SIMIS CMS
Most websites are built by marketers.This one wasn't.
One integrated, open-source platform with security in the foundation. We trust it enough to run our own.
Why we built it
When SimIS needed a platform for its own websites and mobile apps, the available options shared a flaw: they depended on stacks of third-party plug-ins, and every plug-in is one more thing to patch, one more compatibility risk, one more way in for an attacker. As a company that builds software for defense customers, we weren't willing to accept that.
So we built our own: one complete, integrated platform, engineered in-house and released as open source. SimIS CMS runs simisinc.com in production today, which means the platform on this page is not a demo. You're looking at it.
The public site and the console behind it, running in production. Click to expand.
Everything in one platform
One codebase, one patch cycle, one team accountable for all of it. Everything below ships in the box:
| Module | Features |
| CMS | Site Map, Web Pages (Templates, UI Designer, SEO, Searchable) with Content and Images, HTML Editor, CSS Editor, Blogs, Form Data, Calendars, Folders and Files, Mailing Lists, Videos, Wikis, Search, Site Alerts, Form Pop-Ups, Sticky Buttons, Responsive |
| Analytics | Tracking for Sessions, Hits, Geolocation, Content, Searches, Referrals; Charts; xAPI |
| Data Integration | Datasets (CSV, JSON, GeoJSON, and RSS sources), Collections (Profiles, Geolocation, Multiple Categories, Relationships, Custom Fields, Indexed, Searchable), Data Sources |
| Collaboration | Users (Register, Validation, Login, Invite), User Groups, Collection Membership and Permissions, Chat |
| E-commerce | Products, SKUs, Categories, Customers, Orders, Account Management, Shipping Methods, Carriers, Tracking Numbers, Pricing Rules (Discounts) |
| CRM | Leads & Customers, Forms, Orders |
| Settings | Theme, Site SEO, Social Media, Mail Server, Maps, Captcha, Analytics, E-commerce, Mailing Lists |
| Integration | Google Analytics, Map Box, Open Street Map, Square, Stripe, Taxjar, USPS, Boxzooka |
| Security | OAuth, Firewall (Integration and Blocked IP lists), SPAM Filter, Geo Filter, Rate Limiting, Dependency and Code Scanning |
| API | Rest API |
| Platform | Micro Widgets, Connection Pool, Cache, Scheduler, Workflow, Expression Engine, Upgrades, Migrations, Record Paging |
Security is the point
Most CMS platforms outsource security to whoever wrote the plug-in. SimIS CMS ships it in the core:
- Modern password hashing (Argon2)
- Single sign-on via OAuth and OpenID Connect
- Request rate limiting
- IP firewall and geo-filtering
- Spam filtering and captcha
- Automated code security analysis in CI
And the source is public, so nothing is hidden: your security team, or ours, can read every line.
Run it yourself. Run it with us. Either way, it's yours.
Download it, modify it, deploy it: SimIS CMS is Apache 2.0 licensed, no strings. What organizations hire SimIS for is everything around it: deployment and hosting on infrastructure we control, hardening and monitoring by the same team that delivers our cybersecurity and CMMC practice, content and design support, and a single accountable partner when something needs to be right.
If your organization operates anywhere near the defense industrial base, you already know why the company running your website matters.
Have a problem no product on the market solves? Those are our favorite ones. Reach out and we'd love to work through it with you.
Read Every Line
on GitHub
SimIS CMS on GitHub
Join the
Discussion
Discuss on GitHub
Talk to the people who built it
No sales layer, no discovery-call gauntlet. Ask about SimIS CMS and you're talking to the engineers and security practitioners who run it in production. Tell us what you need and you'll get a straight answer.
Contact Us