With 37,000 GitHub stars and over 45 million downloads powering 500,000+ deployed projects, Directus is the most widely adopted open-source backend platform that connects to your existing SQL database without requiring schema migrations or data duplication. Point it at PostgreSQL, MySQL, MariaDB, MS SQL, SQLite, OracleDB, or CockroachDB and it instantly generates production-ready REST and GraphQL APIs complete with filtering, sorting, pagination, field selection, and relational queries — all derived from your actual schema with zero configuration. The visual Studio provides a full no-code management interface where non-technical teammates create content, manage assets, build dashboards, and configure access policies without engineering involvement. Field-level granular permissions govern every API request and Studio action through composable policies applied to roles, users, and AI agents identically. A built-in AI Assistant writes copy, translates content across languages, creates records, and routes items for review directly within the Studio interface. The native Model Context Protocol server connects Claude Desktop, Cursor, ChatGPT, or any MCP-compatible tool to your live data governed by the same access policies. Real-time WebSocket subscriptions push collection changes instantly for collaborative editing and live dashboards. Extensibility covers custom endpoints, hooks, interfaces, displays, layouts, modules, and operations. Deploy via Docker with environment-variable configuration or use Directus Cloud for managed hosting. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL-1.1 licensed with free self-hosting.

The leading open-source headless CMS with over 72,800 GitHub stars and more than 20 million npm downloads, Strapi has powered content APIs for thousands of organizations since its creation in 2015, providing a complete backend for websites, mobile applications, IoT devices, and any frontend framework through auto-generated REST and GraphQL endpoints. The visual Content-Type Builder lets editors define collections, single types, components, dynamic zones, and relations without code, while Strapi AI introduced in 2026 generates complete content schemas from natural language descriptions, Figma file uploads, or existing JavaScript application code analysis. Version 5 rewrote the platform with a TypeScript-first architecture, replacing the Entity Service with the Document Service API, switching admin panel builds from Webpack to Vite, and integrating internationalization directly into core with unlimited locale support. Database flexibility spans PostgreSQL, MySQL, MariaDB, and SQLite with automatic migration handling. The media library manages uploads to local storage, Amazon S3, or Cloudinary with image optimization and responsive formats. Granular role-based access control defines permissions per content type, field, and locale. The plugin marketplace extends functionality with GraphQL, SEO, email, custom fields, and community contributions, while lifecycle hooks, custom controllers, and middleware enable arbitrary backend logic. Draft and publish workflows, webhooks for external system integration, API token authentication, data import and export, and CRON job scheduling round out a platform that handles content operations from prototype to production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Keystone turns TypeScript schema definitions into a complete GraphQL API and React Admin UI automatically, eliminating the gap between data modeling and application scaffolding. Nearly 10,000 GitHub stars and over 270 contributors across a decade of development back a framework where list definitions map directly to Prisma models on PostgreSQL or SQLite, generating database migrations and exposing every field relationship through Apollo Server's GraphQL endpoint. Granular access control operates at the list, field, and operation level with filter-based restrictions that limit which records users can see, create, update, or delete based on session data and custom logic. The document field provides a structured WYSIWYG editor with content blocks, inline relationships, and custom React components that render consistently across the Admin UI and frontend applications. Event hooks fire before and after create, update, and delete operations for validation, side effects, and external service integration. Custom GraphQL queries and mutations extend the API beyond auto-generated CRUD for bespoke business logic. The Admin UI built with Next.js and the Keystar UI component library supports custom pages, branded navigation, and internationalized interfaces. OpenTelemetry tracing provides observability into operations, queries, and hook execution. Deploys via Docker or any Node.js host with Prisma managing schema evolution. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Marble gives your blog, changelog, or product updates a calm editorial home, then hands clean JSON to whatever website you already built. Writers work in a focused rich-text editor with headings, lists, code blocks, images, video, and embeds, while a readability score quietly grades each draft as it grows. Every post carries authors, one category, tags, a cover image, and typed custom fields, so a changelog entry and a long guide can share one predictable structure. Your frontend pulls sanitized HTML or Markdown through the REST API or typed SDK, filtering by category, tag, or search in a single request. Read-only public keys serve published posts safely, while scoped private keys unlock drafts and write access for the tools you trust. Uploads of images, video, audio, and documents land in a media library with alt text and dimensions, ready to embed anywhere. Signed webhooks announce every change to your site, Slack, or Discord with retries and a delivery log, and an MCP server lets AI agents search and draft content too. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Backed by 44,000 GitHub stars and now part of Figma, Payload is the first headless CMS that installs natively into your Next.js application's /app directory rather than running as a separate service. The code-first architecture uses TypeScript config files to define collections, globals, and field schemas — from which Payload auto-generates database tables with migrations, a fully customizable React admin panel, REST and GraphQL endpoints, and type-safe Node.js local APIs you can call directly in React Server Components. The Lexical-based rich text editor supports block-based layout building, inline media embeds, and nested field structures, while the built-in localization engine handles unlimited locales with field-level translations. Authentication ships out of the box with HTTP-only cookie sessions, CSRF protection, role-based access control definable at the document, field, and operation level, and support for OAuth providers. Version history tracks every document change with full draft and publish workflows, and Live Preview renders content edits in real-time using server components. The job queue system manages background tasks and multi-step workflows deployable via Vercel Cron or standalone workers. Database flexibility spans PostgreSQL, MongoDB, and SQLite through swappable adapters, and the plugin ecosystem includes official modules for SEO, form builders, redirects, nested documents, and search alongside hundreds of community extensions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Spica skips the month of backend plumbing every new project starts with: data models, CRUD endpoints, logins, file storage, and an admin panel nobody wants to build. It hands you that whole layer as a running platform, so your first day is spent modeling your actual product. Define your data in Buckets and the REST API, with a GraphQL API alongside it, is generated automatically, complete with rules on each bucket as an entry-level security layer. Add custom policies so each user role reaches exactly the data and technical areas it should, then place your business logic in cloud functions triggered by events. Content teams get a back-office they can actually use: customized bucket views with a few clicks, inline image editing, data history, and localization for editors working in more than one language. Identities cover your users and editors, storage serves your files, and webhooks push events out to tools like Slack or Zapier when something changes. Run it as a backend engine for an application you are building, or purely as a headless CMS feeding a frontend that lives somewhere else. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Content types, media libraries, workflows, roles, search, and a GraphQL API all ship in the box with Orchard Core, a free CMS and application framework that hosts many separate websites from one install. Editors build content types in the admin by combining parts and fields, with no migrations to write, and preview an item live before publishing it. Designers adjust page HTML safely with Liquid templates, and developers add their own modules. Multi-tenancy runs many isolated sites from one deployment, each with its own content, users, settings, and theme, and a setup screen lets you pick a recipe and database for each site. Media uploads can be resized on the fly and stored on remote providers, and a visual workflow editor automates content approvals, webhooks, and form submissions. A typed GraphQL API feeds headless sites and single-page applications, and custom SQL or Lucene queries can be exposed as endpoints. Roles and fine-grained permissions decide who can do what, OpenID Connect handles external sign-in, and two-factor authentication protects accounts. Content and the admin interface can be localized, and deployment plans move content and configuration from staging to production. SQLite works out of the box, SQL Server, MySQL, MariaDB, or PostgreSQL can be chosen at setup, and the official Docker image starts a site with one command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

If editors should publish without waiting on developers, and developers should keep full control of the design, Umbraco is the free content management system built around that split. A page begins in the Block Grid editor, where reusable blocks nest inside Areas and each block is sized on a column and row grid. Live preview shows the result before anything goes out. Publish and unpublish times can be scheduled in the editor's own time zone, and any page can roll back to an earlier version from its Info tab. One content node can exist in several languages, and split view puts two of them side by side. The Media section holds images, video, and other files. Visitors can register and log in as members, new members can be placed in member groups, and pages can be hidden from anyone not logged in. On the code side, templates and partial views shape the front end, while the opt-in Content Delivery API returns content items as JSON for mobile apps and any other front end. Webhooks notify outside services when content is published, unpublished, or deleted. Custom dashboards and property editors extend the backoffice, and the Marketplace lists open-source and commercial packages for the rest. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Backed by over 20,000 GitHub stars, 800 contributors, and organizations like Google, NASA, and the NHS, Wagtail is the Django-powered content management system that gives editors creative freedom through StreamField while keeping developers in full control of data structure and front-end rendering. StreamField lets editors compose pages from a custom library of content blocks — rich text, images, embedded videos, tables, code snippets, and developer-defined custom types — without compromising the underlying data model or breaking responsive layouts. The built-in JSON API supports headless deployments with versioned endpoints for pages, images, and documents, enabling decoupled front-ends in Next.js, Nuxt.js, or any framework that consumes REST. Editorial workflows provide configurable approval chains where content moves through draft, review, and publish states with commenting, task assignment, and email notifications built into the admin interface. Integrated search connects to Elasticsearch for full-text indexing with faceted filtering, or falls back to PostgreSQL and SQLite backends with fuzzy matching support added in v7.4. Multi-site management serves multiple domains from a single Wagtail installation with independent page trees, while the internationalization framework handles content translation with locale-aware URL routing. Image management includes focal point detection, responsive renditions, and automatic format conversion. The platform supports Django 5.2 and 6.0 with Python 3.10 through 3.14 and PostgreSQL, MySQL, MariaDB, or SQLite databases. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Click the pencil on a live page, change a headline or drop in an image, and publish: that is django CMS, an open-source content management system built around editing in place. A structure board lists every plugin on a page as a draggable tree, so layouts get rearranged without touching code. Plugins cover rich text with tables and links, pictures from a media library with sizing, margin, and visibility settings, and nested containers, and rules limit where each plugin may appear. With versioning enabled, every edit is a draft that can be previewed, compared visually or in source against an earlier version, discarded, or published, and publishing can be reserved for editors. Each page carries a translation per language with its own title and slug, and a language menu adds translations or copies plugins from another language. The page tree manages navigation as a hierarchy with drag-and-drop ordering, per-language status dots, and a menu toggle per page. Page permissions can let a legal team edit one branch of the tree and nothing else, and one settings file can serve several domains by hostname. Apphooks mount whole applications, such as a news section, on a page that editors place in the tree, and reusable aliases keep footers and banners in one place. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Define your tables once, and Daptin runs the backend around them: every schema becomes a permission-aware JSON:API resource with CRUD, relationships, filtering, and pagination, plus an optional GraphQL surface over the same model. Users, groups, and row-level permissions gate who can read or change each record, with JWT login, one-time codes, and OAuth and OIDC endpoints for sign-in. Files ride along as asset columns backed by local or cloud storage through rclone, with presigned uploads and storage sync. Actions chain validation, conditions, and ordered outcomes into reusable operations, scheduled tasks run them on a cron clock as a chosen user, and state machines track each record's lifecycle with an audit trail. Changes stream out live over WebSockets and feeds, while FTP, calendar and contacts routes, and an OpenAI-compatible LLM gateway expose the same model to other tools. Plans, quotas, and metering let you charge for API and model usage from the same server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. LGPL-3.0 licensed.

For developers who want a complete visual backend without stitching together separate database, auth, and storage services, Bknd delivers an all-in-one self-hosted Backend-as-a-Service platform with a built-in administrative dashboard. Data schemas evolve visually. Authentication strategies plug in cleanly. Media uploads route straight to object storage. Inside the interactive Admin UI, you can create relational entities, define field validation rules, inspect records, and test generated REST and OpenAPI endpoints on the fly. User management comes ready out of the box with configurable password and OAuth authentication flows, role-based access permissions, and row-level security policies for multi-tenant SaaS products. A unified media manager connects local filesystems, S3 buckets, Cloudflare R2, MinIO, or Cloudinary so applications can handle user avatars, document attachments, and galleries without custom upload pipelines. Visual workflow automation lets you chain triggers, HTTP tasks, and data mutations into repeatable backend flows, while an integrated Model Context Protocol server allows AI agents to query and manage application state directly. You can operate entirely through the visual dashboard, lock down production schemas in code-only or hybrid modes, and connect frontend interfaces using pre-configured login and upload elements. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Editors can update a static website without learning Git, because Pages CMS puts a visual editor on top of the repository itself. A single .pages.yml file defines what is editable: collections of Markdown files that share a schema, standalone files such as site settings, and nested groups that organize the sidebar. Fields cover strings, rich text, code, dates, numbers, booleans, selects, images, files, references, objects, and repeatable blocks, with front matter stored as YAML, JSON, or TOML. Plain text files like robots.txt open in a raw editor, redirect files in a code editor, and CSV files as an editable datagrid. Collection lists can be searched, sorted, and shown flat or as a folder tree. The media manager supports drag-and-drop uploads, multi-file selection, allowed extensions, and safe or random renaming. People without GitHub accounts join through email invitations and edit content and media, with their saves committed through the GitHub App. Custom action buttons dispatch GitHub Actions workflows after a confirmation dialog or input form, so one click can rebuild a preview or deploy the site. Commit message templates and a choice of app or user commit identity shape how each save appears in Git history. The responsive interface works on mobile screens, and suits Jekyll, Hugo, Astro, Next.js, Eleventy, VuePress, and similar site generators. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Halo is a modern CMS that handles blogs, knowledge bases, corporate sites, and full e-commerce storefronts from a single installation, distinguished by a polyglot plugin architecture that runs both Java and JavaScript extensions on a GraalVM runtime. Built on Spring Boot 3 with a Vue.js admin console, the platform delivers a clean content management experience with Markdown and rich-text editing, live preview, scheduled publishing, draft management, media uploads, and granular multi-user role-based access controls. Plugins can be enabled or disabled at runtime without restarting the server, and the official marketplace offers over 100 free themes plus a growing library of extensions covering SEO optimization, search integration, paid content access, AI writing assistance, and Q&A chatbots. Storage backends are configurable through plugins, supporting local disk, S3-compatible object storage, and other providers. The fully documented RESTful API enables headless CMS usage for decoupled frontend architectures. Database support includes embedded H2 for quick starts, with production deployments on PostgreSQL or MySQL. Nearly 40,000 GitHub stars and over 2.5 million Docker pulls reflect the project's maturity and active development pace. A single Docker command gets a functional instance running on port 8090. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Roughly 43% of all websites and over 60% of the CMS market run on WordPress - the GPL-licensed platform that scales from a personal blog to publishing operations and WooCommerce stores. The Gutenberg block editor composes pages from reusable blocks, and full site editing extends block control to headers, footers, and templates; tens of thousands of plugins and themes cover essentially every capability a site might need, from SEO and caching to membership and e-commerce. WordPress 7.0 "Armstrong" marks the platform's biggest structural update since Gutenberg itself: a React-based DataViews admin replaces the legacy list tables with instant filtering, a provider-agnostic AI Client API ships with connectors for OpenAI, Anthropic, and Google, media processing moves into the browser via WebAssembly, and a universal Font Library manages typography across block, hybrid, and classic themes with local hosting for GDPR compliance. New Breadcrumbs, Icons, and lightbox Gallery blocks reduce plugin dependence, and server-side PHP block registration simplifies development. The REST API and WP-CLI make it automatable end to end. Self-hosting is what WordPress was designed for: your content, database, plugin choices, and upgrade schedule stay entirely under your control, free of wordpress.com plan limits.

Vvveb, an open-source CMS with a drag-and-drop page builder and a built-in store, runs a blog, a portfolio, and a webshop from one dashboard, with every page edited visually on a true WYSIWYG canvas. Reusable blocks, page revisions, a code editor, and an optional AI assistant plugin sit alongside media management, custom fields, custom posts, and custom products that shape content well beyond plain pages. The store handles one-page checkout, subscriptions, digital downloads, vouchers, coupons, product options, attributes, variants, reviews, and Q&A across multiple payment methods and currencies. Content can be published in several languages, the admin interface switches with language packs, many sites or subdomains share one installation, and action-level permissions are assigned to each user role. A bundled SEO plugin generates sitemaps, robots.txt, Open Graph tags, hreflang links, and schema markup, and hybrid headless mode serves the same content to any frontend through GraphQL and REST endpoints. A randomized admin login URL, two-factor authentication, brute-force defenses, and a built-in integrity check guard the dashboard, and manual or automatic backups plus import and export tools cover recovery and migration. Any HTML template converts into a theme in minutes, a demo importer loads sample content for a fast start, and plugins and themes install with one click from the admin dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 35,000 GitHub stars and 460 contributors, Medusa is the headless commerce framework that gives development teams full ownership of their e-commerce backend without license fees, per-transaction charges, or revenue sharing. The modular architecture ships over 18 domain modules covering products, collections, categories, inventory, pricing, carts, orders, payments, fulfillment, promotions, customers, users, API keys, and stock locations, each independently usable and replaceable. REST and GraphQL APIs expose every commerce operation to any frontend framework — official starters exist for Next.js with community options for Nuxt, Remix, and Gatsby. The React-based admin dashboard provides out-of-the-box order management, product maintenance, promotions configuration, B2B accounts, and multi-warehouse inventory, extensible via the Admin SDK for custom views and workflows. The workflow engine orchestrates long-running commerce processes like checkout, fulfillment, and returns with compensating transactions for reliability. Over 200 official and community plugins integrate Stripe, PayPal, Klarna, Algolia, Meilisearch, SendGrid, Mailchimp, Contentful, Sanity, and Klaviyo. Native multi-region and multi-currency support handles tax-inclusive pricing, region-specific payment and fulfillment providers, and localized storefronts from a single backend. Enterprises including Viessmann, Makro PRO, and INSPIRED Pet Nutrition run Medusa in production. Self-hosting deploys via Docker or directly on Node.js with PostgreSQL and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Vendure is a headless ecommerce framework where TypeScript plugins extend every aspect of commerce without forking the core, backed by 8,200+ GitHub stars and powering stores processing over 10,000 daily transactions. Two distinct GraphQL APIs serve different audiences: the Shop API powers storefronts while the Admin API handles back-office operations, both introspectable and type-safe through Apollo Server. NestJS modules with Vendure decorators inject services, modify schemas, subscribe to events, and add dashboard components, making extensibility a first-class concern rather than an afterthought. The React admin dashboard built with TailwindCSS and Shadcn UI provides order fulfillment workflows, catalog management, tiered pricing, dynamic promotion rules with side-effect hooks for free gift injection, and role-based access control across 14+ languages. Multi-channel support runs D2C, B2B, marketplace, and omnichannel from a single instance with channel-specific products, pricing, currencies, sellers, and permissions. Asset management handles images, videos, and documents with pluggable backends including AWS S3 and Minio, plus built-in image transformation via the AssetServerPlugin. Custom fields propagate automatically into GraphQL schemas and admin forms on every core entity. A dedicated worker process handles search indexing, email dispatch, and integration jobs with independent horizontal scaling. Deploys on PostgreSQL, MySQL, or MariaDB. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv3 licensed.