Skip to content
SPECIFICTION
Get listed

Masa CMS

masacms.com

From €0.25/mo Free plan Open source WebWindowsmacOSLinuxAPISelf-hosted
Visit masacms.com
Spec score 8.9 #4 of 26 in Enterprise Content Management Systems

What it is

Masa CMS is an open-source enterprise content management system for personalized websites, intranets, and mobile applications. It supports headless publishing across online channels, with configurable content types and an editor offering WYSIWYG editing, drag-and-drop, markup integration, and interface customization. Approval chains can require specified user groups to review content in sequence before it goes live. APIs provide programmatic access to content and updates to workflows and content models; separate environments can isolate changes from production. The CMS can be deployed on AWS, Azure, Google Cloud, or on-premises infrastructure. Its open-source software is listed at free. Paid MASA Cloud includes AWS infrastructure and support such as consultancy, development, training, monitoring, and incident handling; community support is available through GitHub. Production installation requires ColdFusion 10+ or Lucee 4.5.1.000+ and a supported MySQL, PostgreSQL, Microsoft SQL, or Oracle database. Docker setup instructions cover Unix, Mac, and Windows. The maker describes privacy-law compliance as a fit for the CMS and GDPR support for MASA Cloud.

Spec sheet

What it does
MASA CMS is an enterprise content-management and digital-experience platform for personalized websites, intranets and mobile applications.Read 15 Oct 2026 · masacms.com
Product
MASA CMS is an open-source enterprise content management platform for personalized internet and intranet sites and mobile applications.Read 30 Sep 2026 · masacms.com
Deployment
MASA can run on AWS, Google Cloud, Microsoft Azure or an organization's own infrastructure.Read 15 Oct 2026 · masacms.com
API
The platform exposes APIs for retrieving content and changing workflows and content models.Read 15 Oct 2026 · masacms.com
Integrations
The maker says plugins for marketing automation, personalization, and analytics are planned; the homepage describes these as future integrations.Read 30 Sep 2026 · masacms.com
Support
Paid MASA Cloud support includes consultancy, development, training, 24/7 monitoring and incident handling, and scalable AWS infrastructure; community support is available through GitHub issues and discussions.Read 30 Sep 2026 · masacms.com
Headquarters
We Are North lists Rotterdam, South Holland as headquarters, while its service page gives a Rotterdam office address.Read 15 Oct 2026 · wearenorth.eu
API formats
Documentation describes REST web services, a JSON API and custom endpoints for front-end clients.Read 15 Oct 2026 · docs.masacms.com
APIs and environments
APIs allow programmatic retrieval of content and updates to workflows and content models, while environments can isolate content, models, and configurations from production.Read 30 Sep 2026 · masacms.com
Company founded
LinkedIn lists We Are North as founded in 2017.Read 15 Oct 2026 · nl.linkedin.com
Company size
LinkedIn lists We Are North as a privately held company with 11–50 employees.Read 15 Oct 2026 · nl.linkedin.com
Content modelling
Administrators can configure content types and properties for business-specific requirements.Read 15 Oct 2026 · masacms.com
Content models
Content types are configurable to support business-specific requirements.Read 30 Sep 2026 · masacms.com
Documentation limitation
The documentation labels itself a community work in progress and sends missing sections to Mura 7.1 documentation.Read 15 Oct 2026 · docs.masacms.com
Documentation scope
The documentation covers installation, configuration, content, permissions, themes, modules, plugins, ORM, events and APIs.Read 15 Oct 2026 · docs.masacms.com
Editing
Its content editor supports WYSIWYG editing, drag and drop, markup integration, and UI customization.Read 30 Sep 2026 · masacms.com
Editor
Its editor combines WYSIWYG editing, drag-and-drop tools, markup integration and interface customization.Read 15 Oct 2026 · masacms.com
Extensibility
Developers can add modules and plugins, use ORM beans and scaffolding, and attach CFML event hooks.Read 15 Oct 2026 · docs.masacms.com
Headless delivery
The product supports headless publishing across multiple online channels.Read 15 Oct 2026 · masacms.com
Headless publishing
The headless CMS supports publishing content across a variety of online channels.Read 30 Sep 2026 · masacms.com
Independent support market
A UK Government Digital Marketplace supplier document describes yearly paid Masa/Mura support contracts and ticket-based assistance.Read 15 Oct 2026 · assets.applytosupply.digitalmarketplace.service.gov.uk
Legal maker
The service provider identifies the legal entity as We Are North Groep BV, company registration 70361746.Read 15 Oct 2026 · wearenorth.eu
Licence
The public Masa CMS repository is an open-source CFML project under GPL-2.0.Read 15 Oct 2026 · github.com
Limit: authentication bypass
A CVE report lists an authentication-bypass vulnerability in the Remember Me feature of older 7.2, 7.3 and 7.4-beta versions.Read 15 Oct 2026 · cve.report
Limit: legacy vulnerabilities
NVD records CVE-2024-32641, a remote-code-execution issue affecting older Masa versions before patched releases.Read 15 Oct 2026 · nvd.nist.gov
Limit: SQL injection
CVE.org records CVE-2024-32640, an SQL-injection-to-RCE issue in older Masa versions.Read 15 Oct 2026 · cve.org
Local installation
The quick-start process uses Docker Compose to launch database and MASA containers at localhost:8080.Read 15 Oct 2026 · docs.masacms.com
Local setup
The quick-start guide provides Docker setup steps for Unix, Mac, and Windows.Read 30 Sep 2026 · docs.masacms.com
Notable requirement
Production installation requires ColdFusion 10+ or Lucee 4.5.1.000+ and access to a supported MySQL, PostgreSQL, Microsoft SQL, or Oracle database.Read 30 Sep 2026 · docs.masacms.com
Privacy claim
The maker positions MASA as privacy-by-design and suitable for GDPR-oriented deployments.Read 15 Oct 2026 · wearenorth.eu
Security and privacy
The maker says the CMS suits organizations seeking compliance with privacy laws such as GDPR; MASA Cloud offers AWS regions of choice and support for GDPR compliance.Read 30 Sep 2026 · masacms.com
Security configuration
The production guide requires CLOB support and broad SQL permissions on the configured datasource.Read 15 Oct 2026 · docs.masacms.com
Security release status
The 8.0 alpha release is explicitly not for production use and includes security hardening plus support for Adobe ColdFusion 2025, Lucee 7 and BoxLang.Read 15 Oct 2026 · docs.masacms.com
Self-hosting
The software is free to run as open-source software, while MASA Cloud is a paid AWS-hosted service.Read 15 Oct 2026 · masacms.com
Server requirements
Production installation requires ColdFusion 10 or newer or Lucee 4.5.1.000 or newer, plus MySQL 5+, PostgreSQL 8+, Microsoft SQL 2000+ or Oracle 10g+ and DSN access.Read 15 Oct 2026 · docs.masacms.com
Site bundles
Site bundles package architecture, content and rendering files for transfer between instances, with deployment overwriting destination content.Read 15 Oct 2026 · docs.masacms.com
Support model
Paid MASA Cloud support includes consultancy, development, training, 24/7 monitoring and incident handling on AWS.Read 15 Oct 2026 · masacms.com
Workflows
Approval chains require specified user groups to approve content in sequence before publication, and change sets support grouped publishing.Read 15 Oct 2026 · masacms.com

Plans and prices

MASA CMS open-source software Free Available free as open-source software Read 30 Sep 2026 · masacms.com
Adhoc €3 a year per year 20 development/consultancy/training hours · best-effort planned response · extra hours €150 Read 15 Oct 2026 · wearenorth.eu
Commited €6 a year per year 25 hours · 1-business-day response · extra hours €140 Read 15 Oct 2026 · wearenorth.eu
Premium €7 a year per year 25 hours · 1 MASA Cloud production environment · 24/7 monitoring and incident handling under 8 hours · extra hours €120 Read 15 Oct 2026 · wearenorth.eu
Advanced €15 a year per year 50 hours · test/acceptance and production environments · 24/7 monitoring and incident handling under 4 hours · extra hours €100 Read 15 Oct 2026 · wearenorth.eu
Enterprise Priced on request contact for special price enterprise package Read 15 Oct 2026 · wearenorth.eu
MASA Cloud Priced on request Paid PaaS support and maintenance · AWS infrastructure · 24/7 support Read 30 Sep 2026 · masacms.com

Every Masa CMS plan and price →

Strong points and limits

Strong points

  • Open-source software listed at free.
  • Headless publishing supports multiple online channels.
  • Approval chains can follow a specified user-group order.
  • Environments can separate changes from production.
  • Deployment options include cloud providers and on-premises.

Limits

  • Production requires ColdFusion or Lucee.
  • A supported database is required for production.
  • MASA Cloud support is paid.
  • Listed marketing, personalization, and analytics plugins are future integrations.

Who it suits

Masa CMS suits organizations managing personalized web, intranet, or mobile content that need configurable workflows and deployment options. Production users need the specified runtime and a supported database.

Verdict

Masa CMS combines configurable content models, ordered approvals, and headless publishing with several deployment choices. Check the production runtime and database requirements before selecting it; cloud support is a paid option.

Where Specifiction places it

Alternatives to Masa CMSAll alternatives →