30 Oct 2026 · TrustList Editorial
Fake coding extension in Cursor's marketplace planted an SSH key
A tampered Anthropic.claude-code 2.1.313 sat in the Cursor extension marketplace for about 11 hours on 29 October. Cursor says at most…
5 headless CMS platform software ranked by rating, review volume and listing quality.

Access Controls/Permissions · Website Management · Document Indexing
Contentstack is a headless content management system with an API-first design. Teams use it to create content once and publish it to the web, mobile apps and other channels.

Access Controls/Permissions · Website Management · Document Indexing
Ingeniux CMS is a content management platform built on Microsoft .NET. It supports websites, portals, communities and structured content for several channels.

Access Controls/Permissions · Website Management · Document Indexing
Strapi is an open-source headless content management system written entirely in JavaScript. It is developer-first, so teams can keep their favourite tools and frameworks.

Access Controls/Permissions · Website Management · Document Indexing
Kentico Kontent is a headless content management system. It separates content authoring from the websites and apps that display it, so two groups can work without waiting on each…

Access Controls/Permissions · Website Management · Document Indexing
Directus is an open-source headless CMS and API layer that installs over an existing SQL database.
For vendors
The order is earned on evidence: client reviews, vetting, awards and the facts a business states on its own website, which we read and date. Nobody can pay to move up. Add reviews or verified facts to your free profile to move up at the next edition; there are two ways to stand out now, and each one says what it is.
Not on TrustList yet? Add your product or claim its listing, free.
Free
Paid · always labelled
Every other way we rank headless cms platform software, by what they do and where they are.
The newest guides and analysis from TrustList Insights.
30 Oct 2026 · TrustList Editorial
A tampered Anthropic.claude-code 2.1.313 sat in the Cursor extension marketplace for about 11 hours on 29 October. Cursor says at most…
30 Oct 2026 · TrustList Editorial
SA-CONTRIB-2026-254 rates CVE-2026-118539 highly critical (21 of 25): no login needed, every configuration exposed and attacks already…
30 Oct 2026 · TrustList Editorial
The GitLab regex flaw lets an unauthenticated user run code through a CI/CD configuration; the Cisco flaw reloads ASA and FTD firewalls.…
Jump to another ranked category.
Everything here links back to the same verified catalogue. Pick your next stop.