WordPress, Umbraco or Shopify? Choosing the right CMS
Most agencies build everything on the one platform they know, then call it the right choice. It rarely is for everyone. The content management system (CMS) you build on shapes what your site can do, how fast it is, how secure it stays and how much it costs to run. Here's an honest look at the main options and when each one actually fits.
First: do you even need a CMS?
A CMS lets you edit content yourself without a developer. That's genuinely useful if you publish often. But if your site is five pages that rarely change, a CMS can add weight, security upkeep and cost you don't need — a lean, custom-built site can be faster and safer. The honest first question is how often you'll actually edit it.
WordPress — when it fits, and when it doesn't
WordPress powers a huge share of the web for good reasons: it's familiar, flexible and quick to get going. The catch is that most WordPress problems come from how it's built — piling on plugins until the site is slow, fragile and a security target.
- Good for: blogs, content-heavy sites, businesses that publish regularly and want a big plugin ecosystem.
- Watch out for: plugin bloat, performance, and the constant updating and hardening a WordPress site needs to stay safe.
Umbraco — the .NET option
Umbraco is a clean, flexible CMS built on Microsoft .NET. It's less of a free-for-all than WordPress: more structured, often faster, and well suited to organisations already in the Microsoft world or needing serious customisation without the plugin sprawl.
- Good for: businesses wanting a robust, secure, editor-friendly CMS with custom functionality; Microsoft-stack organisations.
- Watch out for: a smaller pool of developers than WordPress, so pick a partner who genuinely knows it.
Shopify — built for selling
If selling products online is the point, a dedicated ecommerce platform like Shopify handles the hard parts — payments, tax, checkout, security — out of the box. You trade some flexibility for a lot less to maintain.
- Good for: straightforward online stores that want to launch and sell without building a checkout from scratch.
- Watch out for: monthly fees plus transaction costs, and limits when you need something genuinely custom.
Headless — power and complexity
A "headless" setup separates where you manage content from where it's displayed, delivering it to a fast, custom front-end via an API. It's powerful and very fast — and more complex and costly to build. Right for multi-channel content or sites where performance is non-negotiable; overkill for a local business brochure site.
No CMS at all
For small sites that rarely change, a hand-built static site is often the best of all: extremely fast, almost nothing to hack, and cheap to host. You give up self-editing — but if you weren't going to edit it anyway, that's no loss.
How to choose, quickly
- Selling products? Start with a dedicated ecommerce platform.
- Publishing often and want a big ecosystem? WordPress, built properly.
- Want structure, security and custom features, especially on Microsoft? Look at Umbraco.
- Performance is everything, or content goes to many channels? Consider headless.
- Small and rarely changes? You may not need a CMS at all.
Common questions
Is WordPress bad?
No — WordPress is a capable platform. Most "WordPress is slow/insecure" stories come from how a site was built: too many plugins, no performance work and no maintenance. Built carefully and kept updated, it's a solid choice for the right project.
What is a headless CMS in plain English?
It splits the place you write content from the place visitors see it. You manage content in one system, and it's delivered through an API to a separate, fast front-end (your website, an app, or both). It's powerful for speed and multi-channel use, but more complex to build.
Can I move from one platform to another later?
Yes, content can usually be migrated, but it's real work — and you can lose SEO if it's done carelessly. It's far cheaper to choose well at the start, which is why the platform decision deserves proper thought up front.
Which CMS is most secure?
Any platform can be secure or insecure depending on how it's built and maintained. A leaner setup with fewer third-party plugins has a smaller attack surface. The bigger factor is whether someone keeps it updated and hardened after launch.
Let's talk
Let's talk about your project.
Whether you've got a clear brief or just an idea, tell us what you have in mind and we'll give you an honest recommendation — even if that's a smaller project than you expected.