Foundry CMS · Build 10.5

Describe the page.
Foundry builds it.

You're not choosing between fifteen plugins that half-work together, and you're not waiting on a developer to fix a headline. Say what you need in plain language — Foundry writes the content, sets up the layout, and checks the SEO before you've finished your coffee.

4-layer cachePages load instantly
Passkeys built inNo password resets
REST APIRuns headless too
InstallableWorks like a native app
foundry-assistant — live session
assistant › What are we building today?
you › A services page for a marketing agency
✓ drafting sections, headings, and copy…
✓ writing meta title & description…
✓ adding the page to sitemap.xml…
✓ Hero✓ Services grid ✓ TestimonialsSEO score 98/100

you › Run an SEO check on the whole site
✓ scanning published & draft pages…
✓ metadata updated — score up from 82 to 96

you › Schedule Monday's launch post
Connected — Gemini & OpenAI
4 layers
of caching
v10.5
current build
Passkeys
no passwords needed
REST API
headless-ready
PWA
installs like an app
24 mo.
API stability guarantee
§ 01 — CORE PLATFORM

Everything you actually use, built into the core

Most CMS platforms make you bolt on a plugin for every feature, and then spend your weekends updating them. We put the tools people actually reach for — writing, editing, SEO, media, analytics — straight into the core, so the site stays fast no matter how much you lean on it.

Pages that write themselves — mostly

Give it a topic and an audience, and you'll get a full draft: headings, body copy, and a structure that actually reads well. You still get final say on every word.

Editing that doesn't break your layout

Tighten a paragraph or rewrite a section without worrying it'll knock your heading order or spacing out of place. The structure holds while the words change.

SEO that runs in the background

Titles, descriptions, and your sitemap update on their own as you publish. You're not guessing at character counts or forgetting to update robots.txt again.

A real code view, side by side

Prefer to work in markup? Open the code panel next to the visual preview and edit either one — changes sync both ways as you type.

Media that doesn't pile up

Drop in a batch of photos and they're resized and compressed automatically. Folders, thumbnails, and bulk actions keep the library from turning into a junk drawer.

Traffic numbers you don't need a login for

Visits, top pages, devices, and where people came from — right in your dashboard. No separate analytics account, no extra script slowing down your pages.

§ 02 — ACCESS & ROLES

Two people, two very different days

Your developer needs the keys to the whole building. Your content person just needs a door that opens easily. Foundry gives each of them exactly that, without stepping on the other's work.

The admin
Holds the keys to everything
  • Sets the rules the AI has to follow, including what it's not allowed to touch
  • Approves or revokes a passkey for any device — phone, laptop, tablet
  • Decides which scripts and components load on which pages
  • Adds tracking pixels or custom styles without touching core files
  • Flips on Maintenance Mode and still lets the dev team in by IP
  • Manages API keys, allowed domains, and how many requests are allowed per minute
  • Locks down or version-controls anything that shouldn't change casually
The content owner
Never touches a line of code
  • Builds and edits pages by typing — or talking — in plain English
  • Uploads photos and lets the system handle sizing and thumbnails
  • Asks the AI to redo a section, expand a paragraph, or change the tone
  • Builds a contact form by dragging fields, syncs entries to Google Sheets
  • Schedules a week of social posts, rewritten for each platform automatically
  • Checks real-time traffic and gets a few AI suggestions worth trying
  • Manages the portfolio gallery with filters and a carousel view, no code involved
§ 03 — WORKFLOW

How a page actually gets made

You describe the goal. The system does the drafting, structuring, and the boring SEO chores. You review, adjust, and publish — usually in one sitting.

1

Say what you're trying to do

Type it or say it out loud. No form fields to fill in, no template to pick from first — the system reads intent, not keywords.

2

It drafts the whole page

Copy, layout, heading order, meta tags, and structured markup all get written in one pass — not a blank page with a blinking cursor.

3

You review it, side by side

The visual view and the code view stay in sync. Tweak either one and watch both update immediately — no save-and-refresh loop.

4

Publish, and the chores handle themselves

All four cache layers warm up, the sitemap updates, and any scheduled social posts go out — without you clicking through five separate settings screens.

5

Keep nudging it

"Make the hero punchier." "Add an FAQ." "Write this for a younger crowd." It edits within the boundaries your admin already set — it won't wander outside them.

live session
Build a services page for a digital marketing agency
generating Digital Marketing Agency page…
✓ Hero✓ Services grid ✓ Process steps✓ Testimonials ✓ CTA block✓ Schema markup ✓ Meta written✓ Sitemap updated

Make the hero bolder and more urgent
rewritten, brand voice kept intact
readability 72 → 91 · SEO score 98/100

Schedule a social post for Monday, 9am
✓ scheduled — Facebook · Twitter · LinkedIn

How's traffic looking this week?
§ 04 — PERFORMANCE

Fast even on your worst traffic day

Four caching layers work together so a viral post or a launch-day traffic spike doesn't bring the server to its knees. Caches clear themselves the moment you update content, or you can flush everything at once from Settings.

Page cache

Finished pages are served straight from cache — near-instant, no matter how many people hit the site at once.

Database cache

Repeat queries are stored instead of re-run, so the database isn't the bottleneck when traffic climbs.

Component cache

Heavier blocks — galleries, portfolios — render once and get served instantly on every visit after that.

AI response cache

Repeated AI requests are stored for a set period, so you're not paying or waiting for the same answer twice.

Asset loading is conditional, not blanket. Heavy libraries only load on the pages that actually need them, so a page without a slider or map isn't dragging that code along for no reason.
§ 05 — REST API

Want to run it headless? Go ahead

If your team already builds in React or Vue, or you need a mobile app pulling from the same content, the versioned REST API is there for that. Version 1 stays stable for at least 24 months — we won't pull the rug out from under an integration you've already shipped.

MethodResourceTypical useAuth
GET/menusNavigation structureOptional*
GET/settingsPublic site configOptional*
GET/pagesList content pagesRequired
GET/portfolioList portfolio itemsRequired
POST/forms/submitSubmit a form headlesslyRequired

*No auth needed once Public Access Mode is switched on in API Settings.

Every request needs authorization by default. From API Settings you control which domains can connect, how many requests they're allowed per minute, and can rotate credentials whenever you want.
Public APIRead only
Menus and general settings, safe to call without a login. Turn on Public Access Mode if a client-side frontend needs to fetch content directly.
Authenticated APIRead & write
Full access once authorized. Lock it to specific domains, cap the request rate, and rotate keys from Settings whenever you need to.
Internal AIServer-side only
The AI's own actions run through server-side logic that nothing outside the system can call or trigger, under any circumstance.
§ 06 — MODULES

Already built in. Nothing extra to install.

Each module below is versioned and only loads on the pages that need it, so turning on a booking system for one client site doesn't slow down another that doesn't use it.

SEO & Meta Hub
Active
100-point audit, one-click AI metadata, a review queue before anything goes live, rollback history, dynamic sitemap and robots.txt.
Portfolio Manager
Active
Filterable galleries with multiple categories per project, sliders and featured images pulled together with a simple shortcode.
Form Builder
Active
Drag-and-drop fields, submission tracking, email alerts, your own SMTP, and a direct Google Sheets sync.
Visual Designer
Active
Edit layout and styling right on the live page while logged in — see the responsive breakpoints shift as you work.
IT / Agency CRM
Active
Client profiles, a lead pipeline, invoice tracking, service agreements, and license syncing across parent and child accounts.
Job Board
Active
Post openings, track applicants in a live table, accept resumes, filter by skill, and list company profiles.
Support Tickets
Active
A ticket queue that syncs whether an agent is online or off, internal notes, priority tags, and status automation.
Hospitality Suite
Active
Table and room bookings, a synced digital menu, receipt printing, and syncing with booking channels like Airbnb or Booking.com.
Tours & Bookings
Active
Itinerary builder, package pricing, scheduling, guest lists, and confirmation emails that send themselves.
Inventory Core
Active
Stock levels, SKUs, low-stock alerts, warehouse locations, and a full audit trail of every movement.
Glass Slider
Active
A frosted-glass hero slider with smooth, hardware-accelerated animation and proper touch-swipe support.
Social Auto-Post
Active
Schedules posts to Facebook, Twitter, and LinkedIn, with copy rewritten to fit each platform's format.
Analytics
Active
Live visitor tracking, device and browser breakdowns, referral paths, and a few AI suggestions on where to focus.
Lazy Loader
Active
Defers images and scripts until they're actually needed on screen, which is most of your PageSpeed win right there.
Workflow Builder
Active
A visual node-based canvas for wiring up steps and logic — handy for anything that needs a defined sequence.
§ 07 — SEO ENGINE

The SEO checklist you keep forgetting, done automatically

A 100-point audit runs on every page, flags what's actually hurting your ranking, and can fix most of it with one click — with a full history if you ever want to undo a change.

Missing H1−15
Meta title−25
Meta description−25
Missing OG image−10
Thin content−15

The 100-point audit

Checks your H1, title and description length, OG image, and flags any page under 300 words as thin content — the stuff that quietly tanks rankings.

One-click metadata

Get a title (30–60 characters), a description (120–160), and 5–8 keywords worth targeting — applied instantly, with a sensible fallback if the AI service is down.

A queue, not a surprise

Run a full audit and suggestions wait for your approval before anything changes. One suggestion per page at a time — no duplicate noise to sort through.

Re-checks on its own

New or edited pages get re-audited automatically when you open the dashboard. If you'd already told it to ignore a page, that choice sticks.

Per-page on/off switch

Some pages just aren't meant to rank — a legal disclaimer, say. Take them out of the site-wide score without touching their published status.

A real history, not a guess

Every AI edit and every applied suggestion is logged with who made it. One click restores the previous version and recalculates the score right away.

Sitemap and robots.txt, kept current

A valid sitemap.xml regenerates as pages go live, with sensible priority weighting — home at 1.0, pages at 0.8, categories at 0.6. Robots.txt stays editable, and admin, API, and internal paths are blocked from crawlers by default.

Published pages indexedAutomatic
Admin & API paths blockedAutomatic

Organization data, for Google's Knowledge Panel

Fill in your name, logo, and social profiles once, or let the system pull them from your existing settings — this is what gives Google enough to build a Knowledge Panel for your brand.

Name & logo auto-fillSmart
Social profiles (6 networks)Auto-detect
§ 08 — SECURITY & GUARDRAILS

Security that's built in, not bolted on

Protection against the usual suspects — SQL injection, cross-site scripting, unauthorized file access — lives in the core itself, not in a separate security plugin you have to remember to keep updated.

Every query is validated

Database calls go through parameterized queries across the platform. User input never reaches the database directly, at any layer.

Output gets sanitized automatically

Anything shown to a visitor is cleaned on render, by default — no extra step for editors or developers to remember.

Files stay where they belong

The media library checks access on every request. A request outside the permitted folder gets blocked before it reaches any application code.

Passkeys, per device

Register a passkey for your phone, laptop, or tablet from your user panel. Revoke one and that device loses access immediately.

Maintenance mode with an exception list

Lock the front end for visitors while your own IP — or your developer's — still gets through, straight from Settings.

A few habits worth keeping

Clear the AI logs now and then, rotate your API keys periodically, and glance at the failed-login report if something feels off.

What the AI is not allowed to do
These are hard limits, enforced by the platform itself — not a setting anyone can accidentally switch off.
No direct database access. Every data change goes through the same validated pathway a human editor would use.
Core files are off-limits. No prompt, however worded, gets the AI to modify the underlying platform.
Nothing runs unchecked. Every AI-triggered action is validated server-side before it's executed — no shortcuts.
Bound to the user's own permissions. It can't do anything on your behalf that you yourself aren't allowed to do.
§ 09 — INSTALLABLE APP

Your site, sitting on someone's home screen

Everything needed to make your site installable comes from settings you've already filled in — your app name, colors, and icon. No app store submission, no separate build.

Installs on any device

Visitors get an "Add to Home Screen" prompt on iOS, Android, and desktop — direct, app-like access with none of the store review process.

Configures itself

Your app name, short name, and theme color come straight from System Settings — nothing extra to fill out.

Your own icon, both sizes

Upload branded icons through the settings panel for a clean look in the app switcher and on the home screen.

Still works offline-ish

Core content is cached locally, so a shaky connection doesn't mean a blank screen.

Installable, not just responsive

Your site opens like a standalone app — full branding, no browser bar cluttering the top of the screen.

iOS Safari Android Chrome Desktop
§ 10 — WHO THIS FITS

Built for teams who want control, not another platform to rent

It runs on your own server, with your own data — there's no vendor holding your site hostage on a monthly plan.

Agencies

White-label it for clients, set custom AI behavior per site, and give each team member exactly the access they need.

Startups & SaaS teams

Move fast on content without giving up a headless-ready architecture that can grow with the product.

Nonprofits

Let non-technical staff run the site day-to-day — no developer on call for routine updates.

Schools & institutions

Multiple roles, real access control, and built-in forms and ticketing for the things students actually need.

Headless / React / Vue teams

Use the versioned API to power whatever frontend you're already building, with Public Access Mode for safe client-side fetches.

Teams who care where data lives

No shared infrastructure, no third party in the middle. Just your server, your rules.

§ 11 — QUESTIONS WE GET

A few things people usually ask

No. Content owners build and edit pages by typing plain-language requests. The code view exists for developers who want it, but it's optional, not required.

No. The AI can't touch core files, can't talk to the database directly, and can't act outside the permissions of whoever is logged in. An admin also sets explicit rules it has to follow.

Each module only loads its assets on the pages that actually use it, and four cache layers sit underneath everything. A booking system on one page won't add weight to a page that doesn't have one.

Yes — the versioned REST API is built for exactly that, and version 1 is guaranteed stable for at least 24 months so an integration you ship today won't break later.

It's your server and your database from day one — there's no vendor lock-in to untangle, because nothing was ever locked in.
Ready when you are

Let it handle the busywork.
You handle the business.

Book a live demo and watch the assistant build, edit, and optimize a real page in front of you — by voice or by typing. No script, no canned recording.

AI Assistant
Online & Ready
Live Call
Ready to hear you
Waiting for speech...
Microphone Required

To use the voice call feature, please allow microphone access in your browser settings. You can still type your message below and I'll reply in text.

Hello! I'm here to help. You can type your question below or allow microphone to use voice.