What Is a CMS and Do You Actually Need One?
A content management system lets people who do not write code create and change pages. That is the whole value proposition, and it is a real one — but it is not free, because a CMS is software that has to be hosted, updated and secured for as long as the site exists.
This guide covers what a CMS actually gives you, when it is worth the overhead, and what to use when it is not.
What a CMS provides#
Beyond "edit pages", these are the capabilities you are buying — and they are worth listing because most CMS decisions are made without checking which of them you need.
- Editing without deployment. Change text and publish immediately.
- Structured content. Fields rather than a blob of HTML, so content can be reused and rendered consistently.
- Media management. Upload once, use anywhere, with automatic resizing.
- Users and permissions. Authors, editors, approvers with different rights.
- Workflow. Drafts, previews, scheduling, revision history.
- Search and navigation generated automatically from content.
- Extensibility. Forms, commerce, translations through an ecosystem.
If you only need the first item on this list and one person makes changes twice a year, a CMS is a large amount of machinery for a small job.
The overhead nobody mentions at the start#
A CMS is a running application, which means it has an ongoing cost profile whether or not anyone edits the site.
| Cost | Detail |
|---|---|
| Security patching | Popular systems are constantly probed; updates are not optional |
| Plugin maintenance | Every extension is another update and another possible breach |
| Hosting | A database-backed application needs more than static files |
| Performance work | Dynamic pages need caching to be fast |
| Version upgrades | Major versions can break themes and customisations |
| Training | Editors need to know how to use it without breaking layouts |
When you need one, and when you do not#
The deciding factor is change frequency multiplied by the number of people who need to make changes.
| Situation | Verdict |
|---|---|
| Marketing team publishing weekly | Yes — this is exactly the case a CMS is for |
| Five-page site changed twice a year | No — a static site is cheaper and safer |
| Documentation maintained by developers | No — files in version control work better |
| Online store | Yes, and a commerce platform rather than a general CMS |
| Landing pages for campaigns | Yes — speed of publishing is the whole point |
| Site with several content types and translations | Yes — structure is what a CMS is good at |
The alternatives#
For sites that change rarely, there are options with much lower running costs and almost no attack surface.
- Static site generator. Content in files, built to HTML, deployed to a CDN. Fast, cheap and almost nothing to attack — but editing needs a technical workflow unless you add an editing layer.
- Static generator plus a git-based editor. Non-technical editing on top of files, keeping the static output.
- Headless CMS plus static generation. Editors get a friendly interface; the public site is still static.
- Hand-built HTML. Perfectly reasonable for a small brochure site that genuinely never changes.
- Website builder. The editing is the product; the trade is portability and performance.
The static route removes an entire category of risk: there is no database to inject into and no admin login to brute-force. For a site that changes monthly, that is a meaningful saving.
Frequently asked questions
Is WordPress the default choice?
It is the most common one, and commonality brings a large ecosystem, plenty of people who know it, and a correspondingly large amount of automated attention from attackers. It suits content-led sites well. It is not automatically right for applications, complex commerce, or sites whose content is mostly structured data rather than pages.
What is the difference between a CMS and a website builder?
A CMS manages content and usually leaves the presentation to templates you or a developer control. A builder combines content and layout in one visual editing tool. Builders are quicker for non-technical users and harder to leave, because layout decisions live inside the product rather than in code you own.
Can I add a CMS to an existing static site?
Yes, and it is a common upgrade path — either a headless CMS supplying content to the existing templates, or a git-based editing layer over the current files. It is usually less work than a full migration, because the templates and the URLs stay where they are.
How many plugins are too many?
There is no fixed number, but every plugin is an update to apply, a possible conflict and a possible vulnerability. A useful discipline is to justify each one against what it earns: if it saves an hour a year and needs quarterly attention, it is costing you. Sites with forty plugins are almost always carrying several nobody can explain.
what is a cmscontent management systemcms vs static sitewordpresswebsite cmscms comparison