Block-based content editor
Structuring, designing and uploading content has never been easier. With Payload, you can create reusable and customisable content blocks which can be mixed and matched to build dynamic layouts for websites and apps.
The best part? Each content block can be extended with React components to fit specific project needs.
Access control
The granular-level, function-based access control in Payload lets administrators manage user permissions at both document and field levels. You can manage role-based access, which takes security and authorisation risk to a whole new level.
The dynamic access control in Payload CMS automatically adjusts user permissions and UI elements as roles change, keeping the admin panel up-to-date and secure for all users.
Extensible APIs
Payload supports both REST and GraphQL API, which ensures that developers can build custom websites and sophisticated apps that meet their specific business requirements and can easily integrate with other systems and services. These APIs offer flexible options for data management, data retrieval, and seamless integrations with various third-party applications.
Whether you need to create, update, or delete data, Payload’s APIs offer efficient and reliable methods for interacting with your content.
Self-hosted and secure
To help businesses maintain their privacy, stay compliant and secure, Payload CMS is designed to be self-hosted and gives full control of the data to businesses. The CMS also comes loaded with strong built-in security features, such as HTTP-only cookies, CSRF protection, and role-based access control.
These features ensure that data is securely transmitted and stored, and common attack vectors like cross-site request forgery are prevented.