Maybe a silly question, but is there any full-featured CMS suitable for large-ish organizations that's been undefeated in terms of security? The only one that comes to mind is Plone (which is used extensively in the Brazilian government), but there has to be more.

▲

jewel an hour ago | parent [-]

Anything that compiles to a static site will be nearly immune!

	▲	rbanffy 21 minutes ago \| parent \| next [-]
		Yes, but that doesn't solve all problems. You will still need to expose a CMS interface to the editorial team, be it command line, git based, or something else. A static site can't be attacked, but the system that manages the contents of the static website or its compilation can.
	▲	26 minutes ago \| parent \| prev [-]
		[deleted]