Foundry CMS · Build 10.5 Describe the page.Foundry builds it. You're not choosing between fifteen plugins that half-work together, and you're not waiting on a developer to fix a headline. Say what you need in plain language — Foundry writes the content, sets up the layout, and checks the SEO before you've finished your coffee. Start building See a live demo 4-layer cachePages load instantly Passkeys built inNo password resets REST APIRuns headless too InstallableWorks like a native app foundry-assistant — live session assistant › What are we building today? you › A services page for a marketing agency ✓ drafting sections, headings, and copy… ✓ writing meta title & description… ✓ adding the page to sitemap.xml… ✓ Hero✓ Services grid ✓ TestimonialsSEO score 98/100 you › Run an SEO check on the whole site ✓ scanning published & draft pages… ✓ metadata updated — score up from 82 to 96 you › Schedule Monday's launch post Connected — Gemini & OpenAI 4 layersof caching v10.5current build Passkeysno passwords needed REST APIheadless-ready PWAinstalls like an app 24 mo.API stability guarantee § 01 — CORE PLATFORM Everything you actually use, built into the core Most CMS platforms make you bolt on a plugin for every feature, and then spend your weekends updating them. We put the tools people actually reach for — writing, editing, SEO, media, analytics — straight into the core, so the site stays fast no matter how much you lean on it. Pages that write themselves — mostlyGive it a topic and an audience, and you'll get a full draft: headings, body copy, and a structure that actually reads well. You still get final say on every word. Editing that doesn't break your layoutTighten a paragraph or rewrite a section without worrying it'll knock your heading order or spacing out of place. The structure holds while the words change. SEO that runs in the backgroundTitles, descriptions, and your sitemap update on their own as you publish. You're not guessing at character counts or forgetting to update robots.txt again. A real code view, side by sidePrefer to work in markup? Open the code panel next to the visual preview and edit either one — changes sync both ways as you type. Media that doesn't pile upDrop in a batch of photos and they're resized and compressed automatically. Folders, thumbnails, and bulk actions keep the library from turning into a junk drawer. Traffic numbers you don't need a login forVisits, top pages, devices, and where people came from — right in your dashboard. No separate analytics account, no extra script slowing down your pages. § 02 — ACCESS & ROLES Two people, two very different days Your developer needs the keys to the whole building. Your content person just needs a door that opens easily. Foundry gives each of them exactly that, without stepping on the other's work. The adminHolds the keys to everything Sets the rules the AI has to follow, including what it's not allowed to touch Approves or revokes a passkey for any device — phone, laptop, tablet Decides which scripts and components load on which pages Adds tracking pixels or custom styles without touching core files Flips on Maintenance Mode and still lets the dev team in by IP Manages API keys, allowed domains, and how many requests are allowed per minute Locks down or version-controls anything that shouldn't change casually The content ownerNever touches a line of code Builds and edits pages by typing — or talking — in plain English Uploads photos and lets the system handle sizing and thumbnails Asks the AI to redo a section, expand a paragraph, or change the tone Builds a contact form by dragging fields, syncs entries to Google Sheets Schedules a week of social posts, rewritten for each platform automatically Checks real-time traffic and gets a few AI suggestions worth trying Manages the portfolio gallery with filters and a carousel view, no code involved § 03 — WORKFLOW How a page actually gets made You describe the goal. The system does the drafting, structuring, and the boring SEO chores. You review, adjust, and publish — usually in one sitting. 1Say what you're trying to doType it or say it out loud. No form fields to fill in, no template to pick from first — the system reads intent, not keywords. 2It drafts the whole pageCopy, layout, heading order, meta tags, and structured markup all get written in one pass — not a blank page with a blinking cursor. 3You review it, side by sideThe visual view and the code view stay in sync. Tweak either one and watch both update immediately — no save-and-refresh loop. 4Publish, and the chores handle themselvesAll four cache layers warm up, the sitemap updates, and any scheduled social posts go out — without you clicking through five separate settings screens. 5Keep nudging it"Make the hero punchier." "Add an FAQ." "Write this for a younger crowd." It edits within the boundaries your admin already set — it won't wander outside them. live session › Build a services page for a digital marketing agency generating Digital Marketing Agency page… ✓ Hero✓ Services grid ✓ Process steps✓ Testimonials ✓ CTA block✓ Schema markup ✓ Meta written✓ Sitemap updated › Make the hero bolder and more urgent rewritten, brand voice kept intact readability 72 → 91 · SEO score 98/100 › Schedule a social post for Monday, 9am ✓ scheduled — Facebook · Twitter · LinkedIn › How's traffic looking this week? § 04 — PERFORMANCE Fast even on your worst traffic day Four caching layers work together so a viral post or a launch-day traffic spike doesn't bring the server to its knees. Caches clear themselves the moment you update content, or you can flush everything at once from Settings. Page cacheFinished pages are served straight from cache — near-instant, no matter how many people hit the site at once. Database cacheRepeat queries are stored instead of re-run, so the database isn't the bottleneck when traffic climbs. Component cacheHeavier blocks — galleries, portfolios — render once and get served instantly on every visit after that. AI response cacheRepeated AI requests are stored for a set period, so you're not paying or waiting for the same answer twice. Asset loading is conditional, not blanket. Heavy libraries only load on the pages that actually need them, so a page without a slider or map isn't dragging that code along for no reason. § 05 — REST API Want to run it headless? Go ahead If your team already builds in React or Vue, or you need a mobile app pulling from the same content, the versioned REST API is there for that. Version 1 stays stable for at least 24 months — we won't pull the rug out from under an integration you've already shipped. MethodResourceTypical useAuth GET/menusNavigation structureOptional* GET/settingsPublic site configOptional* GET/pagesList content pagesRequired GET/portfolioList portfolio itemsRequired POST/forms/submitSubmit a form headlesslyRequired *No auth needed once Public Access Mode is switched on in API Settings. Every request needs authorization by default. From API Settings you control which domains can connect, how many requests they're allowed per minute, and can rotate credentials whenever you want. Public APIRead only Menus and general settings, safe to call without a login. Turn on Public Access Mode if a client-side frontend needs to fetch content directly. Authenticated APIRead & write Full access once authorized. Lock it to specific domains, cap the request rate, and rotate keys from Settings whenever you need to. Internal AIServer-side only The AI's own actions run through server-side logic that nothing outside the system can call or trigger, under any circumstance. § 06 — MODULES Already built in. Nothing extra to install. Each module below is versioned and only loads on the pages that need it, so turning on a booking system for one client site doesn't slow down another that doesn't use it. SEO & Meta HubActive100-point audit, one-click AI metadata, a review queue before anything goes live, rollback history, dynamic sitemap and robots.txt. Portfolio ManagerActiveFilterable galleries with multiple categories per project, sliders and featured images pulled together with a simple shortcode. Form BuilderActiveDrag-and-drop fields, submission tracking, email alerts, your own SMTP, and a direct Google Sheets sync. Visual DesignerActiveEdit layout and styling right on the live page while logged in — see the responsive breakpoints shift as you work. IT / Agency CRMActiveClient profiles, a lead pipeline, invoice tracking, service agreements, and license syncing across parent and child accounts. Job BoardActivePost openings, track applicants in a live table, accept resumes, filter by skill, and list company profiles. Support TicketsActiveA ticket queue that syncs whether an agent is online or off, internal notes, priority tags, and status automation. Hospitality SuiteActiveTable and room bookings, a synced digital menu, receipt printing, and syncing with booking channels like Airbnb or Booking.com. Tours & BookingsActiveItinerary builder, package pricing, scheduling, guest lists, and confirmation emails that send themselves. Inventory CoreActiveStock levels, SKUs, low-stock alerts, warehouse locations, and a full audit trail of every movement. Glass SliderActiveA frosted-glass hero slider with smooth, hardware-accelerated animation and proper touch-swipe support. Social Auto-PostActiveSchedules posts to Facebook, Twitter, and LinkedIn, with copy rewritten to fit each platform's format. AnalyticsActiveLive visitor tracking, device and browser breakdowns, referral paths, and a few AI suggestions on where to focus. Lazy LoaderActiveDefers images and scripts until they're actually needed on screen, which is most of your PageSpeed win right there. Workflow BuilderActiveA visual node-based canvas for wiring up steps and logic — handy for anything that needs a defined sequence. § 07 — SEO ENGINE The SEO checklist you keep forgetting, done automatically A 100-point audit runs on every page, flags what's actually hurting your ranking, and can fix most of it with one click — with a full history if you ever want to undo a change. Missing H1−15 Meta title−25 Meta description−25 Missing OG image−10 Thin content−15 The 100-point auditChecks your H1, title and description length, OG image, and flags any page under 300 words as thin content — the stuff that quietly tanks rankings. One-click metadataGet a title (30–60 characters), a description (120–160), and 5–8 keywords worth targeting — applied instantly, with a sensible fallback if the AI service is down. A queue, not a surpriseRun a full audit and suggestions wait for your approval before anything changes. One suggestion per page at a time — no duplicate noise to sort through. Re-checks on its ownNew or edited pages get re-audited automatically when you open the dashboard. If you'd already told it to ignore a page, that choice sticks. Per-page on/off switchSome pages just aren't meant to rank — a legal disclaimer, say. Take them out of the site-wide score without touching their published status. A real history, not a guessEvery AI edit and every applied suggestion is logged with who made it. One click restores the previous version and recalculates the score right away. Sitemap and robots.txt, kept current A valid sitemap.xml regenerates as pages go live, with sensible priority weighting — home at 1.0, pages at 0.8, categories at 0.6. Robots.txt stays editable, and admin, API, and internal paths are blocked from crawlers by default. Published pages indexedAutomatic Admin & API paths blockedAutomatic Organization data, for Google's Knowledge Panel Fill in your name, logo, and social profiles once, or let the system pull them from your existing settings — this is what gives Google enough to build a Knowledge Panel for your brand. Name & logo auto-fillSmart Social profiles (6 networks)Auto-detect § 08 — SECURITY & GUARDRAILS Security that's built in, not bolted on Protection against the usual suspects — SQL injection, cross-site scripting, unauthorized file access — lives in the core itself, not in a separate security plugin you have to remember to keep updated. Every query is validatedDatabase calls go through parameterized queries across the platform. User input never reaches the database directly, at any layer. Output gets sanitized automaticallyAnything shown to a visitor is cleaned on render, by default — no extra step for editors or developers to remember. Files stay where they belongThe media library checks access on every request. A request outside the permitted folder gets blocked before it reaches any application code. Passkeys, per deviceRegister a passkey for your phone, laptop, or tablet from your user panel. Revoke one and that device loses access immediately. Maintenance mode with an exception listLock the front end for visitors while your own IP — or your developer's — still gets through, straight from Settings. A few habits worth keepingClear the AI logs now and then, rotate your API keys periodically, and glance at the failed-login report if something feels off. What the AI is not allowed to do These are hard limits, enforced by the platform itself — not a setting anyone can accidentally switch off. No direct database access. Every data change goes through the same validated pathway a human editor would use. Core files are off-limits. No prompt, however worded, gets the AI to modify the underlying platform. Nothing runs unchecked. Every AI-triggered action is validated server-side before it's executed — no shortcuts. Bound to the user's own permissions. It can't do anything on your behalf that you yourself aren't allowed to do. § 09 — INSTALLABLE APP Your site, sitting on someone's home screen Everything needed to make your site installable comes from settings you've already filled in — your app name, colors, and icon. No app store submission, no separate build. Installs on any deviceVisitors get an "Add to Home Screen" prompt on iOS, Android, and desktop — direct, app-like access with none of the store review process. Configures itselfYour app name, short name, and theme color come straight from System Settings — nothing extra to fill out. Your own icon, both sizesUpload branded icons through the settings panel for a clean look in the app switcher and on the home screen. Still works offline-ishCore content is cached locally, so a shaky connection doesn't mean a blank screen. Installable, not just responsive Your site opens like a standalone app — full branding, no browser bar cluttering the top of the screen. iOS Safari Android Chrome Desktop § 10 — WHO THIS FITS Built for teams who want control, not another platform to rent It runs on your own server, with your own data — there's no vendor holding your site hostage on a monthly plan. AgenciesWhite-label it for clients, set custom AI behavior per site, and give each team member exactly the access they need. Startups & SaaS teamsMove fast on content without giving up a headless-ready architecture that can grow with the product. NonprofitsLet non-technical staff run the site day-to-day — no developer on call for routine updates. Schools & institutionsMultiple roles, real access control, and built-in forms and ticketing for the things students actually need. Headless / React / Vue teamsUse the versioned API to power whatever frontend you're already building, with Public Access Mode for safe client-side fetches. Teams who care where data livesNo shared infrastructure, no third party in the middle. Just your server, your rules. § 11 — QUESTIONS WE GET A few things people usually ask Do I need to know how to code to use Foundry CMS? No. Content owners build and edit pages by typing plain-language requests. The code view exists for developers who want it, but it's optional, not required. Can the AI change things it shouldn't? No. The AI can't touch core files, can't talk to the database directly, and can't act outside the permissions of whoever is logged in. An admin also sets explicit rules it has to follow. Will the plugins slow my site down? Each module only loads its assets on the pages that actually use it, and four cache layers sit underneath everything. A booking system on one page won't add weight to a page that doesn't have one. Can I run it headless, alongside a React or Vue frontend? Yes — the versioned REST API is built for exactly that, and version 1 is guaranteed stable for at least 24 months so an integration you ship today won't break later. What happens to my data if I ever want to leave? It's your server and your database from day one — there's no vendor lock-in to untangle, because nothing was ever locked in. Ready when you are Let it handle the busywork.You handle the business. Book a live demo and watch the assistant build, edit, and optimize a real page in front of you — by voice or by typing. No script, no canned recording. Book a demo Talk to the team