Build vs Buy: How CFD Brokers Choose a Trading Platform Stack
The build-versus-buy decision for a CFD broker's trading platform is not settled by engineering at all: it is settled by scale, by where the broker's differentiation lives, and by regulation — and the market's answer, on the available evidence, is that almost everyone buys while a few large listed brands build. MetaQuotes claims "hundreds of brokers and banks" serve "millions of traders" on MetaTrader 5 (MT5 for brokers) — a vendor claim, because no platform vendor publishes audited adoption figures — and the one nine-figure build number in public belongs to CMC Markets, which says it has invested over £100m in its proprietary platform (CMC Markets). In between sits a market where Match-Trade is the only vendor among the four compared here that publishes list prices, at $2,500–$5,000 per month (Match-Trader pricing), MetaQuotes quotes privately and insists on self-hosting (MT5 purchase page), and a regulatory floor — national leverage caps in force since 2019–2020 (ESMA product intervention) and DORA's third-party regime, applied since 17 January 2025 (ESMA DORA) — decides the borderline cases.
The build-versus-buy decision for a CFD broker’s trading platform is not settled by engineering at all: it is settled by scale, by where the broker’s differentiation lives, and by regulation — and the market’s answer, on the available evidence, is that almost everyone buys while a few large listed brands build. MetaQuotes claims “hundreds of brokers and banks” serve “millions of traders” on MetaTrader 5 (MT5 for brokers) — a vendor claim, because no platform vendor publishes audited adoption figures — and the one nine-figure build number in public belongs to CMC Markets, which says it has invested over £100m in its proprietary platform (CMC Markets). In between sits a market where Match-Trade is the only vendor among the four compared here that publishes list prices, at $2,500–$5,000 per month (Match-Trader pricing), MetaQuotes quotes privately and insists on self-hosting (MT5 purchase page), and a regulatory floor — national leverage caps in force since 2019–2020 (ESMA product intervention) and DORA’s third-party regime, applied since 17 January 2025 (ESMA DORA) — decides the borderline cases.
A platform licence moves the servers onto the vendor’s balance sheet, but it moves none of the regulatory liability — and that is where most build-versus-buy maths goes wrong.
The four routes, and who actually takes them
There is no binary. The realistic routes are four, so the first step is to stop calling it a two-way choice. Build in-house means owning the matching engine, the front end and the back office. Self-hosted licence means MetaTrader 5’s model: the broker buys a software licence and deploys it on its own hardware, because MetaQuotes does not offer SaaS or any arrangement permitting third-party management of the servers (MT5 purchase page). Cloud white label means renting the platform as a service under the broker’s brand: cTrader, which Spotware runs as platform-as-a-service from Equinix London and New York data centres (cTrader for brokers), Match-Trader with its published plans (Match-Trader pricing), or DXtrade, which Devexperts markets as ready for white-labelling (Devexperts). Hybrid is the route almost everyone actually ends up on: a licensed core with a bought-in front end — TradingView’s brokerage integration, which the company says already serves 100-plus broker partners (TradingView) — or a proprietary front end over a licensed execution layer.
| Dimension | Build in-house | Self-hosted licence (MT5) | Cloud white label (cTrader, Match-Trader, DXtrade) |
|---|---|---|---|
| Pricing disclosure | Not published | Not published; quoted per deal, tiers of 1,000 / 25,000 / 200,000 real accounts (MetaQuotes) | Published only by Match-Trader: $2,500 / $4,000 / $5,000 per month (Match-Trader) |
| Who runs the servers | Broker | Broker (vendor requires self-hosting) | Vendor cloud, except an on-premise option on Match-Trader’s server tier |
| Who carries the engineering risk | Broker entirely | Broker operates; vendor controls the software | Vendor operates; broker contracts for it |
| Vendor dependency | None on a platform vendor | Single vendor (MetaQuotes) | Single vendor (Spotware, Match-Trade, Devexperts) |
| Regulatory features | Broker builds and proves them | Vendor’s platform, broker’s responsibility | Vendor ships them; broker still answers for them |
| Switching cost | Highest (all assets owned) | Migration of accounts, history, integrations | Data portability and exit terms in the contract |
The pattern that matters: the more the platform is a vendor’s product, the less the broker controls features, roadmap and compliance depth.
The economics: what the price lists actually show
Only one rival platform publishes a price. Match-Trader lists White Label Basic at $2,500/month, Turnkey at $4,000/month and a full server licence at $5,000/month, says pricing is per account with no b-book turnover fees, and includes default cloud hosting (Match-Trader pricing). MetaQuotes publishes no price at all: prospective buyers request access and are quoted individually, with licences sized by real-account capacity — Entry at 1,000 accounts, Standard at 25,000, Enterprise at 200,000 (MT5 purchase page). Spotware also quotes privately, and its “most effective TCO on the market” and “no time-and-material charges” claims are vendor statements, not audited comparisons (cTrader for brokers). Devexperts sells both the white-label DXtrade and bespoke development — it sits on both sides of the line (Devexperts).
What no vendor publishes is total cost of ownership, and that is the number that decides. An MT5 deployment is upfront capital — licence, hardware or cloud, colocation, and the staff to run and patch a self-hosted environment that MetaQuotes says the broker controls itself (MT5 purchase page). A subscription converts that into opex but does not remove it: the platform is still one row of the stack. The broker still buys liquidity bridging and aggregation — Centroid, for example, claims integration to more than 250 liquidity providers and 11 trading platforms (FinanceFeeds, October 2024) — plus CRM, payments, reporting and the engineering to join them. MetaQuotes’ claim that MT5 is a “full-cycle platform” needing no additional software (MT5 for brokers) is the single most heavily discounted sentence in the market: even its own broker page describes the APIs for integrating the platform “with your website, trading and post-trading systems.” The licence sticker is a minority of the three-year cost.
Because the numbers are private, so is the comparison. The verifiable shape of it runs from a $2,500–$5,000/month published subscription to an unpriced, self-hosted licence to a build whose only public number is CMC’s self-reported over-£100m figure (CMC Markets).
When brokers build — and what they still buy
The build case is lived by a small set of large retail brands; CMC is instructive because it is both sides at once — over £100m in its proprietary platform, and MetaTrader 4, MetaTrader 5 and TradingView offered alongside it (CMC Markets). Even builders buy components: a licensed front end is how a proprietary book acquires traders who will not migrate.
What a build actually buys is product-design velocity — the ability to ship a feature the licensed roadmaps do not have. The launch of the first overnight Japan single-stock CFDs with knock-out barriers is the current test case: barrier-event detection on a market with no prints, close-out rules, corporate-action adjustments and negative-balance exposure are platform capabilities, not marketing copy, and a broker whose platform cannot express them cannot price the product at all (Overnight Japan Equity CFDs With Knock-Outs Are Here). For a mid-size broker the realistic path is asking the platform provider to demonstrate it — a buy-side negotiation, not a build decision.
The counterweight is that building does not remove third-party dependency; it relocates it. On 19 July 2024 a flawed CrowdStrike update crashed Windows machines globally and took down Forex.com, Plus500, CMC Markets, IC Markets, LMAX and City Index, plus LSEG’s Workspace and Bank of England payment systems (FinanceFeeds, 19 July 2024) — proprietary-platform houses and licensed ones alike. The buy side has its own version: MetaQuotes’ 2024 policy shift pulled MetaTrader out of prop-trading deployments and stopped new white labels, pushing firms to alternatives such as Tools for Brokers’ “Main Label” packages and a cTrader white label (FinanceFeeds, 23 October 2024). A vendor that has changed the terms of a live product once can do it again; multi-platform is now a resilience strategy.
Regulation decides the borderline cases
The decisive input is the regulatory features the platform must enforce, because the broker answers for them regardless of who wrote the code. ESMA’s CFD intervention took effect on 1 August 2018, was renewed in three-month blocks, then replaced by permanent national measures adopted between March 2019 and April 2020 (ESMA product intervention); enforcement continues, and it lands on platform behaviour — leverage tiers, margin close-out, negative balance protection. On 19 July 2024 CySEC announced a €200,000 fine on IC Markets (EU) Ltd, decided 1 July 2024, for breaching Article 42 of MiFIR and CySEC directive DI87-09 by offering up to 1:1000 leverage through an offshore affiliate to get around the retail 1:30 cap — a repeat of a 2021 violation, CySEC said; IC Markets said it would appeal (FinanceFeeds, 19 July 2024). A platform’s leverage configuration is a supervisory finding waiting to happen, and the fine lands on the broker, not the vendor.
The third-party regime then turns the licence itself into a supervised relationship. DORA has applied since 17 January 2025 to EU financial entities, including the MiFID investment firms under which retail CFD brokers are licensed, with an ICT third-party risk duty and oversight of critical providers (ESMA DORA). A trading-platform vendor is an ICT third party, sitting inside the register of third-party arrangements; procurement must now include resilience evidence, audit and access rights, and exit and data-portability terms, because the same concentration risk runs through the whole stack — platform, bridge, CRM, payments (Cybersecurity Priorities for Forex and CFD Brokers in 2026). The question is not licensed versus bespoke; it is whether the vendor’s compliance depth can be evidenced in the file a supervisor will open.
The rule that survives all four routes: cost the three-year stack, not the sticker; price regulatory features as a liability line; assume the vendor’s roadmap will change before the contract does. Re-run it whenever a product idea hits a platform limitation: “the platform cannot do that” is a product decision in disguise, and brokers that treat it as an IT decision get passed on the next product cycle.
The Broker Desk is sponsored by SecureNodeFX. Sponsorship does not guarantee a recommendation or favorable placement, and every comparison uses the same published criteria and identifies competing products so readers can verify the conclusions themselves. Nothing on this site is financial, investment or trading advice: forex and CFD trading carries a high level of risk and may not be suitable for everyone, you can lose more than your deposit, and you should do your own research and consult a licensed advisor before acting on anything you read here.