Developer Tools
Grav
Open-source flat-file CMS using Markdown, YAML, Twig and PHP without a content database.
What it is
Grav is an MIT-licensed, self-hosted flat-file CMS that stores content in plain files rather than a database and renders sites through PHP, Markdown, YAML and Twig. A graphical administration panel is optional and depends on additional plugins; operators still own server configuration, filesystem permissions, core and plugin updates, security settings, backups and compatibility testing.
Key features
Flat-file content
Stores content in plain files and does not require a content database.
Markdown and Twig
Uses Markdown for authoring and Twig templates for presentation.
Plugin and theme ecosystem
Adds functions and designs through separately maintained packages.
Optional Admin panel
Provides browser-based content and maintenance tools when its required plugins are installed.
Strengths and trade-offs
What works well
- No content database: Pages and configuration live in files, simplifying version-controlled content workflows.
- Small core footprint: Official requirements center on a compatible web server, PHP and required extensions.
- Flexible development model: Themes use Twig while plugins extend behavior beyond the core.
- Optional administration: Teams may edit files directly or install the separate Admin panel and its dependencies.
Where it falls short
- Self-hosting responsibility: PHP, web-server rules, permissions, TLS, updates, logging and recovery remain operational work.
- Plugin dependency risk: Admin and many site capabilities depend on plugins whose support and version compatibility must be checked.
- Flat-file fit limits: Transactional, highly relational or write-heavy applications may need a database-backed platform.
- Admin is not core: The graphical panel requires the login, forms and email plugins in addition to the Admin plugin.
Who it is for
Developers and small teams seeking a file-based PHP CMS and willing to operate its hosting, updates and extensions.
Our verdict
Choose Grav when flat files genuinely simplify the content workflow; prove production PHP configuration, plugin compatibility, least-privilege permissions, updates and restore procedures on the exact site before launch.
Closest alternatives we track
Same category, ordered by verified starting price.
What we checked
- Public APIOffers a documented API you can build against.No
- Mobile appHas a native app for iOS or Android, not just a mobile website.No
- Open source / self-hostableSource is open and the tool can be run on your own infrastructure.Yes
- SSO (SAML)Supports SAML single sign-on on at least one plan.No
“Not checked” means exactly that — we have not verified it, and we do not guess.
Evidence and freshness
Status: Official sources reviewedReviewed: 2026-08-24
- Grav Docs — Requirements ↗
Checked 2026-08-24 · Supports: web-server and PHP requirements, required extensions, plain-file content, no database, cache recommendation, filesystem permissions, built-in PHP server production limitation
- Grav Docs — Installation ↗
Checked 2026-08-24 · Supports: ZIP and CLI installation, Admin bundle option, server configuration, Docker persistence caution, hidden-file requirement
- Grav Docs — Admin introduction ↗
Checked 2026-08-24 · Supports: optional Admin plugin, login forms and email dependencies, user management, core updates, backup interface, password handling
- Grav Docs — Plugins ↗
Checked 2026-08-24 · Supports: plugin architecture, installation methods, third-party functionality, version compatibility declaration
- Grav Docs — Configuration ↗
Checked 2026-08-24 · Supports: YAML configuration, session controls, security defaults, XSS checks, upload restrictions
- Grav Docs — Command line ↗
Checked 2026-08-24 · Supports: backup command, security scan command, cache controls, package management, user creation
- Grav source — Repository and license ↗
Checked 2026-08-24 · Supports: flat-file CMS scope, PHP Markdown Twig and Symfony stack, MIT license, open-source status
Limit: Official Grav documentation and its source repository were reviewed; ToolCompare did not install Grav, test the Admin panel, audit plugins or themes, benchmark file scale, validate web-server hardening, perform upgrades, penetration-test the site or restore a backup.