Landing Page Builders
25 martech vendors in Landing Page Builders, part of Web & Digital Experience. Each record carries the date we last verified it, so you can see how current it is before you rely on it.
Last verified:
Procurement-readiness profiles — SOC 2, ISO 27001, GDPR and DPA posture, data residency, AI-training policies — are available when you sign in.
Landing page builder software publishes single, standalone campaign pages quickly, without touching the main website's codebase or content structure. Performance marketing teams use it to launch and iterate fast; IT security still needs it audited because these pages usually collect lead-form data and often sit on a shared or custom domain outside the main site's controls.
Who it is for
- Performance marketing and campaign teams shortlisting a platform to launch standalone pages without a web-team dependency.
- IT security reviewers assessing how a page published outside the main website's own security controls is hosted and secured.
- Legal and data governance teams confirming lead-capture forms on these pages handle consent the same way the main site does.
What your No-Committee will ask
- IT security
- Is the published page served over enforced TLS regardless of which domain it's hosted under, and is publishing access protected by MFA? TLS enforcement and MFA support are each recorded as an evidenced claim, marked verified, self-attested, or not found.
- Data governance
- Where does lead-form submission data captured on these pages end up, and is a Data Processing Agreement on offer for it? We confirm both against the vendor's own legal pages, not a feature list.
- AI governance
- If the platform generates page copy or layout suggestions with AI, is that disclosed to the marketer using it? AI-feature disclosure is recorded as its own evidenced claim wherever the feature is visible in the editor.
- Legal / compliance
- Does the platform support consent-based cookie handling out of the box on pages published under a custom domain? Consent-tooling claims are recorded with a source link, separate from the main site's own consent setup.
- Risk / finance
- A campaign sending paid traffic to a down page burns budget in real time, so is there a published uptime SLA and a status page for outage history? We note both wherever the vendor actually publishes them.
How we verify
Every claim above comes from the vendor's own public pages — trust center, privacy policy, or security page — never inferred from a template gallery. Exactly what verified, self-attested, and not-found each mean in practice is documented on our methodology page.
Frequently asked questions
How are landing page builders different from a full CMS?
A landing page builder is scoped to single, standalone campaign pages, published fast without touching the main site's structure or navigation. A full CMS manages an entire website's content, page hierarchy, and long-term structure, usually with more developer involvement. Many marketing teams run both, using the builder for short-lived campaign work.
Do landing page builder vendors typically publish SOC 2 or ISO 27001 certification?
Platforms serving larger marketing organizations running high lead-form volume more often publish a SOC 2 report, sometimes behind a trust center. Smaller, self-serve builders more often rely on a general security page without third-party certification, which our audits mark as self-attested rather than verified.
Is pricing usually based on the number of published pages or on monthly visits?
Vendors are split roughly evenly on this. Some price by the number of live published pages regardless of traffic; others scale with monthly unique visitors once a free-tier threshold is crossed. Custom domains or advanced integrations are more often gated to a quote-only enterprise tier, which we note rather than estimate.
What should I check beyond the template library before shortlisting a platform?
Confirm that TLS is enforced consistently on a custom domain, not just the vendor's default subdomain, where lead-form data lands once submitted, and whether the vendor publishes a status page. A campaign page under a custom domain is easy to overlook in a broader security review, which makes it worth checking directly.