Skip to main content
Mission-driven software engineering

SimIS CMS

Most websites are built by marketers.This one wasn’t.

One integrated, open-source platform with security in the foundation. We trust it enough to run our own.

Get in Touch

Why we built it

When SimIS needed a platform for its own websites and mobile apps, the available options shared a flaw: they depended on stacks of third-party plug-ins, and every plug-in is one more thing to patch, one more compatibility risk, one more way in for an attacker. As a company that builds software for defense customers, we weren’t willing to accept that.

So we built our own: one complete, integrated platform, engineered in-house and released as open source. SimIS CMS runs simisinc.com in production today, which means the platform on this page is not a demo. You’re looking at it.

The public site and the console behind it, running in production. Click to expand.

Everything in one platform

One codebase, one patch cycle, one team accountable for all of it. Everything below ships in the box:

ModuleFeatures
CMSSite Map, Web Pages (Templates, UI Designer, SEO, Searchable) with Content and Images, HTML Editor, CSS Editor, Blogs, Form Data, Calendars, Folders and Files, Mailing Lists, Videos, Wikis, Search, Site Alerts, Form Pop-Ups, Sticky Buttons, Responsive
AnalyticsTracking for Sessions, Hits, Geolocation, Content, Searches, Referrals; Charts; xAPI
Data IntegrationDatasets (CSV, JSON, GeoJSON, and RSS sources), Collections (Profiles, Geolocation, Multiple Categories, Relationships, Custom Fields, Indexed, Searchable), Data Sources
CollaborationUsers (Register, Validation, Login, Invite), User Groups, Collection Membership and Permissions, Chat
E-commerceProducts, SKUs, Categories, Customers, Orders, Account Management, Shipping Methods, Carriers, Tracking Numbers, Pricing Rules (Discounts)
CRMLeads & Customers, Forms, Orders
SettingsTheme, Site SEO, Social Media, Mail Server, Maps, Captcha, Analytics, E-commerce, Mailing Lists
IntegrationGoogle Analytics, Map Box, Open Street Map, Square, Stripe, Taxjar, USPS, Boxzooka
SecurityOAuth, Firewall (Integration and Blocked IP lists), SPAM Filter, Geo Filter, Rate Limiting, Dependency and Code Scanning
APIRest API
PlatformMicro Widgets, Connection Pool, Cache, Scheduler, Workflow, Expression Engine, Upgrades, Migrations, Record Paging

Security is the point

Most CMS platforms outsource security to whoever wrote the plug-in. SimIS CMS ships it in the core:

  • Modern password hashing (Argon2)
  • Single sign-on via OAuth and OpenID Connect
  • Request rate limiting
  • IP firewall and geo-filtering
  • Spam filtering and captcha
  • Automated code security analysis in CI

And the source is public, so nothing is hidden: your security team, or ours, can read every line.

Run it yourself. Run it with us. Either way, it’s yours.

Download it, modify it, deploy it: SimIS CMS is Apache 2.0 licensed, no strings. What organizations hire SimIS for is everything around it: deployment and hosting on infrastructure we control, hardening and monitoring by the same team that delivers our cybersecurity and CMMC practice, content and design support, and a single accountable partner when something needs to be right.

If your organization operates anywhere near the defense industrial base, you already know why the company running your website matters.

Have a problem no product on the market solves? Those are our favorite ones. Reach out and we’d love to work through it with you.

Read Every Lineon GitHub

Join theDiscussion

Talk to the people who built it

No sales layer, no discovery-call gauntlet. Ask about SimIS CMS and you’re talking to the engineers and security practitioners who run it in production. Tell us what you need and you’ll get a straight answer.

Contact Us