BookStack vs Cloud CMS

What BookStack is

BookStack is an MIT-licensed, self-hosted documentation application built around shelves, books, optional chapters and pages. It provides role and content-level permissions, multiple enterprise authentication options and a permission-aware REST API, but the operator remains responsible for the PHP and database stack, upgrades, filesystem permissions, security configuration and complete database-plus-file backups.

What Cloud CMS is

Cloud CMS is now presented within the proprietary Gitana content platform. It models structured and relational content as a JSON-Schema-backed graph, supports branches, workflow, releases, search, REST and GraphQL delivery, and can be purchased as hosted service or commercially licensed self-managed Kubernetes containers. Plan limits, SSO, MFA, support, SLA and infrastructure responsibility vary substantially by edition.

What BookStack is built to do

Book hierarchy

Organizes page content within optional chapters, books and reusable bookshelves.

Roles and permissions

Combines system roles with content-level overrides and inherited controls.

Federated authentication

Documents OIDC, SAML 2.0 and LDAP configuration for self-hosted instances.

REST API

Provides token-authenticated JSON endpoints governed by the API user's permissions.

What Cloud CMS is built to do

Content graph

Models JSON documents, binary attachments and typed relationships using JSON Schema-backed definitions.

Versioned collaboration

Uses branches, changesets, pull-style merges, releases and conflict handling for content work.

REST and GraphQL

Delivers structured content through APIs, queries, search, traversal and supported language drivers.

Enterprise identity

Supports plan-dependent SAML 2.0 or JWT SSO, group mapping and multifactor options.

Choose BookStack if

• Internal handbooks, runbooks and technical knowledge bases with a clear hierarchy
• Organizations needing self-hosting, role controls and supported identity integrations
• Teams that can automate upgrades, database and file backups, and restore drills

Skip BookStack if

• You need a vendor-operated SaaS with no infrastructure responsibility
• Your information model cannot fit shelves, books, chapters and pages
• You cannot preserve the database, uploads, configuration and original APP_KEY together

Choose Cloud CMS if

• Complex content domains with typed relationships, workflow and multiple delivery environments
• Headless applications needing REST, GraphQL, search and scheduled publishing
• Organizations that can validate hosted limits or operate the full Kubernetes stack

Skip Cloud CMS if

• A simple website CMS would satisfy the content and publishing model
• Required users, API volume, SSO or SLA do not fit an approved commercial tier
• The team cannot govern graph schemas, workflow and self-managed infrastructure complexity

BookStack: pros & cons

• Predictable structure: Shelves, books, chapters and pages give teams a constrained documentation hierarchy.
• Granular access: Roles can be combined and overridden at shelf, book, chapter or page level.
• Authentication choices: Official administration docs cover OpenID Connect, SAML 2.0 and LDAP.
• Automation surface: The REST API covers content and administrative resources while enforcing the API user's roles and permissions.
• Self-hosting burden: PHP, MySQL or MariaDB, web-server configuration, updates and monitoring are operator responsibilities.
• Manual recovery design: There is no built-in full backup and restore; both database records and instance files must be protected.
• Key dependency: Restores need the original APP_KEY for encrypted features such as multi-factor credentials.
• Hierarchy trade-off: The book metaphor is approachable but may constrain teams needing free-form graphs or complex publishing workflows.

Cloud CMS: pros & cons

• Rich content model: JSON Schema types, aspects, binary attachments and graph associations support structured and relational domains.
• Editorial lifecycle: Branches, changesets, workflow, releases and scheduled deployments separate work from live delivery.
• API-first delivery: REST, GraphQL, queries, search, traversal and language drivers support headless applications.
• Deployment choice: Hosted plans shift backups and maintenance to Gitana; self-managed containers run in a customer VPC or on-premises.
• Commercial platform: The product is proprietary and self-managed use requires a commercial license.
• Material plan differences: Users, projects, API throughput, storage, SLA, SSO, MFA and support change by hosted tier.
• Self-managed operations: Kubernetes deployment transfers upgrades, backups, availability, secrets, databases and observability to the customer.
• Modeling complexity: Graph relationships, branching, workflow and deployment mappings require governance and specialist implementation.