
Kiln
8.4#3 in content management systemsFrom $4.99 a monthFree planWebAPISelf-hosted
Visit

| Fact | Kiln | WonderCMS |
|---|---|---|
| Editing | Editors can change text, images, documents, blocks, galleries, events, and calendar content from the site itself. | The admin interface supports in-place editing directly on site pages. |
| Free plan | Yes | Yes |
| License | The editor, worker and setup tooling are publicly available under the GNU AGPL-3.0 license. | The site publishes the MIT License, which permits use, copying, modification, distribution, sublicensing, and sale subject to its conditions. |
| Public API | The REST API exposes page listing, editable-field retrieval and sanitized edit commits through GET /api/v1/pages, GET /api/v1/fields and PATCH /api/v1/edits. | Developer documentation exposes the Wcms class and methods such as get() for reading database.js and page fields. |
| Security controls | The setup guide says the GitHub App can access only repositories selected during installation, and invited Google-email addresses are the only ones allowed to sign in as editors or members. | WonderCMS uses password_hash/password_verify, CSRF tokens, hash_equals timing protection, SRI tags and login-IP history. |
Kiln suits people building static sites who want clients or other non-technical editors to update content themselves. It also fits owners who want edits retained in their own GitHub repository.
You want what its maker publishes above — check its page for the details.