What Is Concrete CMS and Who Is It For?
Concrete CMS is a free, open-source content management system (CMS) built for teams — content creators, designers, and developers who need to build, author, and publish website content together. It fits organizations that want in-page editing, granular permissions, and compliance-ready hosting without assembling a large stack of extensions. If you're a solo blogger looking for the simplest possible setup, or you need a heavily customized application framework rather than a website builder, it may be more than you need.
What Concrete CMS actually is
Concrete CMS describes itself as "an open source content management system for teams" and "a website builder with built in tools [that] make editing content easy." The core idea is that content creators, designers, and developers all work in the same system: editors change content directly on the page, designers control presentation, and developers extend the platform.
The site positions it as pairing "robust functionality with ease of use and a low cost of deployment" — a quote from Ben Dickie, Research Director for Enterprise Applications at Info-Tech Research Group, featured on the homepage.
Who it's built for
The product pages name three overlapping audiences:
- Content creators and editors — people who write, update, and publish pages day to day.
- Designers — people responsible for how the site looks and how content is laid out.
- Developers — people who extend functionality, integrate systems, or build custom blocks and themes.
The collaboration features suggest it's aimed at teams rather than individuals: roles, groups, workflow approvals, and version control only matter when more than one person touches the site.
Core capabilities
Editing
Concrete CMS supports WYSIWYG editing directly on the webpage — you edit in place rather than in a separate admin form. The site claims comprehensive built-in features cover most needs "with no extensions," and that editors "become proficient within moments." One customer quoted on the page, Stefan Glut of BASF Corporation, says the system is "a pleasure to use for our authors," which keeps content fresher.
Collaboration and permissions
- Assign roles and groups for controlled access, down to an individual block of text.
- Fine-tune advanced permissions for any feature.
- Use workflow content approvals for quality assurance.
- Track edits with change logs.
- Review, compare, and revert using version control.
Security and compliance
The homepage states Concrete CMS ships with "out-of-the-box ISO:27001 certified security," offers SOC 2 and HIPAA compliant hosting, and was chosen by the U.S. Army for stringent security needs. It also mentions tailored hosting to meet specific organizational compliance requirements. These are vendor claims about the platform and its hosting options — if compliance is a deciding factor for you, verify the current certifications and hosting terms directly, since they can change.
Where it tends to fit — and where it doesn't
| Situation | Concrete CMS is a reasonable fit | Concrete CMS may be overkill or a mismatch |
|---|---|---|
| Team size | Multiple editors, designers, and developers | One person maintaining a simple site |
| Editing needs | In-page WYSIWYG, approvals, version history | Static pages that rarely change |
| Permissions | Need block-level access control | Everyone can edit everything |
| Compliance | Need ISO/SOC 2/HIPAA-aligned hosting | No regulatory requirements |
| Budget model | Open source, low deployment cost | — |
The site does not publish pricing tiers or license fees on the pages reviewed here, so treat "free and open source" as a statement about the software itself, not a guarantee about hosting, support, or add-on costs. Those depend on how you deploy it.
How to decide if it's worth a look
- Check your team shape. If more than one person edits content and you need approvals or granular permissions, the built-in features are the main draw.
- Check your compliance needs. If you need certified security or compliant hosting, ask Concrete CMS directly what's currently covered rather than relying on the homepage summary.
- Check your extension appetite. The claim is that most needs are met without extensions — worth testing against your actual requirements before committing.
- Book a demo if you're unsure. The site offers a demo scheduling option where you describe your project and they help you decide whether Concrete CMS belongs on your shortlist.
A note on the wider ecosystem
Recent posts on the site mention a permission-aware AI tool called Atlas and an MCP Server built by Macareux Digital, plus marketplace add-ons such as Top Navigation Bar PLUS and Hero Image PLUS. That suggests an active add-on and integration ecosystem alongside the core CMS — relevant if you expect to extend the platform later.