← Back to home
Comparison · Mkt Auto

Pimcore vs Simon Data

A side-by-side editorial comparison of Pimcore and Simon Data — release velocity, themes, recent moves, and the top alternatives to consider.

Pimcore vs Simon Data: at a glance

FeaturePimcoreSimon Data
SectorMkt AutoMkt Auto
Velocity score5.02.5
Sparks · 30d00
Top themessecurity-advisories, input-validation, dual-branch-maintenance, php-cmscdp, marketing-activation, integrations, attribution
Last editorial update1h ago3mo ago
WebsiteVisit →Visit →

What is Pimcore?

A security-hardening train: nine advisories across six patch releases, no feature work in sight.

Pimcore is servicing two lines in parallel — the 2026.2.x series and the older 12.3.x branch — and nearly every release carries at least one GHSA advisory. The recent run has closed unserialize abuse in ImageGallery hotspots, a Classificationstore field-name validation bypass, a Twig sandbox escape via pimcore_file_exists, and a blind SSRF through email test-send CSS fetching. The remainder is bug fixes and internal type corrections.

Read the full Pimcore trajectory →

What is Simon Data?

Simon Data is shipping integration after integration — Movable Ink Da Vinci, Rokt, Criteo semantic matching, Amazon Ads.

Simon Data's recent cadence is dominated by activation-channel reach. April 2026 added Movable Ink Da Vinci (AI-driven email orchestration via SFTP) and Rokt (e-commerce engagement audiences). Q1 2026 brought Criteo semantic email matching, custom base URL support for self-hosted MessageFlow and ExpertSender deployments, a 14-day send-or-click attribution window, credentials search, and a Redlink → MessageFlow rename. Earlier shipping included Oracle Hospitality as a data source, Privacy Request Expirations with configurable TTL, and Braze user-alias fallback.

Read the full Simon Data trajectory →

Pimcore vs Simon Data: editorial side-by-side

P
Pimcore
MKT AUTO
5.0

A security-hardening train: nine advisories across six patch releases, no feature work in sight.

◆ Current state

Pimcore is servicing two lines in parallel — the 2026.2.x series and the older 12.3.x branch — and nearly every release carries at least one GHSA advisory. The recent run has closed unserialize abuse in ImageGallery hotspots, a Classificationstore field-name validation bypass, a Twig sandbox escape via pimcore_file_exists, and a blind SSRF through email test-send CSS fetching. The remainder is bug fixes and internal type corrections.

◆ Where it's heading

The pattern is systematic input-validation retrofitting rather than isolated CVE response: column allowlists on Redirect listings, escaped FieldCollection names in JOIN conditions, rejected filter properties in the notification parser, CSV exports bound to the requesting user. That is a codebase being swept for a class of injection and deserialization flaws, not patched one report at a time. Feature work has effectively paused while this runs.

◆ Prediction

Expect the 2026.2.x cadence to keep pairing bug batches with security advisories until the sweep exhausts itself. The 12.3.x line looks like it will receive backport-only releases.

Simon Data logo
Simon Data
MKT AUTO
2.5

Simon Data is shipping integration after integration — Movable Ink Da Vinci, Rokt, Criteo semantic matching, Amazon Ads.

◆ Current state

Simon Data's recent cadence is dominated by activation-channel reach. April 2026 added Movable Ink Da Vinci (AI-driven email orchestration via SFTP) and Rokt (e-commerce engagement audiences). Q1 2026 brought Criteo semantic email matching, custom base URL support for self-hosted MessageFlow and ExpertSender deployments, a 14-day send-or-click attribution window, credentials search, and a Redlink → MessageFlow rename. Earlier shipping included Oracle Hospitality as a data source, Privacy Request Expirations with configurable TTL, and Braze user-alias fallback.

◆ Where it's heading

Simon Data is positioning itself as the CDP that plays nicely with the broadest set of activation channels — including AI-driven ones like Movable Ink Da Vinci. The integration roadmap is working harder than the core product on the value story; that's defensible for a CDP, where each connector represents real revenue, but it suggests the platform itself is in maintenance mode while the integrations team carries the cadence.

◆ Prediction

Expect more AI-activation integrations (other generative-email vendors, retail-media platforms beyond Amazon and Rokt), continued attribution-window flexibility, and possibly a Simon-side AI feature that uses the customer-data graph to suggest segments — that would be the directional break from pure integration cadence.

Alternatives to Pimcore and Simon Data

Other Mkt Auto products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Pimcore or Simon Data.

See all Pimcore alternatives → · See all Simon Data alternatives →

Recent activity from Pimcore and Simon Data

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 16h agoPimcoreThree security advisories close unserialize, Classificationstore, and Twig sandbox holes
  2. 4d agoPimcore12.3 branch patch: object deserialization and Carbon assertion fixes
  3. 4d agoPimcoreBug batch: inheritance precedence, cache sessions, workflow checkboxes
  4. 6d agoPimcoreBlind SSRF in email test-send closed; language permissions enforced on grids
  5. 14d agoPimcoreCustom Report locked to a field allowlist; raw DB errors no longer leak
  6. 21d agoPimcoreQuery allowlists, JOIN escaping, and export ownership tighten the data layer
  7. 3mo agoSimon DataApril 2026: Movable Ink Da Vinci and Rokt integrations
  8. 3mo agoSimon DataQ1 2026: Integration Updates, Reporting, and Search Improvements
  9. 9mo agoSimon DataOctober 2025: New Oracle Hospitality Integration, Journeys Pausing
  10. 10mo agoSimon DataPrivacy Request Expirations (duplicate)
  11. 10mo agoSimon DataPrivacy Request Expirations: configurable TTL for denylist re-entry
  12. 11mo agoSimon DataAugust 2025: Support for user aliases within Braze integration

Frequently asked questions

What is the difference between Pimcore and Simon Data?

They serve adjacent needs but don't currently overlap on shipped themes. Pimcore is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Pimcore better than Simon Data?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Pimcore is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Mkt Auto products to evaluate alongside.

What are the best alternatives to Pimcore?

Top Pimcore alternatives in Mkt Auto are ranked by recent ship velocity. Browse the "Pimcore alternatives" section above for the current picks, or visit /alternatives/pimcore for the full list with editorial commentary on each.

What are the best alternatives to Simon Data?

Top Simon Data alternatives in Mkt Auto are ranked by recent ship velocity. Browse the "Simon Data alternatives" section above for the current picks, or visit /alternatives/simon-data for the full list with editorial commentary on each.