TYPO3 GmbH offers an alternative to a TYPO3 update. Here, you can obtain newer, updated versions of TYPO3—known as ELTS versions (Extended Long-Term Support)—even after official support has ended. Currently (as of May 2026), versions 10 (still), 11, and 12 are available there. Updates are provided for each version for 7 years, including the free versions on typo3.org. So, essentially, just 4 additional years.
For the TYPO3 12 license that expires in April 2026, TYPO3 GmbH is asking for a whopping €3,200 for a website. In return, you would receive (security) updates through April 2030. Versions 10 and 11 cost €2,800 each and are valid until April 2027 (version 10) and October 2028 (version 11).
This allows you to postpone a TYPO3 update for quite some time, but it can end up being quite expensive. Furthermore, this only applies to the TYPO3 core. Extensions are excluded; in some cases, the costs for updating them may be added on top, assuming the extension developer even offers updates for them.
TYPO3 extensions can also make a TYPO3 system vulnerable, and sometimes this is precisely the case. Most developers may adhere to the development guidelines specified by the TYPO3 Association. But can you vouch for every extension in your system? None of my customers actually look at the code.