• This repository has been archived on 06/Oct/2021
  • Stars
    star
    419
  • Rank 99,450 (Top 3 %)
  • Language
    PHP
  • License
    Other
  • Created about 8 years ago
  • Updated about 5 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Secure Content Management for the Modern Web - "The sky is only the beginning"

CMS Airship - Secure Content Management for the Modern Web

Build Status Latest Stable Version Latest Unstable Version License

The sky is only the beginning.

CMS Airship is a secure-by-default content management system, blog engine, and application development framework written for PHP 7.2 and above.

CMS Airship is Free Software (GPL 3) developed and maintained by Paragon Initiative Enterprises.

Commercial license are available for purchase if your company requires an alternative to the GNU Public License.

Benefits of CMS Airship

  1. Digitally signed automatic security updates.
  2. Community first. The community is always in control of any add-ons it produces. No one can backdoor your extensions without your signing keys.
  3. Supports a multi-site architecture out of the box.
  4. Designed by progressive-minded application security professionals.
  5. Fully customizable and extensible. Our Gears system allows extensions to easily restructure and/or replace entire Airship features without causing conflicts with our secure automatic updating process.

See how the out-of-the-box security of CMS Airship compares to WordPress, Drupal, or Joomla.

Documentation

The CMS Airship Documentation is in the docs directory.

Available on the AWS Marketplace

Minimum Requirements

  • PHP 7.2 or newer
  • Libsodium 1.0.15 or newer

Getting Started

Customizing Your Airship

CMS Airship extensions come in three flavors (detailed explanations):

  • Cabins: self-contained applications
  • Gadgets: alters the functionality of an existing Cabin (or of the Engine itself)
  • Motifs: alters the apperance of an existing Cabin

To create and/or manage these extensions, check out barge, our command line utility.

Screenshot

Screenshot

Airship is fully mobile responsive thanks to the Pure CSS framework. See it in action at CSPR.NG.

Contributing to CMS Airship

More Repositories

1

random_compat

PHP 5.x support for random_bytes() and random_int()
PHP
8,139
star
2

awesome-appsec

A curated list of resources for learning about application security
PHP
5,946
star
3

paseto

Platform-Agnostic Security Tokens
PHP
3,183
star
4

halite

High-level cryptography interface powered by libsodium
PHP
1,109
star
5

sodium_compat

Pure PHP polyfill for ext/sodium
PHP
855
star
6

constant_time_encoding

Constant-Time Character Encoding in PHP Projects
PHP
754
star
7

easydb

Easy-to-use PDO wrapper for PHP projects.
PHP
728
star
8

csp-builder

Build Content-Security-Policy headers from a JSON file (or build them programmatically)
PHP
537
star
9

chronicle

Public append-only ledger microservice built with Slim Framework
PHP
468
star
10

ciphersweet

Fast, searchable field-level encryption for PHP projects
PHP
415
star
11

sapient

Secure API Toolkit
PHP
317
star
12

anti-csrf

Full-Featured Anti-CSRF Library
PHP
293
star
13

certainty

Automated cacert.pem management for PHP projects
PHP
262
star
14

EasyRSA

Simple and Secure Wrapper for phpseclib
PHP
194
star
15

password_lock

Wraps Bcrypt-SHA2 in Authenticated Encryption
PHP
190
star
16

sodium-plus

Developer-friendly libsodium interface
JavaScript
170
star
17

multi_factor

Vendor-Agnostic Two-Factor Authentication
PHP
142
star
18

gpg-mailer

GnuPG-encrypted emails made easy
PHP
95
star
19

pecl-libsodium-doc

Free Online Documentation for the Libsodium PHP Extension
88
star
20

corner

Exceptions and Errors made more user-friendly
PHP
61
star
21

hidden-string

The HiddenString class extracted from Halite.
PHP
58
star
22

ciphersweet-js

Searchable Encryption for Node.js projects
JavaScript
58
star
23

iaso

Powerful JSON Toolkit, includes a JSON parser immune to Hash-DoS attacks
PHP
51
star
24

paseto-io

Paseto Website
Twig
46
star
25

hpkp-builder

Build HTTP Public-Key-Pinning headers from a JSON file (or build them programmatically)
PHP
41
star
26

seedspring

Seeded, Deterministic PRNG (based on AES-CTR instead of LCG)
PHP
40
star
27

easy-ecc

High-Level Usability Wrapper for PHPECC
PHP
39
star
28

passwdqc

Password/passphrase strength checking and enforcement (PHP port)
PHP
39
star
29

pharaoh

Utility to quickly and effectively diff two PHP Archives
PHP
37
star
30

libgossamer

Public Key Infrastructure without Certificate Authorities, for WordPress and Packagist
PHP
31
star
31

easydb-cache

EasyDB with Prepared Statement Caching
PHP
29
star
32

ionizer

Input Filter System for PHP Software
PHP
26
star
33

argon2-refiner

Generate Parameter Recommendations for Argon2id in PHP 7.3+
PHP
24
star
34

bsidesorl-2017

Supplementary Material for Building Defensible Solutions to Weird Problems
PHP
23
star
35

blakechain

Hash chains built with BLAKE2b
PHP
22
star
36

quill

Library for quickly and easily writing data to a Chronicle instance
PHP
21
star
37

stern

Stern lets you built type-safe PHP projects, even if your project's users aren't writing type-safe code
PHP
20
star
38

herd

Hash-Ensured Replicated Database
PHP
16
star
39

eloquent-ciphersweet

Bridge library between Eloquent ORM and CipherSweet
PHP
14
star
40

pco_prototype

PCO - PHP Crypto Objects
PHP
12
star
41

discretion

On-demand and reusable contact forms that only send GnuPG-encrypted messages to your inbox.
PHP
12
star
42

xchacha20-js

JavaScript implementation of ChaCha20, HChaCha20, and XChaCha20
JavaScript
11
star
43

slim-sapient

Slim Framework Adapter for Sapient
PHP
10
star
44

airship-docs

Documentation for CMS Airship
Nginx
10
star
45

paserk-php

PHP Implementation of PASERK
PHP
10
star
46

php-jwt-guard

Security Defense for Firebase's PHP-JWT Library
PHP
9
star
47

zend-diactoros-sapient

Zend Diactoros Adapter for Sapient
PHP
8
star
48

phone-to-pick

Whitelist Your Incoming Phone Calls (for Android)
Java
7
star
49

poly1305-js

JavaScript implementation of the Poly1305 one-time authenticator
JavaScript
5
star
50

gossamer-server

Standalone Gossamer server
PHP
4
star
51

paseto-browser.js

PASETO in the Web Browser
JavaScript
4
star
52

airship-barge

Build Gadgets for Airship projects (Command Line Interface)
PHP
3
star
53

monolog-quill

A Monolog Handler for writing to a Chronicle instance
PHP
3
star
54

sodium-jvm

Pure-Java implementation of the Sodium cryptography library.
3
star
55

blogpost-translations

Translations of Paragon Initiative Enterprise blog posts
2
star
56

ward-docs

Online Documentation for Ward (Web Application Realtime Defender)
2
star
57

php71_crypto

Pluggable Cryptography Interface for PHP 7.1
2
star
58

node-halite

High-level cryptography interface powered by node-sodium
1
star
59

ristretto-php

Implements a type-safe API for working with the Ristretto Group in PHP projects.
PHP
1
star
60

pie-hosted.com

Source code for the pie-hosted.com website
PHP
1
star
61

halite-legacy

Legacy versions of Halite to facilitate migrations from older ciphersuites to the latest supported version
PHP
1
star
62

certainty-js

Certainty-js: Automated CACert.pem Management for Node.js Software
JavaScript
1
star