, meaning those *written* in CFML, see instead Forums/Bulletin Board Tools (written in CFML) .)

CFML Podcasts, Past and Present [link]

Listen in as folks discuss CF/CFML and related topics.
  • CF Alive podcast, with Michael Smith and interviewees
  • 2 Devs from Down Under, with Kai Koenig and Mark Mandel (not really focused on CF anymore, last CF content in 2015, judging from the site--as of a check in March 2017)
  • CFHour, with Dave Ferguson and Scott Stroz (not really active anymore, with only 2 episodes since Nov 2015--as of a check in March 2017)
  • I welcome additions/corrections/feedback
  • The following podcasts seem no longer to be updated, or have declared to be no longer active. If the site link still works, I offer it as a hyperlink:
    • Aboutcast ( ran for a couple of episodes in 2006, hosted by Nic Tunney and AboutWeb
    • BoltTalks (, with Tim Cunningham
    • CFBrew (, with Mike Chandler (ran for 4 episodes in 2010)
    • CFConversations (, with Brian Meloche and others (ended in 2011)
    • CF Docs (, hosted by Mark Drew (ran for 3 episodes in 2009)
    • CFEclipse Videos offered as a podcast by Mark Drew in 2006 (note the videos were designed to be small enough to view in an iPod) (recovered via
    • ( offered 8 interview podcasts hosted by Nick Tong and Kola Oyedeji, from Jan-Mar 2007
    • CFPanel (, with Dan Vega and Todd Sharp
    • CFUnited podcast (, was recordings of conference presentations, hosted by Christian Ready
    • ColdFusion Muse (, with Mark Kruger (ran from Nov 2005 through May 2006)
    • ColdFusion Shw (, with Ryan Stille and Mike Henke (ran for 8 episodes in 2011/12)
    • ColdFusion Weekly (, with Matt Woodward and Peter Farrell, went off the air in early 2008 after a 2 year run
    • Deductive Developers (, with Matt Woodward and Peter Farrell, was a hoped-for follow up to their CFWeekly podcast, but ran for only 2 episodes
    • I'm my own sql (, hosted by C. Hatton Humphrey, ran out of for just a couple of episodes in late 2006
    • OutLoud (, with Hal Helms and Jeff Peters, ran for 47 episodes from Oct 2005 through Sep 2007, then again for a few episodes in 2011
    • RIAPodcast (, with John Mason and frequent panelists Josh Adams, Charlie Arehart, and Doug Knudsen (ran for 24 episodes from 2009-2011)
    • Runtime Expectations (, with Adrian Pomilio, Bucky Schwarz, and Ben Farrell (ran for 26 episodes from 2011-2012)
    • The ColdFusion Podcast (, with Bryan Kaiser and Michael Haynie, ran for 38 episodes from Oct 2005 through Jan 2007
    • The ColdFusion Show (, with Ryan Stille and Mike Henke, ran for 8 episodes, ending in early 2012
    • The Scotch on the Rocks conference organizers (Stephen Moretti and Andy Allan) did a podcast ( which ran for one episode in 2007
    • The WebDU conference had a podcast briefly (
    • This week in ColdFusion (, with Brian Carr, Micky Dionisio and Mike Chandler, ran for several epidodes in 2011
    • Steven Erat made two attempts at podcasts in 2005, first with the CFMX 7 podcast, where he read selected Macromedia Devnet articles about CF7, and then the even shorter-lived CF NewsRadio
    • While not CF-specific there was one episode of the All Things Adobe which was CF-related, in 2007. Since the site offers a category for CF topics, I offer that in case they do more
    • And though not technically a "CF" podcast, see also the D2W podcast, with Dee Sadler (d2w=designer/developer workflow)
    • I welcome additions/corrections/feedback

CFML Resource Sites [link]

This site of course has itsef many different kinds of resources, but here are some other sites that try to aggregate other CFML resources. See the list after these for other categories of this site that offer resources.
  • Adobe Resource Sites
  •, the Common Function Library Project
  • CF Live, free service, by Russ Michaels, for testing code on ColdFusion and Railo ("Need to test some CFML code quick? Simply paste your CFML code into the box below and hit RUN, the results will be displayed")
  • CFML projects on GitHub
  • CF Notifications, a service tracking the Adobe CF bugbase (, formerly, which had supplanted the former twitter feed of bug updates which Adam Cameron used to offer
  • Charlie Arehart's resource lists page
  •, from Peter deHaan (last updated 2010, as of a check in 2017)
  • ForgeBox, community code repository for ColdBox and ContentBox
  • Instant ColdFusion links (content is circa 2001)
  • Learn CF in a week, free online training/book, "community-driven"
  • Online ColdFusion Meetup, an online CF user group with occasional meetings, and recordings of all 250+ sessions
  • RIAForge, Open Source projects built on Adobe technology
  • Team CF Advance, "a group of CFML developers who believe the CFML community will continue to grow if we embrace the concepts of cooperation and sharing"
  • TryCF, "a barrier-free introduction to the CFML programming language", with tutorials, a live scratchpad, and more
  • UGTV, a list of over 700 recorded CF user group presentations and tutorials from over 300 presenters
  • Wikibooks ColdFusion book
  • Wikipedia CF page
  • Yahoo CF Developer Center
  • The following seem defunct. You may still get value looking into the "wayback machine" ( repository of old, archievd versions of these sites: Ben Forta's ColdFusion section (, Ben Nadel's ColdFusion Community page (, CF developer community (,,,,,,,,, CFTagStore (, CFTips Plus (,,,,,,, DMOZ's ColdFusion section (, DZone's ColdFusion section (,,, (, Neil Middleton's Ultimate ColdFusion Tools List (,, Oracle and CF tech tips (, Ray Camden's CF resources page (, Sean Corfield's ColdFusion section, (, Torchbox CF/XML resource site (,
  • I welcome additions/corrections/feedback

CFML-specific Search Resources [link]

Google has a feature called "Custom Search Engines" (or CSEs), where one can create a search mechanism that limits searches to a given set of sites, with the intention that this could produce a better topic-specific search. When this feature first came out, several people stepped up to create them. The following seem to be those that are more active and updated (providing the ability to search upwards of 1,000 CF-oriented sites or more).

CFML-oriented Security Resources [link]

Every CFML developer and server administrator should be concerned with security, both in their code and in their server configuration. Following are some resources that are specifically related to security with respect to CFML and ColdFusion server.

CFML Training Resources (free) [link]

Besides the link link below to actual CF trainers, some may prefer to take advantage of any training that may available online for free. Fortunately, there are several such resources.(Some may be from an older release, but for many folks getting started may still be acceptable. That said, there are some updated even for CF2016.)

CFML Tuning/Troubleshooting Resources [link]

Rather than list specific articles and blog entries (as there are so many), here are resources that are themselves lists of other CFML tuning/troubleshooting resources.

CFML Tutorial/Article Sites [link]

There are many sites which offer tutorials or articles about CF, in general and on particular topics.

Professional CF-oriented Assistance [link]

While there are many resources listed above where you can obtain free support (from mailing lists, to blogs, to user groups, and more), sometimes you just may be more interested in paying someone who provides professional support, whether on-site or over-the-web. I've divided this category into the following groupings:
Note that I don't label these "CFML-oriented" (to be PC/politically correct toward other than Adobe CF servers) because that could be equally confusing. Someone who does "CF-oriented troubleshooting" (resolving problems with CF, Railo/Lucee, BlueDragon, or perhaps any other J2EE server) may never really deal with "CFML" as the root cause of problems, as often issues are to do configuration/administration/load/etc. So calling them "CFML-oriented Troubleshooting Consultants" is no more technically accurate. But saying "-oriented", I hope it broadens the scope and that folks will forgive if it's not as PC a moniker as they may like. Same goes for the listing here of trainers, development consultants, etc.

Where possible, I've offered any direct link the company/person may have to their coverage of that specific sort of assistance. I've pre-populated the list with several folks but as always I definitely welcome additions/corrections/feedback.

CF-oriented Troubleshooting Consultants [link]

If you need help with CF-oriented consulting services, including troubleshooting, here are some alternatives. Note also that some require a minimum commitment of days, while others (like myself, the listing) have no such minimum. See related subcategories in the introduction to the broader category above.

CF-oriented Application Development Consultants [link]

If you're looking for assistance with CFML coding, here are some alternatives. I do not want to list here web site development shops, unless they specialize in CF and/or CFML (and either say so on their site, or are known to do so). See related subcategories in the introduction to the broader category above.

CF-oriented Mentors [link]

This list includes those who mention mentoring services on their sites. Note that their services may be very specific (mentoring in a given area or technique). See related subcategories in the introduction to the broader category above.

CF-oriented Trainers [link]

This includes both those who do Adobe CF training and their own CF-oriented training, whether in their own locations, at contract training facilities, or over the web. Some may not be updated beyond older releases of CF (which may still be somewhat valuable), while others tend to be updated to the lastest current release (or would be soon after is release). See related subcategories in the introduction to the broader category above.

Tools (CFML and other)

Blogging Tools (written in CFML) [link]

The following are blogging tools (tools for creating a blog) that are written in CFML. Of course, you can find blogging tools written in many other languages that you may choose to use on your site. I don't want to try to keep here a list of all such CMSes, so this focuses on those that are written in CFML and that you can download.
  • 1ssBlog, open source, from Ed Tabara (last updated in 2008, as of a check in Apr 2015)
  • BlogCFC, open source, originally from Ray Camden (last updated in 2012, as of a check in Apr 2015)
  • Fuseblog, open source, from James Husum (last updated in 2004, as of a check in Apr 2015)
  • Mango, "a sweet ColdFusion blog engine" from Laura Arguello of asfusion (last updated in 2013, as of a check in Apr 2015)
  • My Blog, "a small blog application", from Gurpreet Singh Randhawa (last updated in 2009, as of a check in Apr 2015)
  • Teapot, "simple, fun to use and easy to customize", from Gurpreet Singh Randhawa (last updated in 2013, as of a check in Apr 2015)
  • These now seem defunct: AVBlog (, BlogCFM (, CFBloggy (, CFMoBlog (, cwBlog (, CFCPhotoBlog (, KoldKast (, MachBlog (
  • I welcome additions/corrections/feedback

Browser Alternatives [link]

Since most CFML developers build browser-based web applications, it may be helpful to be aware of many of the different browsers out there, which your users may use. There's more than just Firefox and IE (and even Opera and Safari.) This is not an ultimate list. There are a few more I found which I've just never heard of. Can't be an ultimate compendium in every category.

Bug Tracking/Defect Tracking/Issue Tracking/Trouble Ticket/Help Desk Tools [link]

I've split this list of bug tracking/defect tracking/issue tracking/trouble ticket/help desk tools into those written in CFML, and the rest, both open source and commercial. You may also want to consider project management tools, which sometimes incorporate features like this.
Following are the subcategories offered:

Bug Tracking/Defect Tracking/Issue Tracking/Trouble Ticket/Help Desk Tools Written in CFML [link]

See also related subcategories in the introduction to the broader category above.

Bug Tracking/Defect Tracking/Issue Tracking/Trouble Ticket/Help Desk Tools (not written in CFML) [link]

(Some downloadable, others as services; some open source, others commercial). See also related subcategories in the introduction to the broader category above.

Caching Tools for CFML [link]

While CF9 added EHCache-based caching, and has long had other forms of caching (query caching, page/content caching with cfcache and cfsavecontent, and more), there are still various solutions that have long existed (and some that are still being updated/supported) to add still more caching options for CFML.
  • CacheBox, open source, from the ColdBox team: "an enterprise caching engine, aggregator and API for ColdFusion applications"
  • CacheBox, open source, from Isaac Dealey
  • Cache management, open source from Cristian Costantini. CFML implementation of ehcache, for ColdFusion and Railo/Lucee
  • CF_Accelerate, free, from Brandon Purcell
  • CF_CacheOMatic, free, from Eric Jansson (as discussed in and downloadable from a 2005 devX article)
  • CF_TurboCache, free, from HotFusion (indicated as for ColdFusion 4.5)
  • cfmemcached, open source, from Jon Hirschi
  • fusecache, open source, "extension to the Fusebox framework that enables developers to integrate enterprise-level caching solutions like Memcached, EHCache, CacheBox, etc.", from Matt Gersting
  • JohnnyCache, open source, from Andy Powell (last updated in 2006, as of a check in Apr 2015)
  • Memcached, open source, from Mark Lynch (from 2007)
  • ScopeCache, open source, from Ray Camden
  • SoftCache (, open source, from Ashwin Matthews
  • Also, while not written *IN* CFML, the following can be used WITH your CFML, because CF runs on top of Java, and therefore you can leverage Java filters and custom tags in your CFML apps: For more on using Java filters with CFML, see my Feb 2003 CFDJ article, "Fun with Filters". And for more on using JSP custom tags with CF, besides the CF docs (Developers Guide), see my May 2002 CFDJ article, "Using JSP Custom Tags in CFMX: What, Why, and How".
  • See also the separate category, Distributed Caching Tools. CF9 and above includes EHCache caching
  • See also CacheRight, commercial for IIS, which while not CF-specific does work with CF. Works similarly to the Apache module mod_expires. See their FAQ for discussion of use with CF
  • And of course there are many other web caching solutions out there, in the form of HTTP Accelerators or Reverse Proxy tools. See the Wikipedia entry covering both classes and offering links to specific implementations like Litespeed, Squid, Varnish, and many more
  • I welcome additions/corrections/feedback

CF Hotfix Management Tools [link]

The following tools can help with applying/managing ColdFusion hotfixes.

Captcha Tools/Alternatives for CFML [link]

When you want to capture user input, but want to implement protection to make sure the user is a real person and not an automated spammer, use one of these tools.
  • Captcha Component (, commercial, from Alagad
  • CFAkismet, free, from Brandon Harper
  • CFFormProtect, free, from Jake Munson
  • CFIMAGE action="captcha", as discussed in articles by Ben Nadel and Ray Camden
  • defensio, free, from Ed Tabara (last updated in 2008, as of a check in Apr 2015)
  • Lyla (, free, from Peter Farrell
  • mollom, free, from Ed Tabara (last updated in 2008, as of a check in Apr 2015)
  • ColdFusion reCAPTCHA tag (, free (CFML-based implementation Google's reCAPTCHA, from Robin Hilliard. reCAPTCHA is interesting in that every time someone enters a captcha response they are actually helping to digitise a book.)
  • SpamFilter.cfc, free, from Steve Bryant (last updated in 2010, as of a check in Apr 2015). Part of the sebtools package. More info on the spamfilter CFC in this blog category of his
  • See also Web Server-level Security Protection Tools/Web Application Firewall-level Tools
  • I welcome additions/corrections/feedback

CFMAIL Replacements/Enhancements [link]

These are tools that either can replace CF's built-in mechanism for generating and sending email, or that supplement and enhance it (such as tools to help manager undelivered email). If you're looking for an mail server, see the separate category, Mail Servers/Gateways.
  • CFMail Automatic Respooler (cfrespooler), open source, from Russ Michaels
  • CFX_Imap4, commercial, from Paul Vernon (last updated in 2008, as of a check in Apr 2015)
  • Spoolmail, open source, from Ray Camden
  • Undelivrnator , open source, from Andy Matthews (last updated in 2010, as of a check in Apr 2015)
  • These appear defunct: ActivMail (, InFusion Mail Server ( , and intelli Mailbot (
  • Note, as well, that the CFMAIL tag itself has evolved significantly over the years, as has the CF Administrator mail support feature set, so that some of the various alternatives may not always be needed. 6.1 added replyto/failto/username/password/wraptext attributes, support for multiple mail servers in the server attribute, and several configuration options to the ColdFusion Administrator Mail Settings page. 6.1 also added support for HTML email via CFMAILPARAM and multipart email with CFMAILPART. You can even optionally not use the spooling process via an optional SpoolEnable as of 6. CF 8 added priority, useSSL, and useTLS attributes. Finally, the CF9 Administrator added a "View Undelivered Mail", with an option to "respool" undelivered emails
  • Finally, if you may be looking for alternative mail servers, see the separate category for that: Mail Servers/Gateways
  • I welcome additions/corrections/feedback

CFML Code Coverage Tools [link]

Many languages offer tools that allow you to track/confirm what code within your app is "reached" during processing (or not). There have been efforts to offer that for CFML.
  • Rancho, from Kunal Saini of Adobe (not updated since 2012 as of check in Feb 2017, supported only tags not script) Read more. (Project last updated 2012, as of a check in Feb 2017)
  • CF Metrics, from Kacper Glowacki (DOES support script, project last updated Dec 2015, as of a check in Feb 2017)
  • Ortus Code Coverage via CommandBox, TestBox, and FusionReactor "line performance" feature. This is a video showing how to use it all together.
  • I welcome additions/corrections/feedback

CFML Code Formatting Tools [link]

While CFML is pretty self-documenting, it can certainly help to have code better-formatted (indented, etc.), and there are tools to help with that.

CFML Code Generators [link]

Following are available code generation tools for CFML.
  • Apptacular, from Terry Ryan (last updated in 2011, as of a check in Apr 2015)
  • ColdFusion Application Generator , free, from Jason Presley
  • CFProperty, free, from Kevin Penny (last updated in 2009, as of a check in Apr 2015). This Utility is designed to introspect components and auto-create CFPROPERTY tags based on the function meta data
  •, free, hosted service. Converts tag-based CFML to CFScript
  • CodeCharge, a commercial tool
  • ColdDoc, free, from Mark Mandel (last updated in 2011, as of a check in Apr 2015). Not really a code generator but a doc generator for CFCs
  • ColdFusion Builder (commercial) and ColdFusion 8 Extensions for Eclipse, free from Adobe. (Includes wizards for generating CFCs and other code). Available before CF8 as the FlexBuilder extensions for CF 7.02 (more here, via
  • CF/Flex Generator, open source from Jason Presley (last updated in 2010, as of a check in Apr 2015)
  • CRACK-Coldfusion Rapid Application Construction Kit , open source from Josh Knutson
  • DBX, from Kevin Miller. Generates CFQUERY and CFSTOREDPROC code from SQL Server databases
  • Illudium PU-36, open source from Brian Rinaldi (also at (last updated in 2010, as of a check in Apr 2015)
  • next-generator, open source from Dominic Watson, Code generator that works with Railo/Lucee, based on Illudium PU-36 (last updated in 2010, as of a check in Apr 2015)
  • See also Skeleton Site Creator (last updated in 2010, as of a check in Apr 2015), which "generates a base working application for you to build on"
  • Another application generation tool, though it's not CF-specific, is IronSpeed
  • These are or seem defunct: Adalon (, CFCBlaster (, ICEGen (; as per this announcement), Plum (, Rooibos (, Squidhead (, TransferConfig (
  • I welcome additions/corrections/feedback

CFML Debugging Output Template Alternatives/Mods [link]

Many don't realize that the CF debugging output (optionally displayed at the bottom of the page, as enabled in the CF Admin) is actually created by a CFML template that can be modified ([cf]\wwwroot\WEB-INF\debug\classic.cfm). Fortunately, several people have offered various resources that explain how to work with this file and offer packaged alternatives with specific features to resolve particular problems (where people wish the debugging output did more, or could be seen differently than at the bottom of the page). You can just drop these in to add to or replace the default file, and if it's a new file you can then select it as an alternative in the CF Admin Debugging Output page which offers a choice for "Select Debugging Output Format", which points to the classic.cfm by default. Of course, since it's CFML source code, all the options mentioned here are free and open source.
  • "Another hack job", from Ray Camden, adding total query time, improved number formatting for individual query times, and highlighting queries that a given duration
  • CF Debug Enhanced, open source from Ajas Mohammed (with a focus on providing extended info on querys and SP results)
  • CF-FireLogger, open source ColdFusion server-side library for the FireLogger Firebug extension
  • ColdFire, open source from Nathan Mische et al, a Firefox/Firebug extension to aid in viewing CFML debugging output by way of a new alternative debugging output template, coldfire.cfm
  • ColdFusion Debug Templates, "in case you want to try something different than the default template", from Josh Knutson
  • Debug2FusionReactor, from Intergral, an article showing how to direct CF debugging output to the FR Markers tab
  • Improved Classic CF debugging template, from Aaron Longnion. (This is a version of the page recovered using the "wayback machine".) Changes list of templates executed to show in order executed, rather than by order of duration. Also adds cfqueryparam variable values for queries shown
  • Mark Kruger's Improved CF debugging template, showing cfqueryparam info
  • StarFish (, from Ray Camden, a profiling tool built on the CF debugger. Stores debugging output in server scope, and adds an Admin customization interface to view reports based on gathered information
  • Stiletto, from John Mason (last updated in 2009, as of a check in Apr 2015), for logging CF debugging output to a file (inspired by a 2008 blog entry by Bilal Soylu)
  • Zoid, from Ray Camden. Changes the table of templates executed from a summary for each (even if called multiple times) to in individual display of each, in order
  • Note as well that another alternative to showing debugging output at the bottom of the page is a built-in option in CF. Note the available "dockable" option in the choice for "Select Debugging Output Format". While the aforementioned classic.cfm is the default, the dockable.cfm instead shows the debugging output as dockable/movable/floatable pane instead
  • See also the next category, CFML Debugging Tools, for other kinds of CFML debugging tools
  • I welcome additions/corrections/feedback

CFML Debugging Tools [link]

There are several tools to help with debugging CFML, some which add on to the built-in "debug output" feature which can be enabled in the CF Admin, while others are unrelated.
  • CF Debug Copy for Firefox and CF Debug Copy for IE, open source from Nathan Mische (last updated in 2011 and 2008, respectively, as of a check in Apr 2015), allow you to easily copy and paste the SQL query output generated by the classic ColdFusion debug template, parsing the query parameters
  • CF-FireLogger, open source from Maxim Paperno, Firebug console logging from within ColdFusion code (for use with the FireLogger extension for Firebug
  • CF No Debug, open source from Nathan Mische (last updated in 2010, as of a check in Apr 2015), Firefox Extension and Servlet Filter to Disable ColdFusion Debugging
  • CFWatcher, open source from Ed Tabara, a CF monitoring tool built on the CF debugger
  • CF websocket debugger, open source from Kunal Saini, Debugging tool for CF10 websocket
  • ColdFusion interactive step debugger, free from Adobe, as built into ColdFusion 8 and higher, and accessible from ColdFusion Builder
  • FusionDebug, commercial, an interactive step debugger for ColdFusion, from Intergral (differs from CF's built-in debugger in many ways, most notably in not requiring use of RDS as the CF debugger does)
  • IP Ranger, open source (last updated in 2009, as of a check in Apr 2015), "ColdFusion administrator extension to allow IP ranges to be added to the debugging IP addresses list", from Nathan Mische
  • See also the previous category, CFML Debugging Output Template Alternatives/Mods, for modifications to the standard CFML debugging output
  • I welcome additions/corrections/feedback

CFML Documentation/Help Tools and Resources

See this category as listed above under CFML Resources.

CFML Engine Alternatives [link]

While ColdFusion was the first CFML engine, there have since been several alternatives from other vendors or teams.
  • Adobe ColdFusion, commercial (free Developer and trial editions)
  • BlueDragon, commercial, from New Atlanta
  • Camuffo, open source
  • Lucee, open source (fork of Railo, by its original authors)
  • mkfusion, "Free open source native CFML(ColdFusion compatible) application server"
  • Open BlueDragon, the open source implementation of BlueDragon
  • Railo, open source
  • Smith, open source
  • The following seem or are defunct: Coral (formerly from, IgniteFusion (
  • I welcome additions/corrections/feedback

CFML Frameworks/Methodologies [link]

There are far more CFML frameworks (or methodologies) than many may realize. I've tried to group these according to the sub-category most would regard a framework to be, but I could get it wrong. Just let me know.

I provide whatever brief description may be found on the respective web site (so if you don't like the description, talk to the site owner and let me know if it changes...and framework owners, you'd do well to have a nice succinct description to help visitors get a quick understanding of the frameworks purpose, goals, intended use, etc.)

Similarly, if there's a name associated with the project on the site, or if a name is commonly known as being responsible for the framework, I list that. As always, I'm open to updates.

Note as well that some of these may be defunct. As long as there was a working site (or some relatively recent site talking about it, even if a third party), I list it. At the end I list some frameworks whose sites seem defunct. Again, updates are welcomed.

Following are the subcategories offered:

CFML Application Frameworks/Methodologies [link]

See other aspects and related subcategories in the introduction to the broader category above.
  • cfFramework, "a CFML MVC Framework", from Jerome Lepage (last updated in 2016, as of a check in Oct 2016)
  • CFObjects, "object-oriented ColdFusion development framework", from Steve Brownlee and Orbwave (last updated in 2013, as of a check in Oct 2016)
  • cfrails, (couldn't find any brief description), from Sammy Larbil (last updated in 2007, as of a check in Oct 2016)
  • CFWheels, "ColdFusion on Wheels provides fast application development, a great organization system for your code, and is just plain fun to use", from the CFWheels Team (last updated in 2016, as of a check in Oct 2016)
  • ColdBox, "ColdFusion Enterprise Conventions Development Platform", from Luis Majano, et al (last updated in 2016, as of a check in Oct 2016)
  • ColdBox Lite (CBL), "A light-weight conventions-based MVC framework" "with a subset of features of the ColdBox Platform that deal with MVC only", from Luis Majano, et al (last updated in 2016, as of a check in Oct 2016)
  • ColdMVC, "a convention based MVC framework for ColdFusion 9 loosely based on concepts from Ruby on Rails and Grails.", from Tony Nelson (last updated in 2012, as of a check in Oct 2016)
  • COOP, "a framework that separates mark-up from processing logic", from John Farrar, et al (last updated in 2011, as of a check in Oct 2016)
  • Edmund, "event-driven model framework and workflow components", from Sean Corfield (last updated in 2011, as of a check in Oct 2016)
  • FarCry, "is a leading, enterprise-class framework for building fast, scalable applications", from Daemon Consulting (last updated in 2016, as of a check in Oct 2016)
  • Framework One (FW/1), "A very lightweight, convention-over-configuration MVC framework", from Sean Corfield (last updated in 2016, as of a check in Oct 2016)
  • Fusebox, "the most popular framework for building ColdFusion and PHP web applications", from Team Fusebox
  • Gliint, "an implicit invocation MVC framework", from Mitch Rose (last updated in 2009, as of a check in Apr 2015)
  • HomePortals, "especially tailored for building portals and other highly modular sites", from Oscar Arevalo (last updated in 2010, as of a check in Apr 2015)
  • LightFront, "short for Lightweight Front-controller...a basic MVC framework that will support both new development and legacy applications...conventions based...single 200-line CFC", from Brian Meloche (more here, a page recovered from )
  • Mach-ii, "a powerful, object-oriented, open source MVC framework for ColdFusion that focuses on easing software development and maintenance", from Team Mach-II
  • Metro, a framework for working with Transfer and ColdSpring, from Paul Marcotte (last updated in 2009, as of a check in Apr 2015)
  • Mockbox, a ColdFusion Mocking/Stubbing Framework, from Luis Majano
  • Model-Glue, "a family of frameworks [that] support Web application developers by making the construction of Object-Oriented Web and Rich Internet Applications a straightforward process", from the Model-Glue Team
  • onAir, "a 'Smart Connection Framework': Connect backend business logic written in CFCs with different clients (e.g. AJAX, Laszlo) via XML, XML-RPC, JSON, etc.", from Jan Jannek
  • OnTap, "shares some similarities with Ruby on Rails", from Isaac Dealey
  • Neptune, "ColdFusion Productivity (and MVC) Framework", from Steve Bryant
  • Quicksilver, "allows developers to quickly and efficiently create powerful MVC web application", from Brian Carr and Micky Dionisio (last updated in 2009, as of a check in Apr 2015)
  • SOS, "Community oriented ColdFusion application framework", from John Farrar (last updated in 2012, as of a check in Apr 2015)
  • Switchboard, "MVC framework with built in authentication, redirecting, and URL routing. It's non-OO approach makes it super fast during execution. No XML or Objects are ever used in the framework. No configuration is required to set which files are included, the framework discovers that for you. The URL routing is beneficial for search engine optimization (SEO). And all this can be yours in less than 250 lines of code", from Daniel Slaughter
  • Some that seem defunct include Blackbox (,,, COAL, FuseboxNG,, iiFramework (, MXF, mvcf (,, PiMunkey (, Plum (, PureMVC_CF (, Switchbox (, Tardis (, Tartan (, TheHUB (, TrafficMunkey (,
  • Some folks also see CMSs as frameworks, so see my list of them
  • Similarly, to the degree that code testing/unit testing tools can be regarded also as a "coding framework", see CFML Unit Testing Tools
  • I welcome additions/corrections/feedback

CFML Injection Frameworks [link]

See other aspects and related subcategories in the introduction to the broader category above.
  • ColdSpring "dependency injection/AOP framework", from Chris Scott
  • DI/1 - Inject One , "A very lightweight, convention-over-configuration Dependency Injection framework", from Sean Corfield
  • Lightwire, "a very lightweight Direct Injection/IoC engine", from Peter Bell (last updated in 2010, as of a check in Apr 2015)
  • Wirebox, "Dependency Injection and AOP library for ColdFusion", from the ColdBox team
  • I welcome additions/corrections/feedback

CFML REST Frameworks [link]

See other aspects and related subcategories in the introduction to the broader category above.
  • PowerNap, "ColdFusion ReSTful web services made easy", from Brian Carr, Ryan McIlmoyl (forked from the original version created by Brian Carr)
  • RESTfulCF, "a framework for ColdFusion that simplifies the publishing of RESTful API-style interface", from Tim Blair (last updated in 2009, as of a check in Apr 2015)
  • Taffy, "a framework for building REST APIs inspired by FW/1, Powernap, Swiz, and jQuery. ", from Adam Tuttle (and hosted at Github, with updates as recent as a last check here made in Feb 2015)
  • See also REST support within ColdBox ("Relax"), Mach II's REST endpoints, Quicksilver, and others
  • Note as well that ColdFusion 10 has added REST support
  • I welcome additions/corrections/feedback

CFML ORM Frameworks [link]

See other aspects and related subcategories in the introduction to the broader category above.
  • ColdFusion 9 and above includes ORM, based on Hibernate
  • DataFaucet, "collection of CFCs used to create dynamic object relational modeling (ORM)", from Isaac Dealey
  • See also the ORM feature of CFWheels, as well as DataMgr, "Data Access Layer component set", from Steve Bryant (not technically an ORM tool, but closer to this than the other categories)
  • The following seem defunct: DBMunkey (, Reactor (, Transfer (
  • I welcome additions/corrections/feedback

CFML Image Processing Tools [link]

Tools to manipulate images in CFML.

CFML Wiki Tools [link]

CFML-based wiki tools.

Code Sharing/Pastebin Tools [link]

Following are free services which allow developers to share code snippets with each other. (While one is actually named PasteBin, the term has become generic.) Some even have integrations within IDEs/editors to make it easy to share code from within your development environment.
  • Code tidy, free hosted service
  • Github Gist, free hosted service (with support for public/private snippets, multiple language syntax hilighting; snippets are also automatically versioned, forkable and usable as a git repository)
  • Pastebin, free hosted service
  • paste (formerly PASTE and DevStation), free hosted service, offering optional password and time limits
  • Pastie, free hosted service (with editor support for Sublime Text, Intellij Idea, emacs, VIM, TextMate, Visual Studio, and more)
  • Pastiebin, free hosted service (with support for public/private snippets, multiple language syntax hilighting)
  • snipt, free hosted service
  • I welcome additions/corrections/feedback

Code Deployment / Package Manager Tools [link]

Following are tools to assist with code deployment or code package management:
  • Cascade, open source, from Ryan Guill, a CFML-based package manager "whose primary objective to facilitate promotion of code from one place to another, securely and quickly"
  • Ramen, open source, from the CF Community. An "integrated installer [of applications] for ColdFusion servers", which is "inspired by ...Homebrew, Ruby Gems, and ... the Railo Extension Manager". Can be configured into the CF Admin
  • I welcome additions/corrections/feedback

Comparison Tools [link]

There are multiple categories of comparison tools offered here.
Following are the subcategories offered:

Text/File/Dir Comparison/Merge Tools [link]

Following are tools that can compare text, file, and directory comparisons and merging. See also related subcategories in the introduction to the broader category above.

Database Comparison Tools [link]

Following are tools that can compare database data and schema. See also related subcategories in the introduction to the broader category above.

Content Delivery Networks [link]

Content delivery networks (or "content distribution networks") can be important to the performance, reliability, and scalability of your web site, especially with regard to the more static content of your site (and often even your dynamic content, where that may be appropriate). Rather than serve all such requests from your web server directly, a CDN serves your content to your clients from a distributed network of other servers (generally served transparently to your visitors). While Akamai may have the majority of mindshare when folks think of the term CDN, there are indeed many alternatives. Look closely at each site, to see if they may offer different solutions for static vs dynamic content (and how they may manage that, as it's of course not appropriate to distribute ALL dynamic content, but for some sites some technically "dynamic" content could indeed be distributed).

Content Management Systems or CMSes (written in CFML) [link]

The following are CMSes written in CFML. I've mentioned also portal apps, as those seem close. Of course, you can find a CMS written in many other languages that you may choose to use on your site. I don't want to try to keep here a list of all such CMSes.
  • Affino, commercial, from Comrz
  • ColdBricks, open source, from Oscar Arevalo
  • CommonSpot, commercial, from Paperthin
  • CONTENS, commercial, by CONTENS
  • ContentBox, open source, "A powerful modular content management engine built on the ColdBox framework", from the ColdBox team
  • Ektron (, no longer written in CFML but .NET
  • FarCry, open source, from Daemon, et al
  • IFactum e-Business Suite, commercial, with editions for ColdFusion and BlueDragon
  • Jetendo, open source, from Bruce Kirkpatrick (for Railo on Linux, only)
  • Katapult, open source, from John Mason
  • LightHouse CMS, a commercial hosted service (not currently downloadable)
  • Mura, open source, from Blue River Interactive Group (formerly named Sava CMS)
  • NQcontent WCM, commercial, from NetQuest
  • Preside CMS, commercial, from Pixl8
  • Savvy Content Manager, commercial, from Savvy Software
  • SiteExecutive, commercial, from Systems Alliance
  • Speck CMS, open source, from Robin Hilliard and Mark Woods
  • Splash CMS, open source, from Russ Johnson (last updated in 2009, as of a check in Apr 2015)
  • TeamworkCMS, open source and commercial, from Digital Crew
  • Thrive CMS, from Cabbage Tree Creative
  • WebPress Pro, commercial
  • Wheelie, open source, "A CFML CMS built on CFWheels - Inspired by Wordpress and Xindi", from Tim Badolato (in pre-alpha, as of Jan 2014)
  • Yet Another ColdFusion CMS, open source, from Terrence Ryan (last updated in 2008, as of a check in Apr 2015)
  • Xindi, open source, from Simon Bingham
  • Of course, there are likely hundreds of non-CF CMSes out there. I don't want to try to keep track of all of them. Consider watching such resources as
  • The following seem defunct: bluApple (, Boomsocket (, Bytespring CMS (, CAM-II CMS (, CFC_Nuke (, ContentMonger Pro (, DA-Content (, Hot Banana ColdFusion CMS (, MindsEye Element (, Mojito (, Sava (not defunct but renamed to Mura) ShadoCMS (, Simple Content Editor (, Synergy (, and Tapestry (, WebOS 'Carbon 14'
  • I welcome additions/corrections/feedback

Database Engines [link]

There are many database engines, and I split the list into two categories. As I note below, some commercial DBMSs do offer free editions.
Following are the subcategories offered:

Free/Open Source DBMSs [link]

See also related subcategories in the introduction to the broader category above.

Commercial DBMSs [link]

See also related subcategories in the introduction to the broader category above.

Database Tools [link]

There are many kinds of database tools.
Following are the subcategories offered:

Database Coding Tools [link]

See also related subcategories in the introduction to the broader category above.

Database Comparison Tools

See also related subcategories in the introduction to the broader category above.

Database Migration Tools [link]

The following tools assist with database migration/conversion, change migration, synchronization, conversion of stored procedures, and more. See also related subcategories in the introduction to the broader category above.

Database/SQL Monitoring Tools

Database Query/Explore Tools [link]

This category includes both tools to help you build SQL statements as well as to explore your databases and their tables, columns, indexes, data, etc. Some are CF-specific tools, some are generic. See also related subcategories in the introduction to the broader category above.
I have divided this list of tools into those which support multiple database engines, and those which support only specific ones:

Database Query/Explore Tools supporting multiple databases [link]

Following are tools with support for multiple database engines.

Database Query/Explore Tools supporting only specific databases [link]

Following are tools with support for only certain specific database engines.

Database Testing Tools

See the category on this within Testing tools.

Distributed Caching Tools [link]

Again, as mentioned above, CF already has caching features built-into it, and there are various alternatives (mentioned there), but many will want to take advantage of more enterprise-capable distributed caching solutions, discussed here.

E-commerce Enabling Solutions (written in CFML) [link]

There are certainly carts and other e-commerce enabling solutions written in other languages, and some could possibly even be called or leveraged from CFML, but for now, this list focuses only on those that are CFML-based.
  • Able Commerce, commercial, for CF and .NET
  • Cartweaver, commercial shopping cart
  • CF-ezCart, commercial shopping cart
  • cfCommerce , open source shopping cart, by Nick Tong (last updated in 2008, as of a check in June 2015)
  • CF Shopkart, free, downloadable or hosted (last updated in 2011, as of a check in June 2015)
  • CF WebStore, open-source e-commerce store
  • emart, commercial "Ecommerce Platform & Shopping Cart Solution"
  • QuickEStore, commercial downloadable shopping cart solution
  • SiteDirector, commercial shopping cart
  • Slatwall Commerce, open source and commercial ecommerce platform
  • StarterCart, "Free and open source shopping cart, from Steve Bryant (last updated in 2011, as of a check in June 2015)
  • These now seem defunct: Auction Builder (, Broadchoice (, DA-Store (
  • I welcome additions/corrections/feedback

Editors/IDEs [link]

This list offers both editing tools (editors, IDEs) which focus on CFML (either are specific to CF, or generic but have CFML support), and then I list "other editors" which don't support CFML directly but may still interest some CFers. I then also offer links to various CFML-oriented plugins for Eclipse (upon which CFBuilder is based).

(For times when you just want to view files, rather than edit them, see the available file viewers listed under Generic File View/Log Analysis Tools.)
Following are the subcategories offered:

CFML Editors (specifically for CF, or supporting CFML) [link]

Following are editors which either specialize in CFML editing inherently (ColdFusion Builder, CFEclipse) or which offer CFML support, perhaps as a plugin.
  • Atom, open source, multiplatform (supporting CFML, with CFML support, updated as late as this writing, Dec 2015)
  • Coda, commercial, for OS X (supporting CFML, with CFML support updated as late as Oct 2014, as of this writing in Dec 2015)
  • ColdFusion Builder, CFML IDE from Adobe
  • D20, open source, from John Farrar. An IDE for developing COOP-based CFML apps (not quite general purpose, but CFML-oriented nonetheless), (last updated in 2008, as of a check in Dec 2015)
  • Dreamweaver, commercial, from Adobe (no longer supporting CFML since 2013)
  • Eclipse, free (for CFML support, see discussion of CFEclipse and other plugins below in the subcategory Eclipse plugins)
  • Espresso, commercial, for OS X, with an available ColdFusion Sugar plug-in, free from Scott Mebberson, providing complete syntax highlighting and code hinting for ColdFusion (Sugar being last updated in 2008, as of a check in Dec 2015)
  • HTML-Kit, free and commercial, for Windows, with available ColdFusion plugins, though they all seem quite dated, as of this writing, Dec 2015
  • IntelliJ, commercial (free for open source projects and educational use), which has an included CFML plugin (can't readily tell date that CFML support was last updated)
  • JEdit open source, which does have CF support (can't readily tell date that CFML support was last updated)
  • Komodo, free and commercial, with CFML support via Komodo-CFML open source project (updated as late as Sep 2015, as of this writing in Dec 2015)
  • nocCode open source, web-based IDE from Thomas Stiegler (last updated in 2009, as of a check in Dec 2015)
  • Notepad++, with available free nppColdFusion plugin (though the original developer of that nppColdFusion plugin has stopped supporting it, in favor of his working with Sublime, others have updated it as late as 2013, as of a check in Dec 2015)
  • PrimalScript, commercial, from Sapien, which offers support for CFML (can't readily tell date that CFML support was last updated)
  • skEdit, commercial, for OS X (supports "Cold Fusion", but can't readily tell date that CFML support was last updated)
  • SourceEdit, free, for Windows (supports "Cold Fusion", but can't readily tell date that CFML support was last updated)
  • Sublime text, commercial, multi-platform, with CFML support (updated for CF10 as of this writing in Dec 2015), as well as Lucee support (which works also fine for CF, for the most part, but works for SublimeText 3 only, and updated at least as of Dec 2015, as of this writing then)
  • TextMate, for OS X, with available CFML support: CFTextMate (last updated in 2010, as of this writing in Dec 2015), and coldfusion.tmbundle last updated in 2013, as of this writing in Dec 2015)
  • I welcome additions/corrections/feedback

Other Editors (without CFML support) [link]

Unlike those listed in the previous category, these don't list specific support for ColdFusion, but may still be useful for some. Note that some favorite editor of yours may be listed already in the preceding category on CFML editors, immediately above.
  • bbedit, commercial, for OS X
  • Brackets, free, multi-platform
  • Cloud9, free/commercial, multi-platform
  • Cream, free, multi-platform
  • Crimson, free, for Windows
  • EditPad, for Windows, available in Lite (free) and pro (commercial) editions
  • EditPlus, shareware and commercial, for Windows
  • EmEditor, free and commercial, for Windows (See more on the free edition)
  • Emerald, free, multi-platform (fork of Crimson editor)
  • GNU EMACS, free, multi-platform
  • JBuilder, from Embarcadero (formerly from Borland)
  • JDeveloper, from Oracle (free, useful for reverse engineering DBs to generate ERDs, DDL scripts, and more, with support for more than just Oracle BDs)
  • Multiedit, commercial, for Windows
  • NotePad 2, free, for Windows
  • NoteTab, free and commercial, for Windows
  • PSPad, free, for Windows
  • ShiftEdit, commercial, hosted editor
  • TextPad, commercial, for Windows
  • TextWrangler, free, for OS X
  • TSW WebCoder, commercial, for Windows, includes intellisense, a MySQL client, FTP support, and more (a more generic version of their PHPcoder tool)
  • UltraEdit, commercial, multi-platform
  • Vim ("Vi Improved"), free, multi-platform
  • Visual Studio Express for Web, free, for Windows
  • WebMatrix, free, for Windows
  • XML Copy Editor, open source, for Windows and Linux
  • See also this list of other popular shareware editors
  • The following seem defunct: AptEdit (, E (, GridinSoft Notepad (, Jext (
  • Again, if you feel that I'm missing something from this list, be sure to see other text editors that are listed instead CFML Editors, including some not traditionally thought of as CFML editors. They're listed there if they DO support CFML

Eclipse Plugins [link]

There are plugins for the Eclipse framework, which can work with CF Builder or just plain Eclipse. I divide the list into two categories.

Eclipse Plug-ins for CF or with support for it [link]

See also related subcategories in the introduction to the broader category above.

Other Eclipse Plug-ins of interest to CFers [link]

See also related subcategories in the introduction to the broader category above.
  • Aptana, free, for its support of HTML, JavaScript, AIR, and more
  • Eclipse SQL Explorer, free, query and browse any JDBC compliant database
  • egit, free, Eclipse Team provider for Git
  • Mylyn, free, offers integration to popular defect tracking tools
  • MyEclipse, a commercial addon which adds Javascript editing and debugging, CSS editing, database explorer, ajax tools, image editing, and much more
  • QuantumDB, free, for database access
  • Subclipse, free, offering support for Subversion
  • I welcome additions/corrections/feedback
If you're looking for WYSIWYG text editors, they have their own category here

Error Handling Tools [link]

The following are tools/projects to help manage errors within your application/server. I've split this list into those written in CFML, and those which are not. You may also want to consider Bug Tracking/Defect Tracking/Issue Tracking/Trouble Ticket/Help Desk Tools.
Following are the subcategories offered:

Error Handling Tools (written in CFML) [link]

The following are tools/projects to help manage errors, which are written in CFML.

Error Handling Tools (not written in CFML) [link]

The following are tools/projects to help manage errors, which are NOT written in CFML.

Excel File Processing Tools [link]

Following are approaches for reading or creating Excel files from CFML. Note that they're in alphabetical order (like the rest of the tools in this list), not in any preferred or recommended order of consideration. Some are much easier than others, while others offer greater power and capability. Some are for creating XLS files from CFML, some are for reading them into CFML, and others are for populating a spreadsheet with data from a CFML request. Consider them all to find the best to suit your needs.

BTW, one may argue that I could have a generic category on processing all sorts of file types (or even just all kinds of MS Office) file types, but there are so many requests for Excel file processing specifically, and so many approaches/tools to suit those needs, that I just figured I'd start out with this and consider other filetypes later (and may rename this category then). It's also certainly true that most of the techniques/tools shown here can be used with any spreadsheet tool that reads xls files or processes CSV/HTML table files in a similar way (like OpenOffice).
Following are the subcategories offered:
  • CFML [link]: CF9 added a CFSpreadsheet tag, which can both read and write Excel (xls) files, as well as about 40 spreadsheet-related functions. For more info on the tag (and links to more on the functions), see the CF9 CFML Reference on it, or see the the CF9 Developer's Guide coverage of it
  • COM [link]: Since CF on Windows can integrate with COM, there are solutions available using that interface. There are a number of tools that uses the approach in the CFCOMET tools list (, seems defunct), including CF_Excel2CSV, CF_ReadXLS, HTML2Excel, and SQL_export.cfm. (Note that you'll often find references to a site called CFCOMET, but sadly the CFCOMET site is no more. It was resurrected at back in 2002, but is also no more.) As you contemplate working with COM, if performance is an issue, consider these Adobe technotes: 1, 2, and 3 (via See also related subcategories in the introduction to the broader category above
  • CSV [link]: You can both create Excel files using CSV, as well as read in CSV (or other delimited files) to create a query, such as from an Excel file. To create an Excel file, you can simply send to the browser a CSV (or other delimited) file. There are UDFs to ease converting a query to a CSV, such as QueryToCSV2, by Qasim Rasheed. See also a tweaked version of this by Aaron Longnion. There is also the Query to Excel Component from Jason Presley, as well as the UDFs GenerateExcel UDF ( from Topper, and CSVFormat and GetTabTextFeed from When you do this, you need to use CFCONTENT to set the mime type to "application/msexcel" (and may want to use CFHEADER to set a filename to be chosen for the user, and may need to use CFSETTING to turn off debugging.)

    To create a CF query result by reading a CSV (or other delimited) file, as might be exported from Excel, you can use CFHTTP. See the CF docs on CFHTTP, specifically the subsection "Building a query from a delimited text file", as well as blog entries such as those by Ben Nadel 1 2, and Alex Le. There's yet another approach of reading a CSV using a DSN as discussed by Mark Kruger. See also related subcategories in the introduction to the broader category above
  • HTML Table [link]: Another long-existent, simple way to create output to Excel from CFML is creating an HTML table, again prefaced by a CFCONTENT setting the mimetype for Excel and such. Many have written on this useful, simple approach, including Jeremy Petersen (in the ColdFusion Cookbook) and Jehiah Czebotar. It's also covered in the docs, such as these CF6 and CF8 pages on CFContent (and notice all the comments in the older CF6 one, for additional info). There are UDFs and custom tags to do it for you, too, such as Query2Excel in the cflib site. A still more elaborate approach is discussed in this blog entry by Ben Nadel. See also related subcategories in the introduction to the broader category above
  • Java (including JExcel, JXLS, and POI) [link]: There are many Java APIs for manipulating Excel files. Since CF6 and above are built atop Java, it's easy to leverage such Java libraries. See also related subcategories in the introduction to the broader category above.
    • (Don't miss the relatively straight-forward JDBC-oriented options in the ODBC/JDBC category, below.)
    • JEXCEL- CF Product Manager Jason Delmore has released a JXLCFC that integrates with JExcel, and he blogged about it in Jan 08. Both Ben Nadel and "Denny" also blogged about JExcel/CF integration in 2006
    • JXLS - Matt Williams has written on a couple of blog entries on this. I figure I'd just point you to his Excel category, which lists entries that discuss both jXMS and a beef he had with using POI (discussed next here). In case you miss his reference to a zip file in his "enclosures" link in one of the entries, here is the link directly. BTW, you may find references on the web to his stuff being at, but that domain is no longer functioning. Fortunately, he moved his stuff to the new domain
    • POI - cfExcelProxy is an open source effort by Francois Levesque. Another is CFXL, by Jason Delmore. Also, many have written about POI/CF integration, including Dave Ross; Ben Nadel, who has written a POIUtility CFC wrapper that makes it easy to use POI (and here are a couple of other entries by him 1 and 2, 3, with more info on the approach.) Still more interesting for some will be this entry of his on Populating An Existing, Formatted Excel Document Using ColdFusion And POI. Ben Forta also discusses POI in Chap 27 of his CF7 Advanced book and has an example available in this zip file. There is yet another CFC that helps use POI in CFML, cfHSSF, as well as a few custom tags: the free CFX_ExcelQuery in the JavaCFX library at OpenXCF project, and the following commercial tags: CFX_Query2Excel and CFX_Excel in the Adobe Developer's Exchange; and CFX_Query2Excel and CFX_Excel2Query from Ryan Emerle.
  • .NET [link]: Now that CF8 can directly integrate with .NET, it should be possible to perform interaction with Excel files directly using .NET. I've not yet found any articles by anyone doing that. Both the CF docs and Ray Camden have hinted at the possibility. See also related subcategories in the introduction to the broader category above
  • Office Automation [link]: While you may read some articles talking about doing "Office automation", by trying to run MS Office apps on the server, this is something that even Microsoft cautions against, saying
    CAUTION: Automation of any Office application from an unattended, non-interactive user account is risky and unstable. A single error in code or configuration can result in a dialog box that can cause the client process to stop responding (hang), that can corrupt data, or that can even crash the calling process (which can bring down your Web server if the client is ASP).
    WARNING: Office was not designed, and is not safe, for unattended execution on a server. Developers who use Office in this manner do so at their own risk.
    See also related subcategories in the introduction to the broader category above.
  • ODBC/JDBC [link]: it's long been possible to open more than just database files using ODBC (and the Jet Engine) as well as JDBC. It's been written about by many over the years, including the CF5 docs, a CFDJ article (whose title has a mistake and should be "ColdFusion Techniques: Text & Excel ODBC"), and a blog entry by Christopher Wigginton (via, to name a few. Just note that there have been changes in ODBC processing: before CF6, you could create such datasources directly in the CF Admin. In CF6 and above, you would create them in the Windows ODBC administrator and then point to them using the ODBC/JDBC bridge option when creating a DSN in the CF Admin. Ben Forta also has an example of using this approach in his ReadExcel.cfm, available in this zip file (as discussed in Chap 27 of his CF7 Advanced CF book).

    Still other solutions leverage Java calls to enable this capability via JDBC, such as Kyle Hayes who has written about it in both the ColdFusion Cookbook and on his own site.

    Another curious one is the jacoZoom driver, which uses a DSN-less connection to get to the file. Though those are technically not supported since CF5, Adobe has a technote (via on how to get around this limitation when reading an Excel file, using a "passthrough" DSN. Finally, see other Java-oriented options under the "Java" category, above.
  • Report Builder [link]: Don't forget that the ColdFusion Report Builder (in CF7 thru 2016) can export its results as Excel, and of course can generate its data from CFML. See more in the Adobe DevNet articles, Building Reports with ColdFusion MX 7 and Using the ColdFusion Report Builder. See more on reporting solutions under Reporting and Report Builder Tools. See also related subcategories in the introduction to the broader category above
  • WebQueries [link]: a reverse approach is to obtain data from for an Excel spreadsheet from within Excel, and using the Excel Web Query feature to point back to the server to get data. A Dec 2001 CFDJ article discussed this. See also related subcategories in the introduction to the broader category above
  • XML [link]: The final approach is to use XML, which offers the simplicity of the HTML table approach above, but with greater control. A couple of blog entries on this approach are those by Ben Nadel and Todd Sharp. There's also a tutorial by Kris Brixon. There's at least one Riaforge project based on an XML approach: ObjectToExcel , by Lu Sancea, which can "consume a query or an array of queries and render an excel file".

    Finally, you can also use OOXML (Office Open XML) with CFML, which is discussed in considerable detail in Volume 3 of the CF8 Web App Construction Kit, Advanced Application Development, specifically Chapter 76 on integrating with Office. The source code for the book (and these examples) is available online via a link at Ben's site for the book. See also related subcategories in the introduction to the broader category above
  • I welcome additions/corrections/feedback

File Find/Search Tools [link]

While most operating systems have built-in file find/search tools (such as Windows search feature and grep on Linux/Unix), alternatives exist (and may be much better. In the case of Windows search feature, it may not look in all file types, depending on the version of Windows. With Linux grep being a command-line tool, some may prefer a UI). These alternatives (free and commercial) offer both enhanced functionality, speed, and user interfaces (some also add regular expression support, and more).

File Sharing and Online Storage Tools/Services [link]

This space is a meld of services, some of which are focused solely on remote personal (or business) online storage, and some of those offer desktop or mobile apps for syncing with local storage. Still others of these services are focused on supporting file sharing with others, and some of those may offer only very short-term remote storage.

Some services combine all three, or may vary levels of service based on payment options. Nearly all have at least some level of free services. The space ischanging too rapidly for me to try to keep up and indicate which offer which of the above services. But I have noted, for the services with free levels, how much storage they offer at that free level (as of 8/14, and for all but a coupl where I couldn't readily find that information offered). I also list some more server-oriented cloud storage options, in the "see also" at the end of the list.
  • ADrive, commercial
  • Amazon Cloud Drive, commercial
  • Box, commercial
  • CloudApp, for OS X, free (2g per day as of 11/16) and commercial
  • Comodo Cloud, commercial
  • Cubby, free (requires account creation) and commercial (from the makers of LogMeIn and other tools)
  • DropBox, free (2gb as of 11/16) and commercial (if you'd like to give me a referral bonus, use this link)
  • DropLr, free (10 shares/drops per month as of 11/16) and commercial (focused more on file sharing/transfer than cloud storage)
  • Google Drive, free (15gb as of 11/16) and commercial
  •, free (2gb as of 11/16) and commercial
  • Hightail, free (250mb as of 11/16) and commercial (formerly YouSendIt)
  • iCloud, from Apple, free (5gb as of 11/16) and commercial
  • IDrive, free (5gb as of 11/16) and commercial
  • Jungle Disk, commercial (focused on backup)
  • LiveDrive, commercial
  • MailExpress, commercial (focused on file transfer rather than cloud storage)
  • OneDrive, from Microsoft, free (5gb as of 11/16) and commercial (formerly SkyDrive)
  • SpiderOak, commercial (focused on backup)
  • SugarSync, commercial
  • Syncplicity, free (10gb as of 11/16) and commercial
  • Tappin, commercial
  • wikisend, free (for file transfer, rather than cloud storage)
  • For server-oriented file storage in the cloud, consider Amazon S3 service and Amazon Glacier (which are both commercial and free, some aspects being only free for the first year to new AWS customers, others are free to new and existing customers with no expiration), among others
  • See also Content Delivery Networks
  • I welcome additions/corrections/feedback

Folder/Directory/File Synchronization Tools [link]

Often developers and administrators will want to keep files within folders in sync, whether across different machines (as in a cluster), or within a machine (perhaps only part of a subfolder structure) for some reason.

Form Creation/Validation Tools [link]

There have been several tools created to assist in creation of CFML forms.
  • cf_sebForm (within sebtags kit), "Open Source custom tag set for easy forms", from Steve Bryant
  • CFUniform, "library of custom tags for quick and easy form generation", open source, from Matt Quackenbush
  • cfExt Form additions, open source from Dan Vega
  • qForms, open source, from Dan Switzer
  • Thor, open source, from John Mason
  • Validat data validation engine, open source, from Alagad
  • Hyrule ColdFusion validation using annotations, from Dan Vega
  • ValidateThis!, "an object oriented validation framework", open source, from Bob Silverberg
  • Validation.cfc, "server-side validation", open source, from Ryan Heldt
  • ValidatorCFC, "validates the data in an object according to custom rules you set up", open source, from Sean Coyne
  • See also other non-CF-based alternatives, like FormSpring ( (defunct) and Wufoo
  • The following seem defunct: ErrorMunkey (, FormMunkey (
  • I welcome additions/corrections/feedback

File Upload Tools [link]

The tools on this list range from those using Flash/Flex, Ajax, to Java. Some may permit tracking the status of an upload, allow multiple files to be uploaded at once, and/or other features. Some are written in/for CFML, others are generic.

Forums/Bulletin Board Tools (written in CFML) [link]

There have been various attempts to create forum or BB tools in CFML.

FTP Tools (clients and servers) [link]

When you need to transmit files back and forth from one machine to another, you typically need some FTP (or SFTP or SFTPS) client, to talk to some FTP/SFTP/FTPS server. Following are tools for both kinds of processing, first client, then server.
Following are the subcategories offered:
FTP Clients [link]
See also related subcategories in the introduction to the broader category above. FTP Servers [link]

Graphing/Charting Tools [link]

Here are various charting solutions for web applications, some specifically for CF and others more generic. Some are free, some commercial. Some are based on Flex, some on Javascript, and so on. Some are server-side solutions, some client-side.

HTTP Debugging Proxies/Sniffers/Web Client Test Tools [link]

HTTP debugging proxies/sniffers allow you to watch (and sometimes even modify) the http-level communications between your browser (or other http client app on your workstation) and the web server. It helps you see the request/response stream, which can be very helpful in resolving some problems. A good overview of teh concepts is available here. There are a wide range of differnt kinds of such tools offered here.
I offer them in the following subcategories:

Built-in HTTP Debugging Proxies/Sniffers/Web Client Test Tools [link]

Note first that the more modern versions of most browsers now have built-in tools that can provide this sort of functionality. Just right-click on whitepace in your browser content and choose "inspect element", which will exist in most modern browsers. Then look for Network tab. Or use the following menu options:
  • In Chrome, see the Developer Tools, available under the Chrome>More tools>Developer Tools
  • In Firefox, see the "Network Monitor" feature in the "Web Developer" tools, available under the Tools menu
  • In Internet Explorer, see the F12 Developer Tools which are built into IE 8+ (in the Tools menu)
  • In Opera, see Opera menu>More Tools>Show developer menu, then use Opera>Developer>Developer Tools
  • In Safari, see the "Web Inspector" feature of the Develop menu, under Advanced preferences
  • I welcome additions/corrections/feedback

General-purpose HTTP Debugging Proxies/Sniffers/Web Client Test Tools [link]

Beyond that, there are proxy tools that can be added on, and the following are supported at least both IE and Firefox, if not also any web browser. (See also IE-only and Firefox-only proxies/Sniffers/web client test tools offered in the next categories.)
  • Achilles, free (indicated on the site as "Though it was the first, it is no longer the best, and we recommend using Burp Suite, WebScarab, or Paros as they offer more features.")
  • Burp Proxy, commercial and free, multi-platform
  • Charles, commercial (with free trial), multi-platform, with support for Ajax as well as AMF/Flash Remoting
  • DynaTrace Ajax edition, free and commercial, with support for Ajax (obviously)
  • Fiddler, free, from Microsoft
  • FriendlyGhost, commercial, focused on Flash/AMF and Ajax
  • HTTP Debugger commercial, with free trial
  • HTTP Analyzer, commercial, with support for AMF/Flash Remoting and JSON (despite company name, it's available in a standalone edition that is not IE-dependent)
  • HTTPNetworkSniffer, free, for Windows (from Nirsoft. See also related tools, WebCookiesSniffer tool to monitor all cookies communicated between browsers and servers, and NetworkTrafficView tool to monitor all communications on a given network adapter.)
  • HTTPWatch, commercial, with free edition
  • Membrane SOAP/HTTP Monitor, open source with support for JSON (with both command-line, GUI, and Eclipse-based functionality)
  • Paros, free
  • ServiceCapture, commercial, with support for JSON and AMF/Flash Remoting
  • WebScarab, free from OWASP
  • WFetch, free from Microsoft
  • Wireshark, free, multi-platform. The granddaddy of network packet sniffing tools (previously known as ethereal). For simple http proxy/sniffing as above, it may be overkill, but since I use the term sniffing in the category, I give a nod to the tool
  • See also Firefox-only and IE-only proxies below
  • I welcome additions/corrections/feedback
  • See also a server-side alternative, Sniffer/TCPMon, built into CF 6+ and found in either [coldfusion]\runtime\bin or [JRun]\bin. For more info, see also this Adobe Technote, the CF documentation, and JRun documentation. The tool is also available from Apache, and you may find more information on that

Firefox-only Proxies/Sniffers/Web Client Test Tools [link]

See also generic http proxies (which work on multiple browsers) as discussed in the introduction to the broader category above.

IE-only Proxies/Sniffers/Web Client Test Tools [link]

See also generic http proxies (which work on multiple browsers) as discussed in the introduction to the broader category above.
See also the category here, Page Testing Tools, for still other tools that perform related web page analysis.

IP Address Reporting Tools [link]

Tools to help you identify your IP address (and some that allow you to get info on a given IP address, programmatically.)

Log Analysis Tools [link]

There are multiple categories of monitoring tools offered here, from generic log analysis tools (for any sort of log) to analysis of specific files (such as SQL Server logs) or for a specific purpose (intrusion detection or web site analytics). See also monitoring tools, which includes to monitor log files such as the Windows event log.

Following are the subcategories offered:

CF Log Analysis Tools [link]

See also related subcategories in the introduction to the broader category above.
  • flogr, open source, from Scott Stroz
  • FusionAnalytics, commercial, from Intergral (makers of FusionReactor)
  • Ray Camden has a tool to read the log files to identify templates listed by CF as being "slow pages". See his blog entries for CF8 and CF7. There is now a download link on the CF8 page to download the provided code as a CFML template, the link being at the bottom of the entry to the right of the link to display comments
  • Don't miss the log viewer/tailview in ColdFusion Builder and the Adobe ColdFusion 8 Extensions for Eclipse
  • Consider also (for creating logs in CFML) Logbox, free from Luis Majano. An enterprise ColdFusion Logging Library

Database Log Analysis Tools [link]

These include both tools for analyzing DB logs regarding transactions and analyzing the logs for operational information. See also related subcategories in the introduction to the broader category above.

Generic File View/Log Analysis Tools [link]

(This list is within the larger category of log analysis tools tools, but among the following are tools that could be useful for viewing any kind of text files, and in some cases for especially large ones.)
  • ASQL, free tool for Linux to query Apache log files via SQL (similar to, though not as powerful as, LogParser below)
  • BareTail, free and commercial, for Windows
  • CSVEasy, commercial, for Windows (log viewer for CSV files)
  • CSVFileView, free, for Windows (from NirSoft. See also related TableTextCompare tool to compare csv files.)
  • CSVed, free CSV file editor (supports other separators, too). See also uniCSVed, a unicode version at the same site
  • CSV Table Viewer, free, for Windows (log viewer for CSV files)
  • ELM Log Manager, commercial tool for monitoring Windows Event Logs and much more
  • Geektool, an open source log analysis tool for OS X
  • Large Text File Reader, open source
  • loggly, free and commercial hosted service
  • Killilink CSV, commercial, for Windows (sofware "retired")
  • Kiwi Log Viewer, commercial, for Windows, "Easily monitor a specified log file for changes"
  • Log Analysis, free for Windows
  • Log Analyzer, commercial or free with purchase of Advanced Host Monitor
  • LogMeister, commercial, for Windows
  • LogMX, free and commercial (low cost), multi-platform
  • Log Parser, free from Microsoft (I've got a resource microsite about it, including things I and others have written about using it.) See also visal/GUI tools for working with it: Log Parser Lizard UI, Log Parser Studio, and Visual Log Parser, as well as the related PAL tool that extends LogParser, for analyzing Windows Performance Monitor (PerfMon) logs
  • Logsene free and commercial, from sematext, "Centralized Logging, Log Management & Analytics...your ELK Stack in the Cloud or On Premises"
  • LogSurfer, an open source tool (no binaries, C source code that must be compiled). Seemingly different from a Mac log anlysis tool of the same name
  • LogViewer Pro, commercial, free for home use, for Windows (from the makers of UniversalViewer, listed later in this category)
  • Logwatch, free, for Linux
  • LogWatch, commercial, for Windows. "Simplified log management through centralized monitoring, automatic notifications, and powerful search capabilities."
  • ManyEyes, a free service from IBM Alphaworks (limited for now to only processing tab-separated files, and a column header line must be provided)
  • Ron's Editor, free and commercial, for Windows, "Professional CSV File Editor to edit, view and read, sort and clean, and convert all your data in no time."
  • SawMill, commercial, multi-platform, log file analysis and reporting
  • TextConverter, commercial, for Windows, for extracting data from log files into databases
  • TotalCommander, shareware, for Windows. File Manager, with file viewing capabilities (including zips, and an available plugin to list CSV files in a columnar manner)
  • Universal Viewer free and commercial, large file loading tool
  • xlogmaster, open source, for Linux/Unix
  • XpoLog Center, commercial, multi-platform
  • Consider also Splunk, a free and commercial enterprise log solution (multi-platform) which seems to do a lot more than just log analysis. Couldn't really tell from its web site how well it would be suited to just the simpler tasks of log analysis
  • See also other lists of log analysis tools, such as this, this and this
  • See also information on log rotation tools
  • See also Intrusion Detection Tools for some log-oriented IDS systems, as well as Reporting and Report Builder Tools, including discussion of online reporting solutions that can import CSV and other files for analysis and reporting
  • And of course, if you're looking to analyze a particular kind of log, see the other Log Analysis Tool categories here
  • I welcome additions/corrections/feedback

Web Server Log Analysis Tools [link]

(This list is within the larger category of log analysis tools. See also the separate list of Web Server Analytics Tools, which provide site tracking via a different approach.)
  • Alterwind Log Analyzer, free and commercial, for Windows (but supports many log formats)
  • Analog, open source, multi-platform (with some support for filtering spiders)
  • Apache Log Viewer (ALV), free, for Windows, supports reading Apache and IIS logs, including analytics reports (some features unlocked with low-cost donation)
  • AWStats, open source, multi-platform (with support for filtering spiders). Requires perl to operate, such as is available for free as ActivePerl. I found that it could not find my IIS configuration, on Vista (IIS 7)
  • Funnel Web Analyzer (, defunct
  • IIS and Apache Log Analyzer, free, for Windows
  • Obsessive Website Statistics, open source, multi-platform. Adds jquery-based web 2.0 features (with support for filtering spiders/bots). Stores log files in MySQL for its analysis
  • Report Magic, open source, multi-platform
  • Sawmill, a commercial tool, whose pricing is based on a number of "profiles" of log files you wish to analyze (with support for filtering spiders)
  • Sentry-Go IIS Web Server Monitoring, commercial, for Windows
  • SmarterStats, free and commercial, for Windows (supporting multiple web server log formats). Offers features focused on bot detection
  • Summary, commercial, multi-platform
  • Visitors, open source, multi-platform (but Windows binary is sold separately for small fee)
  • Webalizer, open source, packaged binaries for Linux, Solaris only, with other unsupported x-nix ports available
  • WebLog Expert, free and commercial editions, for Windows
  • WebLog Expert, for Windows
  • Web Log Storming, free and commercial editions, for Windows
  • WebTrends, a commercial tool
  • W3C LogValidator, free, multtplatform (Perl-baesd), "combines a Server Log analysis engine with batch validation, link checking and other quality-oriented processing, for step-by-step improvement and maintenance of Web Site Quality."
  • See also lists of such tools, such as at counterguide, the open directory project, Yahoo directory of log analysis tools, and so on
  • See also Generic File View/Log Analysis Tools, which includes many tools (like Log Parser) that can analyze web server logs and many more types of logs
  • See also Web Server Analytics Tools, which work differently, not analyzing log files but instead tracking site visits via a remote service
  • I welcome additions/corrections/feedback

Log Management Tools [link]

Tools to help manage (archive/rotate) logs, such as web server or ColdFusion logs. (Some web servers may rotate logs on a daily but not offer any means to auto-archive/zip/delete them after some period of time.)

Mail Servers/Gateways [link]

If you're unhappy with your current mail server, whether due to performance, need to handle larger volumes, adding better spam handling, mail lists, security, whatever, there are alternatives. Some are servers, some are gateways, some are identified as MTAs (message transfer agents). Some are free, some commercial; some downloadable, some run as hosted services. Here are some alternatives to consider.
Following are the subcategories offered:

Mail Server Software [link]

Whatever your operating system, you may have a default SMTP mail server provided that you may wish to reconsider. For instance, on Windows, there is the SMTP mail server associated with IIS, as well as Microsoft Exchange. On OS X, there's sendmail. Here are downloadable alternatives:
  • CommuniGate Pro, free and commercial, multi-platform
  • Free SMTP Server, free, for Windows
  • Hermes Secure Email Gateway, free and commercial, CFML-based, downloadable (VMWare appliance) and hosted service (so listed also under Mail Server Services, below)
  • hMailServer, free, for Windows
  • Kerio Connect, commercial, multi-platform
  • mailEnable, free and commercial, for Windows
  • MDaemon Messaging Server, commercial, for Windows
  • Postmark, free and commercial, for Windows
  • PowerMTA, commercial, multi-platform
  • qmail, open source, for *nix
  • sendmail, open source, for *nix (see also commercial Sentrion MPE, from same vendor)
  • SmarterMail, free and commercial, for Windows
  • SurgeMail, free and commercial, multi-platform
  • XMS (aka "Zrinity Email Delivery Server"), commercial downloaded or hosted service, multi-platform
  • Zeams, free, multi-platform
  • Note that on Windows editions that have IIS (or where IIS can be enabled), there is also an optional SMTP server associated with IIS. It may not be enabled by default. The means of enabling/configuring it will vary depending on the version of Windows/IIS, but will be enabled the same way that IIS itself would eb enabled. Here's at least one blog entry showing enabling/configuring it in Windows 2008
  • Consider also such options as ISPConfig 3, an open source hosting control panel for Linux, that includes mail server capabilities
  • See the other subcategories in this category related to hosted mail management, as well as the related category, CFMAIL Replacements/Enhancements elsewhere
  • I welcome additions/corrections/feedback

Mail Server Services [link]

You can also outsource your mail server management (both sending/SMTP and receiving/POP/IMAP) using solutions like:

Hosted Email Marketing/Newsletter Services [link]

If you're looking solely for alternative solutions for mailing list management, consider such options as

Monitoring Tools/Services [link]

There are many different kinds of monitoring tools that could be of value to CFers.

Following are the subcategories offered:

Application Monitoring Tools [link]

The following tools can be used to monitor Java applications, and can be used (some more easily than others) to monitor CF applications. See also related subcategories in the introduction to the broader category above.

ColdFusion Monitoring Tools [link]

See also related subcategories in the introduction to the broader category above.

Database/SQL Monitoring Tools [link]

The following tools monitor databases. While some monitor the databases themselves, some instead monitor SQL going into the database via JDBC from application servers (like ColdFusion). Some also offer profiling, meaning an ability to see not just some but all currently running queries, including details about the query such as an explain plan. For more monitoring alternatives, see also related subcategories in the introduction to the broader monitoring category above.

Event Log Monitoring [link]

The following tools can monitor the Windows Event Log. See also related subcategories in the introduction to the broader category above.

Java Monitoring/Profiling Tools [link]

The following tools can analyze Java, and as such can often be used to analyze Java-specific aspects of Coldfusion 6 and above. Some allow you to watch what operations are happening in the underlying JVM, some focus on reporting statistics, some focus on garbage collection analysis, some could be used to monitor the underlying java classes that CF calls. Some will work only with Java 1.5 (and CF 7 and 6 ran on Java 1.4.) Check out each to observe what it does, how it works, and whether it may be of value for your skill level. Some require no specific Java experience at all. See also related subcategories in the introduction to the broader category above.

SAN or NAS Monitoring Tools [link]

The following tools track the health of your attached storage solutions (SAN or NAS). See also related subcategories in the introduction to the broader category above.

System Monitoring Tools [link]

The following tools track the health of your server overall (and/or network), ranging from small tools (such as task manager alternatives) to full-scale enterprise monitoring. See also related subcategories in the introduction to the broader category above.

VM/Virtualization Monitoring/Mgt Tools [link]

Within the sphere of system monitoring tools is the subset of them devoted to monitoring/configuring VMs. Most work only with a specific VM hypervisor platform, and they are to be used by those managing VMs (they are not helpful for those whose applications and servers are hosted WITHIN a VM, though you may want to ask your VM host if they use any such tools to watch your and/or other VMs on the host server).

Web Server Analytics Tools [link]

It can be very useful to understand the traffic patterns and other visitor statistics for your web site. While Web Server Log Analysis Tools are one appprach, another is to use tools which instead track site visits via a remote service, where you drop code (often referred to as "tags") into your site which reports back to a hosted service. You then review the analysis on that remote site. Following are examples of that.

(For more on the debate between the two approaches, see this discussion, or this one (recovered from

There are many such services. Here are just a few. See also related subcategories in the introduction to the broader category above.

Web Server Request Monitoring Tools [link]

Not to be confused with Web Site Uptime Monitoring Tools, the following tools track requests being made to your server and/or other information about the health of your web server. The general focus is tools which monitor any web server requests, but also listed are tools that monitor web requests that get to ColdFusion (the focus of most of this CF411 resource). See also related subcategories in the introduction to the broader category above, especially Application Monitoring Tools.

Web Site Uptime Monitoring Tools [link]

The following tools track, report, and alert on whether your server is up or down, typically by sending frequent, repeated requests to some page on your site. Most are free hosted services, some are commercial. (While such tools are useful to know "if" your server is perhaps having troubles, they do not really help you to know "why". For that, see also related subcategories in the introduction to the broader category above.)

Beware also that when automated tools visit pages on your site often (including such monitors, as well as load balancer pings, spiders, bots security scanning tools and more), there can be a negative imapct from them due to their creating new sessions (and processing your session startup code) for EVERY page they visit. For more, see my blog post on the topic, Suffering CPU/DB/memory problems in CF? Spiders, monitor pings may be to blame.

Project Management Tools (written in CFML) [link]

There are of course many project management solutions written in many languages, and I won't even begin to try to point to any, let alone all, of those. But here are ones written in CFML, which may be preferable for some.

Registry (Windows Registry) Tools [link]

When solving some challenges, you need to work withthe Windows registry, whether to search it, manipulate it, monitor it, and so on. There are tools to help with each of these.
  • Regedit, built-into Windows. The classic tool for viewing, searching, and editing registry entried. Sure, it's always there, but it's rather anemic in its search functionality, and offers no monitoring features
  • RegFileExport, free, for Windows (from NirSoft). Console application to extract data from a noffline Registry file, including a remote one (it cannot export from the registry hive files of a running Windows system, as they are locked)
  • RegFromApp, free, for Windows (from NirSoft). Report on-the-fly what registry entries are being added by a given app/process. It supports selecting the process to watch from a UI or from the command line. If it doesn't find a process that you know is running, use "run as administrator" to launch RegFromApp
  • RegScanner, free, for Windows (from NirSoft). If you need to search the Windows registry and find Regedit's search to be a bit anemic, check out this great free tool. Not only does it show all results at once (as opposed to searching one at a time as in RegEdit), it also shows the keys being searched as it progresses. Adding features over the base refedit tool, you can also search by date modified or by "type" or length of a value, use wildcards, exclude keys from searching, and more. You can do a case-sensitive search (the default is insensitive), search using regex, search from the command line, search a remote computer, and more. You can limit how many results are displayed, see the size of all or selected result keys, export the found results, copy the keys, create an HTML report of the results, and more. You set it to be the tool opened when reg: links are clicked, switch it to "run as admin" from within the tool, save and reload configuration files of the above settings, and more. You can delete the found results from the registry, whether interactively (ctrl-del) or by creating a .reg file of delete commands. You can of course limit it to search only keys, values, and/or data, and you can limit it search only parts of the registry (excluding some keys/hives) rather than the entire registry. The default option ("scan the following base keys") limits it to certain base keys/hives, but if you uncheck that option you can then choose a value in the "base key" drop down at the top of the interface or type in a key name. All in all, a powerful tool, and free! For more tips on the tool, see the bottom of its download page, its readme, or the help file (.chm) that comes with it
  • I welcome additions/corrections/feedback

Regular Expression Generation/Testing Tools [link]

Working with regular expressions can certainly be challenging. Using a tool to help generate a regex will generally be better than crafting one by hand, at least until you become proficent with them, and following are several such tools. Still, beware that since different tools with use regex's (editors, servers/languages like ColdFusion, Java, .NET, Javascript) use different regular expression engines and syntax, some tools won't suit all needs. As for these below, some are CF-specific, but most are not. Choose/use/test appropriately to your needs.

Remote Desktop Connection Tools [link]

Often we may need to connect to and manage remote servers, and sometimes more than one. There are tools to help manage remote connections to multiple machine/servers, whether via Remote Desktop Protocol (RDP), SSH, telnet, VNC, etc.

Remote Support/Presentation/Shared Desktop/Web Conferencing/Webinar Tools [link]

If you need to give a presentation to remote attendees, or provide remote support (letting the remote person show you their screen, possibly with the option for them to let you take control of their screen), the following screen sharing/desktop sharing tools may help you. Some are free, some are commercial. Even the commercial ones now tend to have offers starting at about US$ 30-50 per month.

Some solutions are more oriented toward one-to-one sharing/presentations, while others are more suited to one-to-many sharing/presentations. I've broken them down that way.

Most do not require the users to install anything but just use a browser (generally any modern browser will work) to let you connect to each other via some web site you both connect to. In some cases, the presenter must install something extra (some services use Flash, some Java, some ActiveX), and indeed in some services, the presenter can work only on a particular OS while participants can be on any OS.

While some of the services include VOIP or phone-based teleconferencing services, if you'd like alternative phone support for these web conferencing tools, there are many free and commercial teleconferencing services available to consider. Simply do a Google search for free conference call or teleconferencing.
Following are the subcategories offered:

One-on-One Support/Remote Desktop Tools [link]

The following remote sharing tools are more oriented toward one-on-one sharing. See other aspects and related subcategories in the introduction to the broader category above.
  • Bomgar Remote Support, commercial, multi-platform appliance
  • CrossLoop, free hosted service focused on one-on-one remote shared desktop support (adds an interesting social networking aspect, to let others share their experience with you as a support person), for Windows and OS X
  • Copilot, commercial hosted service, from Joel Spolsky's company, Fog Creek
  • Connectwise Control, commercial hosted service
  • Eblvd remote desktop access; commercial hosted service
  • GotoAssist, commercial hosted service
  • NoMachine, free and commercial hosted service
  • MSPAnywhere, commercial hosted service
  • Remote Utilities, free and commercial hosted service
  • ConnectWise Control, free and commercial downloadable product
  • ScreenHero, closed for new signups (1/2017) while integrating with slack
  • Splashtop, free and commercial hosted product
  • TeamViewer, free (for one-on-one) and commercial hosted service, for Windows, OS X, Linux, IOS, and Android
  • Wayk Now, commercial hosted service
  • Zoho Assist, free and commercial hosted service, for Windows, OS X, and Linux
  • Zoho Meeting, free and commercial hosted service (free for one-on-one), for Windows, OS X, and Linux
  • Note that the tools listed in the following category as one-to-many sharing tools can of course also be used for one-on-one sharing
  • I welcome additions/corrections/feedback

One-to-Many Remote Presentation/Assistance/Remote Desktop/Shared Desktop/Web Conferencing/Webinar Tools [link]

The following remote sharing tools are more oriented toward one-to-many sharing (though can of course also be used for one-on-one). See other aspects and related subcategories in the introduction to the broader category above.
  • Adobe Connect for meetings, webinars, and learning; commercial hosted service from Adobe
  • Anymeeting webinars and conferencing; commercial and free hosted service (free for up to 4 users, as of 6/17)
  • BeamYourScreen screens-sharing; free, for Windows
  • BlueJeans video conferencing; commercial hosted service
  • Cisco Spark, free (3 people per call, as of 6/17) and commercial hosted service
  • Eblvd online meetings and web conferencing; free and commercial hosted service
  • FreeScreensharing, free hosted service (for Windows and OS X)--supports up to 1,000 participants, for up to 6 hours at a time (no max per month). Audio through phone-only (from the same people offering
  • Fuze, commercial hosted service
  • Genesys, commercial hosted service
  • Glance, commercial hosted service
  • GotoMeeting, free and commercial hosted service and related GotoWebinar
  • HPE MyRoom web conferencing; commercial hosted service
  • IBM WebMeetings (formerly LotusLive), commercial hosted service
  • Intercall, commercial hosted service
  •, free and commercial hosted service (for Windows, OS X, IOS, Android, but still not Linux as of 1/2017) (from the people behind LogMeIn)
  • LoopUp, commercial hosted service
  • MeetingBurner, free (10 participants) and commercial hosted service
  • Skype for Business commercial hosted service
  • Mikogo, free (2 participants) and commercial hosted service
  • ReadyTalk, commercial hosted service
  • Skype for Business, free and commercial hosted service
  • Spreed, commercial hosted service
  • StartMeeting, free (5 participants) and commercial hosted service (from the same company behind
  • TeamViewer, free (for one-on-one) and commercial hosted service
  • UberConference screensharing, free (10 participants) and commercial, hosted service
  • WebEx, free (for 2 participants) and commercial hosted service
  • Yugma, free (for 1 other participant) and commercial hosted service
  • Zoho Meeting, free (for 1 other participant) and commercial hosted service
  • Zoom, free and commercial hosted service (free for one-on-one or up to 50 participants for up to 40 mins)
  • The following seem or are defunct: BlueTrain (, formerly, ConferencingNow (, Dimdim (,Unyte (, Yuuguu (
  • See also the preceding category's list of one-to-one sharing tools
  • I welcome additions/corrections/feedback

Reporting and Report Builder Tools [link]

ColdFusion has had a built-in report builder since CF 7, and embedded Crystal Reports support since CF 3 (at least), but what if you are on another version or CFML engine, or just care to consider alternatives? There are many, free and commercial.

RSS to Email Tools [link]

Are you someone who reads or publishes RSS feeds? Did you know there are tools to permit people to receive notifications without using RSS Readers? Some just prefer email. The following services offer tools both for readers (add a URL and you'll get an email when a site's RSS feed changes) and publishers (add a widget to your site to let others easily register to receive your feed via email). Note as well, after the list, some tools to monitor any page for content changes, not just RSS-fed ones. (Useful to watch this site, until I get an RSS Feed on it!)
Something taking a slightly different approach are tools that can notify you of changes to pages on any site, not just RSS-fed ones, such as the following. Again, sure, some browsers include such a feature, but some want notification by email (Useful to watch this site, until I get an RSS Feed on it!)

Screen Capture tools [link]

I've divided the list here into still and a/v image capture tools. All of these can be great for creating tutorials, training, demos, etc.
Following are the subcategories offered:

Still Screen Image Capture Tools [link]

See also related subcategories in the introduction to the broader category above.
  • CaptureWizPro, commercial, for Windows
  • Clip2net, free, multi-platformm (and mobile apps); focused on sharing screenshots over the web
  • EasyCapture (, freeware
  • Extensoft Screeen Capturer, freeware, for Windows
  • FastStone Capture, freeware, also available as a commercial edition
  • FireShot, free add-in for Firefox
  • Gadwin PrintScreen, freeware, for Windows
  • Greenshot, open source freeware, for Windows
  • HyperSnap-DX, commercial, for Windows
  • kwout, a free browser-based (bookmarklet-oriented) screenshot utility
  • LICEcap, free, for Windows and OS X, "can capture an area of your desktop and save it directly to .GIF", including an animated gif
  • MadCap Capture, commercial, for Windows
  • MWSnap, freeware, for Windows
  • ScreenCapture (SCVR), free, for Windows
  • Screen Dash, free and commercial, for Windows and iphone
  • ScreenShot Captor, freeware, for Windows
  • Skitch, free, multi-platform (from the folks behind Evernote)
  • SnagIt, commercial (widely regarded as king of this market segment)
  • TinyGrab, free, multi-platform and mobile, "social screenshot sharing"
  • ViewedIt (not "ViewEdit"), free, multi-platform, for Chrome
  • Winsnap, commercial, for Windows
  • A great review of several of the above freeware tools is available from Confessions of a freeware junkie, and a review of both commercial and free tools is offered at
  • Don't forget as well that in many operatings systems, the PrntScrn button on your keyboard will copy the current screen to your clipboard. In Windows, using Alt-PrntScrn will capture just the current application
  • I welcome additions/corrections/feedback

A/V Capture (screencast/screen share/screen record/demo) Tools [link]

The following tools can be used to capture any screen content and record it. Some produce AVI, some SWF, some FLV, and so on. Some can capture video on screen, while some cannot. There are free and commercial options, for multiple platforms. See also related subcategories in the introduction to the broader category above.

Security Protection Tools [link]

There are a range of security concerns for CF shops, from SQL Injection, to Cross Site Scripting (XSS), to Cross Site Request Forgery (CSRF), ClickJacking, CRLF injection, xPath injection, and more, as well as denial of service attacks. The first three are related: attempts by hackers to get data into your application (whether to affect your database, or to have you store and present back to future viewers).

There are several levels at which you can detect and prevent such attempts. The lowest level is your CFML code, then your CFML application, then the web server, then web application firewalls, etc. Some features let you specify what to block, while others try to determine that automatically based on heuristics (observed patterns of behavior for requestors), and so on.

This category is broken into subcategories, depending on the level at which the attack is detected/prevented, from the inner-most code level to the outer-most hardware firewall level. I also offer a sub-category on intrusion detection tools, as another aid in addressing security problems.
Following are the subcategories offered:

CFML Code-level Injection Protection Tools [link]

See also related subcategories in the introduction to the broader Security category above.
  • Recent releases of CF have introduced more and more features to assist with protection at the coding and other levels. CF10 added the several EncodeForxxx functions to encode input string (for XSS protection) and a canonicalize function to decode strings, the CSRFGenerateToken/CSRFVerifyToken functions for CSRF, and the CFClickJackFilterDeny/CFClickJackFilterSameOrigin elements in web.xml for clickjacking, as well as built-in protection against CRLF injection for several tags. See this article from Adobe for more on CF10 security enhancements. CF11 added new XSS support, in the guise of Anti-Samy support, with new functions isSafeHTML and getSafeHTML, and support for Xpath injection protection with the new encodeForXPath function. See this article from Adobe for more on CF11 security enhancements. Finally, CF2016 added the Security Analyzer tool (feature of CF Builder, which works only with CF2016 Enterprise), to help review your code for such opportunities for improvement regarding security.
  • CFQueryParam, a tag whose main job is to support query parameterization, aka "bind variables", but is used by folks to *help* with sql injection protection, as it supports datatype checking of values passed to a CFQUERY. For instance, if the tag was used to check an incoming url (query string) variable for cfsqltype="CF_SQL_INTEGER" (because it should be a number) then if that value had any kind of string in it, it would be rejected.

    To be clear, this tag's job is NOT sql injection protection. If the cfsqltype were set to "CF_SQL_VARCHAR", that would simply confirm that the incoming value was a string. It would NOT look for and remove threatening strings. Be very careful relying solely on cfqueryparam for sql injection protection.

    Note that while the CF Builer 2016 Security Analyzer would help identify places where you are vulnerable to SQL Injection (among many other vulnerabilities), there is also an open-source CFML tool to help identify such places where CFQUERYPARAM is missing from your CFML-based. See the Queryparam Scanner tool from Peter Boughton .
  • CFArgument, a tag whose main job is to support datatype checking of variables passed to CFC methods and user defined functions. Like cfqueryparam, it could be used as a meager form of protection
  • db-dot-cfc, a cfc called "db", created by Bruce Kirkpatrick, which "Enhances cfquery by analyzing SQL to enforce security & framework conventions." (last udpated in 2013, as of a check in June 2017)
  • Again, there are several other levels of injection protection that you can consider, extending out first to your CF application, to then your web server, to then a web application firewall, and so on, as discussed in the following sub-categories.
  • I welcome additions/corrections/feedback

CFML Application-level Security Protection Tools [link]

These are solutions that you might implement in your application.cfm file, or the onrequeststart method of application.cfc. See also related subcategories in the introduction to the broader Security category above.
  • cfFirewall, open source, from Ed Tabara (last updated in 2007, as of a check in June 2017)
  • FuseGuard, commercial, from Pete Frietag, of Foundeo (last updated in 2007, as of a check in June 2017)
  • Portcullis, free, a CFC that detects/protects against XSS and SQL injection (last updated in 2010, as of a check in June 2017)
  • See also HP RASP/Application Defender, which is an application-level protection tool (as opposed to web app firewall tools, below) which can protect Java and .NET apps, and is even free for protecting a single one.
  • See tools below, for security protection at higher levels than CF, and see also Site Security Testing Tools and Database Testing Tools, to assist with testing for vulnerabilities, before or after using these protection tools
  • Seemingly defunct: XSSblock (
  • I welcome additions/corrections/feedback

Web Server-level Security Protection Tools/Web Application Firewall-level Tools [link]

See also related subcategories in the introduction to the broader Security category above.

Cloud/SAAS Firewall-level Application Firewalls [link]

The following services can be easily enabled for your site (with minor DNS adjustments) and often provide more than just web application firewall capabilities but also DDOS protection, CDN/caching capabilities, and more.

See also related subcategories in the introduction to the broader Security category above.

Hardware Firewall-level Security Protection Tools [link]

See also related subcategories in the introduction to the broader Security category above.

Intrusion Detection Tools [link]

Intrusion Detection Systems (IDS) range from which focus on detecting file changes on your server (like PA File Sight), to those that focus on analysis of logs (like LogWatch), to those that offer broader threat detection (like AlertLogic, FireEye, Snort, and others).

Server-side Spell Checkers [link]

There have been various server-side spell checkers written for CFML.

Session Tracking/Management Tools [link]

ColdFusion sessions can be tracked/managed using various tools, though note that some tools only track J2EE/Java EE sessions (an option that can be configured in the ColdFusion Administrator>Memory Variables page.)
  • ColdFusion Enterprise Server Monitor, from Adobe (available in ColdFusion Enterprise (only) in versions 8 and above). Offers a session monitor, which shows a list (and can show a count) of all current sessions, whether Java EE or not. See its Statistics tab at the top, then the Request Statistics section on the left, and its Active Sessions page. Your first shown a list of all sessions, and if you double-click on one you see additional details about the session (when it was created, when last used, when it will expire). Click the "chart" icon on the far right to see a chart showing a count of sessions
  • Note that a simple count of ColdFusion sessions is available though a number of other means, whether graphically or in logs:
    • Again, see the ColdFusion Enterprise Server Monitor above, and its Active Sessions page and chart
    • ColdFusion has an undocumented internal sessiontracker object, which has been documented in various places, such as this blog entry from Steven Neiland. Before hacking together something yourself, see the next tool, ServerStats
    • ServerStats, open source, from Mark Lynch. Provides count of current number of ColdFusion sessions (whether J2EE sessions or not), including a count per application. Uses the CF sessiontracker object internally, and since the code is open source, you can review it for some advanced uses of the object
    • FusionReactor, commercial, for ColdFusion, Railo/Lucee, BlueDragon, and any Java EE server/servlet engine. FusionReactor 5 (technically, 5.0.6) offers a graphical count of sessions in its Metrics>Custom Series page, via the ActiveSessionCount option in the drop-down at the top right of the page (tracks sessions whether J2EE or not). It also offers a count of sessions as a column in its realtimestats.log. That log is also available for FusionReactor 4, if the FusionReactor Extensions for ColdFusion are enabled. FREC is now built into FR 5
    • ColdFusion 10's optional metrics log tracks CF sessions regardless of whether set to use J2EE or not)
    • The JRun Metrics, available for ColdFusion 6-9, can be enabled to log a count of sessions, though it only tracks ColdFusion sessions if J2EE sessions are enabled
  • Those running ColdFusion 10 (which runs on Tomcat), or running CF or Railo/Lucee on Tomcat, should note that there are tools specifically for monitoring Tomcat sessions, such as MessAdmin, open source, though again it would only work if J2EE sessions are enabled in ColdFusion. And while the built-in Tomcat Manager application does offer session tracking, that manager app is not enabled (or even provided) in CF10
  • J2EE sessions can also be tracked using Java tools such as sessionmon (which would be implemented as a servlet, using instructions offered on the page), as well as using as one of many Java EE monitoring tools which offer session trackins among many other features, such as JavaMelody, InfraRED, and psi-probe, to name a few
  • For more on tracking sessions in ColdFusion, see this 2009 blog post "Tracking number of CF sessions per application easily, and why you should care", from Charlie Arehart
  • For more on J2EE sessions in ColdFusion (why they were created, what they enabled, how they work, and some gotchas), see this article from the CF6 timeframe, when they were introduced
  • I welcome additions/corrections/feedback

Source Code Control [link]

Source code control (or version control) systems are an important tool for tracking code (and other file) changes.
Following are the subcategories offered:

Source Code Control Tools [link]

Following are some of the more popular source code control repository tools, including multiple "distributed" source control tools. Note that many of the tools bundle (or have available) client access tools. You can also avoid installing a source code repository locally and instead use any of the many available Remote Source Code Repositories, discussed in the next category here.

Remote Source Code Repositories [link]

Note as well that there are various available remotely hosted repositories (Subversion, Git, Mercurial, and others), some free and some commercial. See more on those source code tools in the the category above.
  • Assembla, free and commercial, offering SVN and Git hosting
  • BeanStalk, free and commercial, offering SVN and Git hosting
  • Bitbucket, free and commercial, offering Git and Mercurial hosting
  • Codesion (formerly CVSDude), free and commercial (with student discounts and free upgrades for open source projects), offering SVN, Git and CVS hosting (also known as Collabnet Cloud)
  • CodeSpaces, free and commercial, offering SVN and Git hosting
  • Google Code, free for open source projects, offering SVN and Mercurial hosting (See the Getting Started resource)
  • github, free and commercial, offering git hosting (see also the site CFML projects on GitHub)
  • Hosted-projects, commercial, offering SVN hosting
  • Kiln, free and commercial, offering Mercurial hosting (from Fog Creek)
  • OpenSVN (, (closed down in early 2010), free
  • ProjectLocker, free and commercial, offering SVN and Git hosting
  • Sourceforge, free for open source projects, offering SVN, Git, Mercurial, Bazaar, and CVS hosting (See the Getting Started resource.)
  • Unfuddle, free and commercial, offering SVN and Git hosting
  • XP-Dev, free and commercial, offering SVN, Git and Mercurial hosting
  • I welcome additions/corrections/feedback
There are various reviews of these remote repository options, including here, here and here.

Testing Tools/Services [link]

There is a wide range of available testing tools, of many kinds.
There are multiple categories of testing tools offered here.
Following are the subcategories offered:
CFML Code Testing Tools [link]
See also related subcategories in the introduction to the broader category above.
  • CF Live, free service, by Russ Michaels, for testing code on ColdFusion and Railo ("Need to test some CFML code quick? Simply paste your CFML code into the box below and hit RUN, the results will be displayed")
  • CodeChecker, open source, by Chris Weller ("a code review automation tool that helps take away the tedious (and boring) aspects of reviewing code.") For more info, see his blog post
  • ColdFish, open source, by Jason Delmore (a code highlighting tool, rather than a testing tool, but doesn't fit in any other category here and could help some while testing code)
  • CodeCop, by Steve Bryant, "ColdFusion code checker."
  • QueryParam Scanner, open source, by Peter Boughton (finds code where CFQUERYPARAM could be added for improved security, performance)
  • VarScoper, open source, by Mike Schierberl. A var scope checking tool to help identify where you're creating local variables in CFCs without var scoping them
  • Note as well the CFML Syntax checker available in the ColdFusion Admin
  • See also additional generic code testing tools
  • I welcome additions/corrections/feedback
CFML Unit Testing Tools [link]
See also related subcategories in the introduction to the broader category above. Database Testing Tools [link]
See also related subcategories in the introduction to the broader category above. Functional Testing Tools [link]
The following tools test the functionality of web pages, such as for regression (or even performance) testing. See also related subcategories in the introduction to the broader category above. HTML Validation Tools [link]
The following tools can check your site or a page for the validity of your HTML, CSS, etc. Link Checking Tools [link]
The following tools can check your site or a page for the validity of hyperlinks. Some are online services, others are downloadable tools. Network Bandwidth Testing Tools [link]
The following tools test your network bandwidth. Load, Stress, and Application Testing Tools [link]
There are many load testing and/or stress testing tools, free and commercial. (See also the newly created functional testing category, with tools that can also be used for load testing.) See also related subcategories in the introduction to the broader category above.

Note as well that I indicate here which tools indicate they support Flex or Flash testing (I use whatever words they do, not wanting to presume they mean one for the other.)
  • Apache Bench (ab), free, downloadable (command-line driven tool), multi-platform (built into Apache HTTP server, but can run stand-alone). Learn more from a CFers's perspective here and here
  • Applause Load Testing, commercial, hosted service (with focus on helping you setup tests)
  • AppLoader, commercial, downloadable, for Windows
  • AppPerfect Load Test, commercial, downloadable, multi-platform (with Flash support)
  • BlazeMeter, free and commercial hosted service (formerly PerformanceXpert), free for 50 users and 10 tests
  • Dynatrace Load, commercial hosted service
  • Flood (from Apache), open source, downloadable, for *nix
  •, free and commercial hosted service, free for 5 min intervals (provides distributed testing using JMeter, Gatling, or Selenium test plans)
  • FSMax (from McAfee), free, downloadable for Windows (command-line, script-driven tool)
  • httperf, open source, downloadable, for Linux
  • Gatling, open source, downloadable, multi-platform
  • jcrawler, open source, multi-platform (as Java source)
  • JMeter (from Apache), open source, multi-platform. (Here's an article on setting up JMeter and using it)
  • LoadComplete, free and commercial downloadable, for Windows (free for up to 25 vusers)
  • LoadImpact, free and commercial hosted service (free for up to 100 virtual users for 5 tests per month)
  • LoadRunner, free and commercial, downloadable (free for 2 virtual users), and related StormRunner commercial hosted solution
  • Loadster, free and commercial hosted service
  • LoadStorm, free and commercial hosted service
  • LoadUI NG Pro, commercial, downloadable multi-platform (with a focus on API testing)
  • NeoLoad, free and commercial, multi-platform (free for 50 virtual users)
  • Netling, open source, for Windows
  • Neustar website load testing, commercial, hosted service
  • OpenLoad, commercial downloadable and hosted service
  • OpenSTA, open source, for Windows (also at sourceforge)
  • Parasoft SOATest, commercial, multi-platform (formerly WebKing)
  • PureLoad, free and commercial, downloadable, multi-platform (free for 100 virtual users)
  • Redline 13, free and commercial hosted service (free for unlimited virtual users)
  • Siege, open source, downloadable for *nix
  • Silk Performer, commercial, downloadable for Windows (formerly from Segue, then Borland, now from Microfocus)
  • Soasta CloudTest, free and commercial hosted service (free for up to 100 virtual users)
  • StressTester, commercial, downloadable, multi-platform
  • The Grinder, open source, downloadable multi-platform (Java)
  • WAPT, Web APplication Testing tool (at, free and commercial, downloadable for Windows, and with available WAPT Cloud solution
  • WCAT (Microsoft Web Capacity Analysis Tool), free, downloadable for Windows
  • WebLoad, free and commercial, downloadable for Windows (free for50 vusers)
  • Web Performance Load Tester, commercial and free, hosted ("On-demand") and downloadable multi-platform
  • WebServer Stress Tool, free, downloadable for Windows (formerly commercial, but released as freeware in 2014)
  • Websurge, free and commercial, for Windows, from West Wind (Rick Strahl)
  • Seemingly defunct: Astra QuickTest/LoadTest (formerly from Mercury Interactive), seemingly folded into other HP products); E-Test Suite, from (formerly from RSW Software); QEngine (; StressIT (; Web Application Stress Tool (WAST) from Microsoft; WebMetrics (
  • See also other lists of load testing tools, such as's list of performance tools, as well as SoftwareQATest's list, and so on
  • On the subject of load testing, check out the 221 page Performance Testing Guidance for Web Applications, from the MSDN: patterns & practices series. You can download it as a PDF also
  • Consider also HeavyLoad, free, for Windows, though it and other tools like it are focused on stressing system resources versus web applications
  • Finally, see also other categories here, such as Functional Testing Tools, as those tools can often also be used for load testing
  • I welcome additions/corrections/feedback
Page Appearance Testing Tools [link]
The following tools test how web pages appear on different browsers. (See the next category for tools to test how pages perform in browsers.) See also related subcategories in the introduction to the broader category above.
  • Adobe BrowserLab (, free
  • Browsercam, commercial service
  • BrowserLing, free and commercial service
  • Browsershots, free service
  • Browsrcamp ( ) , free and commercial tool
  • Gomez Cross-Browser Website Compatibility Test (, free, hosted service
  • IE NetRenderer, free tool "allows you to check how a website is rendered by Internet Explorer" on mahy different OS's
  • LitmusApp (, free and commercial service
  • See also Adobe Edge Inspect, free, allows devs "to preview their content across multiple mobile devices. Wirelessly pair multiple iOS and Android devices to your computer, grab screenshots from any connected device, and see real-time results from changes to HTML, CSS, and JavaScript."
  • See this list of other browser page render test services, and SoftwareQATest's list, as well as test everything, which collects several page testing tools into a single interface
  • See also the category here, Page Performance Testing Tools, for tools that test the performance of pages within the browser
  • I welcome additions/corrections/feedback
Page Performance Testing Tools [link]
The following tools test how web pages perform, and most identify opportunities for improvement. First shown are service-based tools, and second are client-based tools. (See the previous category for tools to test how pages appear in browsers.) See also related subcategories in the introduction to the broader category above.
Service-based Page Performance Testing Tools [link]
The following tools test response time from a hosted service: how quickly web pages are returned when requested. (See the previous category for tools to test page performance from WITHIN your browser.) See also related subcategories in the introduction to the broader category above. Client-based Page Performance Tools [link]
Regex Testing Tools [link] Site Security Testing Tools [link]

This list offers a range of different tools for testing the security of your site. Most test for SQL injection vulnerabilities (from the outside), either to identify them (to help you) or to penetrate them (to help a hacker, or you, by learning what they can learn.) See also related subcategories in the introduction to the broader category above.

Note especially the nifty (and CF-specific) HackMyCF service listed below, from Pete Freitag and Foundeo.

If you're looking for protection against vulnerabilities identified by such testing tools, see several forms of Security Protection Tools that are cataloged elsewhere here.
  • Acunetix Web Vulnerability Scanner (WVS), commercial, downloadable (for Windows) or hosted service. (Offers a free online scan, which identifies IF it finds vulnerabilities, while the paid version would offer the specifics)
  • AppScan, commercial, downloadable (multi-platform) and hosted service (Offers a free online scan, which identifies IF it finds vulnerabilities, while the paid version would offer the specifics)
  • BeEF, The Browser Exploitation Framework, open source, for Mac or Linux, "allows the professional penetration tester to assess the actual security posture of a target environment by using client-side attack vectors."
  • Burp Suite, free and commercial, downloadable, multiplatform
  • FG-Injector, open source, "Security tool designed to detect, research and leverage SQL injection exploitation"
  • Fortify Static Code Analyzer, commercial, with specific support for CFML
  • Fortify WebInspect, commercial, downloadable
  • Frontline Vulnerability Manager (VMaas), commercial hosted service
  • HackMyCF, commercial hosted service with downloadable component, checking for CF-specific vulnerabilities, from Pete Freitag and Foundeo
  • Lumension Patch Scanner, free, for Windows (with specific support for detecting need of CF security patches)
  • Lynis, free, for *nix
  • Mavituna NetSparker, commercial downloadable (for Windows) and hosted service
  • Nessus, commercial downloadable
  • Nikto, open source (PERL-based) web server security scanner (see also Wikto, below)
  • OWASP Zed Attack Proxy Project, free, (multiplatform), " can help you automatically find security vulnerabilities in your web applications"
  • Qualys Web Application Scanning, commercial hosted service. See also their FreeScan service
  • Scrawlr (, free, from HP (formerly SPIDynamics, and formerly downloadable at
  • SiteDigger, free, downloadable (for Windows), from McAfee/Foundstone, leverages Google API (you provide your API license key) (one of a number of free security tools)
  • SQLMap, open source, python-based (cross-platform, but requires Python be installed), "Automatic SQL injection and database takeover tool"
  • SQLNinja, free, PERL-based, for Linux, FreeBSD, and OS X. "A tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end"
  • Spike Proxy, free, for Linux
  • SQL Power Injector, free, downloadable for Windows, "helps the penetration tester to find and exploit SQL injections on a web page" (also available on SourceForge)
  • Veracode Web Application Scanning, commercial service (reference to CF support in news release)
  • Wikto, open source web server security scanner (see also Nikto, above, as well as related sensepost j-baah (formerly crowbar) and BiDiBLAH )
  • Consider also:
    • Absinthe, open source, multi-platform (requires .NET for Windows, Mono for Linux, OS X). A GUI SQL injection tool, not a tool to test for and discover your vulnerabilities so much as to exploit them--a tool a hacker might use against you. (not updated since 2011, as of a check in Apr 2017)
    • AutoMagic, free, downloadable for Windows, "an automated SQL injection tool designed to help save time on pen tests. It is only designed to work with vanilla Microsoft SQL injection holes where errors are returned."
  • See also web app security tools, SoftwareQATest's list of Web Site Security Test Tools, and so on
  • For more on SQL and XSS Injections, see resources like the OWASP project page on the topic, the FoundStone Hacme Shipping project that demonstrates bad security practices in a CFML app, and the OWASP WebGoat project that demonstrates bad security practices in a Java EE app
  • See also CFML Code Testing Tools
  • Finally, again, if you're looking for protection against vulnerabilities identified by such testing tools, see several forms of Security Protection Tools that are cataloged elsewhere here.
  • The following seem defunct: Brutus (, CA Nimsoft Cloud Monitor(, formerly
  • I welcome additions/corrections/feedback
Site Testing Tools [link] Web Services Browsing/Testing Tools [link]

Tools to browse web services, to see their available methods, arguments, return types. (If you're looking at these tools when a web service you're calling is failing, and you'd like a URL that shows how the tool works when the URL is valid, here is a web service WSDL URL that you can test with the tools below, which has worked for a few years: .)
  • Dreamweaver - Don't miss the feature in the Application Panel, Components tab, to select "web services" from the drop down (if you have a CF page opened within a CF site), where you can provide a WSDL URL and DW will browse the web service, showing its available methods and their arguments, etc
  • Eclipse - soapUI (see below) or Adobe Services Browser (in ColdFusion Builder and Adobe ColdFusion Extensions for Eclipse). Use Window>Show View>Other>ColdFusion>Services Browser. Then click the icon just left of the minimize icon ("Show Web Services"), then click red + to add a new WSDL URL
  • GMorpher ( (defunct) free, web-based, and Dynamo Invoker (free, downloadable)
  • Liquid XML Studio, for Windows (commercial, free trial), "an advanced XML Development Environment and XML toolkit containing all the tools needed for designing and developing XML schema and XML applications, including web services testing and browsing. For XML novice or expert, the intuitive interface and comprehensive features will help you save time and money developing a successful XML project.”
  • SoapClient (free, web-based)
  • soapUI (free, open source downloadable, both standalone and as Eclipse plug-in)
  • StrikeIron (, defunct, Web Services Analyzer for Windows (commercial, downloadable)
  • Web Service Call Composer (Web Service Tester) (downloadable, commercial), part of commercial Stylus Studio XML IDE
  • Web Service Proxy Generator (free, web-based (does not work with https urls)
  • Xmethods WSDL Analyzer (free, web-based)
  • XMLSPY IDE web service tester (commercial, downloadable)
  • See also related subcategories in the introduction to the broader category above
  • I welcome additions/corrections/feedback

Time Tracking/Invoicing/Billing Tools/Services [link]

Following are online or downloadable tools to provide time tracking, invoicing, and billing services (not necessarily written in CFML, but of value to CF developers).
  • fourteenDayz, free and commercial hosted service (free for 4 projects and 4 users)
  • 88 Miles, free and commercial hosted service (free for unlimited projects but no more than 40 hours a month)
  • AcceptPay, free and commercial service (free for up to 10 invoices per month). Also provides for credit card acceptance in commercial edition
  • Billings, commercial downloadable tool (for OS X)
  • Cashboard, free and commercial hosted service (free for 2 active projects and 2 employee logins)
  • Clicktime, commercial hosted service
  • Costrak, free and commercial hosted service (free for 5 users)
  • eBillity, free and commercial hosted service (free for 5 projects and 3 clients)
  • FreshBooks, free and commercial hosted service (free for 3 projects and 1 user)
  • Fanurio, commercial, multi-platform
  • Freckle, free and commercial hosted service (free for 1 project, 1 user)
  • Harvest, free and commercial hosted service (free for "one person and two active projects") (This is the tool I have used happily for years.)
  • Invoice, commercial downloadable too (for OS X)
  • Klok, free and commercial AIR app
  • OroTimesheet, commercial (for Windows)
  • Paymo, free and commercial hosted service,(free for timetracking for up to 2 users, and up to 3 free invoices)
  • ProWorkFlow, commercial hosted and downloadable service (happens to be written in CFML)
  • Recurring Billing Software, a free open-source subscription billing system developed by Steven Rubenstein
  • Senomix Timesheets, free and commercial hosted service (free for 2 users and 10 timesheets)
  • SideJobTrack, free hosted service (no longer taking new members currently)
  • SlimTimer, free hosted service
  • Tick, free and commercial hosted service (free for 1 project and unlimited users)
  • Tiktrac, free and commercial hosted service (free for 5 projects and 5 users)
  • TimeClock Online, free and commercial hosted service (free for 1 user), happens to be written in CFML
  • Timeless Time and Expense, commercial hosted service and downloadable program
  • Timeloc, free AIR app
  • TimeSnapper, commercial, for Windows
  • Timetracker, free AIR-based CFML app, from Ray Camden
  •, free and commercial hosted service (first year free)
  • Toggl, free and commercial hosted service (free for 5 users, limited features)
  • TrackMyPeople, free and commercial hosted service
  • Web TimeSheet, commercial hosted service
  • I welcome additions/corrections/feedback

Virtual/Cloud Server Solutions [link]

Virtual or Cloud servers have become a significant alternative to physically hosted servers. The cloud computing space is frequently changing. Be sure to read up on the options and competitors available, including those below.

URL Rewriting Tools [link]

These tools can help you mask the fact that your pages are dynamic, to make them look static, which can be helpful for search engine optimization (SEO) and search engine friendly URLs.
  • Helicon APE, commercial, for IIS 7 (can be made to work for IIS 6), "provides support for Apache .htacces and .htpasswd configuration files in Microsoft IIS"
  • Helicon Isapi_rewrite, commercial and free versions, for IIS 5, 6, and 7, an "Apache mod_rewrite compatible URL rewriter for Microsoft IIS" (free editions in their version 3 and version 2 products)
  • Ionics Isapi Rewrite Filter (IIRF), free, for IIS "6 and later"
  • Mod_rewrite, free, for Apache 2+
  • PageExchanger (, commercial, for Windows
  • Streamcatcher, commercial, for IIS 3, 4, 5, 6, and 7
  • URL Replacer, free, for IIS (6, it seems)
  • Tuckey URLRewrite, free, multiplatform (a Java filter. For more on using Java filters with CFML, see my Feb 2003 CFDJ article, "Fun with Filters". See also a more specific resource on using this filter with Railo, whose info generally applies also to ColdFusion as well.)
  • URL Rewrite, free, for IIS 7+ (from Microsoft)
  • UrlRewritingNet, free, for IIS 6 and 7
  • See also:
    • Helicon LinkFreeze, commercial, for IIS 4, 5, and 6, "a fast and easy solution to optimize dynamic or database-driven websites for search engines. It transforms all dynamic links on your site removing all unwanted characters and making links look like static."
    • ServerMask, commercial for IIS 6 and 7, can eliminate file extensions from URLs, to help with preventing information leakage/deter hacking
    • IIS Rewrite, commercial, for IIS (which used to be offered at, but site no longer exists [now parked domain], but is still avialable to buy from programmersheaven)
  • I welcome additions/corrections/feedback

Web Server Content Caching Tools [link]

Tools to cache content within web servers, to help speed web page processing for clients and on the server.

Web Site Archive Repositories [link]

These services offer historical presentations of how web sites have appeared over time. The classsic is, but there are others, and I wanted to list them here.

Web Site Design Repositories [link]

These sites offer web site designs, most free, some commercial. (Be careful if you're looking for a particular one, as the names are often quite similar, such as and, or and

Wireframing/Prototyping/Mockup Tools [link]

  • Balsamiq, free and commercial (while not CF-specific, can be used to create UI wireframes)
  • CFPrototype, open source, from Qasim Rasheed
  • Fusebox Wireframe Editor, open source, from Kevin Roche
  • FuseBuilder, offered as honorware
  • FuseMox, "A website starter kit with a mock Fusebox 'framework' that enables Coldfusion Developers to set up a website with a basic framework quickly and easily", from Paolo Broccardo
  • Gliffy, free (while not CF-specific, can be used to create UI wireframes)
  •, free (while not CF-specific, can be used to create UI wireframes)
  • Rebar (, free, from Nat Papovich and others
  • Wireframe Viewer/Editor, open source (while not CF-specific, can be used to create UI wireframes)
  • WireframeSketcher, commercial, from Peter Severain, an Eclipse plugin that works with ColdFusion, ColdFusion Builder, Flash Builder, and also has stencils for Android and iPhone
  • The following seem defunct: Adalon (, FormMonkey (, TrafficMunkey (
  • I welcome additions/corrections/feedback

WYSIWYG/Rich Text Editors [link]

When you want to make it easy for your users to enter text into a form, and permit them to mark it up (bold, italics) or add HTML (hyperlinks, images), that's where a WYWIWYG (what you see is what you get) editor, or a Rich Text editor, comes in handy.

With respect to the editors below, note that the reference to platform may refer to either client or server requirements. Rather than detail them, I offer simply whatever platform information I could easily glean from the site. To confirm details for your needs, see the respective product site (such as system requirements pages) for more details.


I started this list back in 2002, which I hosted on my older Systemanage site. You can even see the original page, via the good ol' Internet Wayback Machine in this view of the page as of April 2002. Of course, I've updated it substantially since then, bringing it over to my site in mid-2007 (and I continue to do so: last updated on Jun 27, 2017.) It now has over links to over 2,000 tools/resources in over 175 categories. I welcome additions/corrections/feedback. I've gathered most of them myself but I welcome community participation.

Again, with regard to any of the above, I welcome additions/corrections/feedback.

If you're a keeper of lists yourself, I'd ask that you please do not just copy/paste this page and its categories to your own site. Of course, the information I link to is public info. I'm referring to the organization of it. I certainly welcome people pointing others to this list, including deep-linking to a specific category. I may ultimately also create an RSS feed to track new entries on the whole list or in certain categories.

Disclaimer: Finally, for the lawyers and suit-happy, note that the information, including but not limited to hyperlinks, product names shown, descriptions offered, categorization, and characterizarion, is provided for educational purposes only. There is no warrantee of the truth or accuracy of the information above, nor of its fitness for a particular purpose. Because information about companies, product names, links, and so on can change over time, and I cannot guarantee to keep it updated, it is the reader's responsibility to confirm the accuracy and validity of any information presented here.

Managed Hosting Services provided by
Managed Dedicated Hosting