Fortress CMS
Language
Download

French CMS · PHP 8.2+ · no dependencies

Secure by default. French by design.

A dependency-free PHP CMS with built-in AI, llms.txt and a live studio. One zip, ten minutes, and you own it.

Download Open the admin demo

v1.5.1 PHP 8.2+ 0 dependencies No telemetry

● Live release
Argon2id passwords
Strict CSP
TOTP two-factor
Signed audit trail

Live demo

Try the themes, right here.

A real render, not a screenshot: pick a theme, switch device, scroll.

Open in a new tab

Demo content, real theme — the page below loads the same stylesheet your site would.

Fortress vs WordPress

The same comfort. A different security model.

WordPress, Joomla and Drupal grew up on PHP as it was fifteen years ago. Fortress is written from zero on the PHP of today: the same comfort, none of the inherited surface.

Criterion
Fortress
WordPress
Joomla
Drupal
Secure on install
Yes, by default
Plugins + tuning
No
Partly
Third-party code
None
Dozens of packages
Extensions
Modules
Content-Security-Policy
Strict, nonces
Off by default
No
Partial
Two-factor sign-in
Built in
Plugin
No
Yes
Audit trail
Every write
Plugin
Extension
Module
AI keys
Encrypted, yours
Third-party SaaS
No
No
llms.txt
Automatic
Manual
No
Module
Data residency
Your host, your country
Vendor-dependent
No
Module

Public documentation of each project, October 2026. No benchmark, just defaults.

New generation

The first CMS rebuilt on today PHP, not on its legacy.

Every CMS still in use carries the compromises of its first decade. Starting over is not a detail: it is what finally makes a clean platform possible.

Built against today's PHP flaws

Typed PHP 8.2+, strict headers, Argon2id, prepared statements everywhere. No compatibility layer for 2010.

Fresh by construction

No decade of plugins to audit. The security is in the code you download, not in a checklist of extensions.

Made to publish

Four languages, AI on demand, llms.txt and a live studio: publish, and be read by humans and machines.

Security

Four protections you can read in the code.

Strict CSP

Nonce-based headers, no inline script, no CDN.

Argon2id

Modern hashing, TOTP ready, rate-limited sign-in.

Prepared statements

Every query, SQLite or MySQL, without exception.

Full audit log

Every write recorded with user, IP and time.

Sovereignty

A new French CMS, built to last.

FR

GDPR-minded

No telemetry, no third-party fonts, no external call.

FR

Sovereign hosting

Your server, your jurisdiction, one folder to upload.

FR

Auditable

Small codebase, written threat model, no black box.

Built in

Three modules no one else ships natively.

AI, manual by default

Your key, your provider, your rules.

llms.txt, automatic

Global index and one file per article.

Live studio

Record video or a podcast in the editor.

Themes

Six themes, one accent colour.

Pick a structure, then a single tint. Black and white stays; the tint is the only colour on the page.

Aurora

Hairline · wide

The calm baseline: white ground, hairline grid, wide measure.

Editorial

Long-form

For essays: narrow measure, heavier rules, drop cap.

Studio

Bento

Large type, asymmetric bento grids, tinted panels.

Photo

Gallery · images

A gallery theme: full-frame images, mono captions, almost no chrome. The photograph is the layout.

Fortress

House · grid

The look of this site applied to a blog: centred hero, hairline table, numbered posts.

Slate

Dark · minimal

Monochrome and quiet: flat rows, thin rules, no covers in the way.

Themes and tints switch from the dashboard. No rebuild, no plugin, no page cache to clear. All themes ↗

Try the themes, right here.

Open in a new tab

Languages

Four languages, one content model.

EN English FR Français ES Español DE Deutsch

Installation

Live in ten minutes, nothing to compile.

The same moves as WordPress: drop it in, open the site, answer four screens. Except there is no Composer, no npm and no plugin update to babysit.

  1. Unpack the archive

    Upload the contents of the ZIP to your web root, or to a subfolder. There is no build step.

  2. Make storage/ writable

    The only permission to set: storage/ belongs to the PHP user and is not world-readable.

  3. Open the site

    index.php redirects itself to install.php. No command to run, no config file to write by hand.

  4. Answer the four screens

    Environment, database (SQLite by default, MySQL if you prefer), site name and languages, administrator account.

  5. Lock access down

    Enable 2FA, then Force HTTPS in Settings → Security. install.lock prevents any reinstall.

  6. Back it up

    Copy storage/app.db, storage/config.php and storage/uploads/. That is the whole state of the site.

Ten minutes to your own CMS.

Upload the folder, run the installer, write. Nothing to compile, nothing to subscribe to.

Download Open the admin demo

fortress-cms-1.5.1.zip · 1.2 MB · v1.5.1 All versions →