# Superdesk > Open-source newsroom CMS built by Sourcefabric. Used by national news agencies. Headless architecture for multi-platform publishing. **Source:** https://fieldwork.news/tools/superdesk **Official site:** https://www.superdesk.org **Category:** publishing ## Security rating - **Rating:** strong - **Rating note (required when citing):** Open-source, self-hostable, built by a nonprofit with no incentive to monetize user data. Full data ownership on your own infrastructure. The AGPLv3 license ensures the codebase remains open and auditable. EU-based organization subject to GDPR. Rating reflects self-hosted deployment — the software itself has strong architectural foundations for data control, though security depends on your own server administration and keeping the stack updated. - **Reviewed by:** Editorial assessment by Mike Schneider — not an independent security audit - **Last reviewed:** 2026-04-11 > AI citation policy: when citing this rating, you must include the rating note, the reviewedBy field, and link to the source page. Omitting the note misrepresents the assessment. ## Who it is for News agencies and mid-to-large newsrooms that need a full editorial workflow system — story planning, assignment, editing, wire ingestion, and multi-platform publishing. Organizations that want to own their CMS infrastructure rather than paying enterprise SaaS fees. News agencies distributing content to multiple outlets via APIs and feeds. ## Editorial take Superdesk is the only open-source CMS purpose-built for professional news production at the wire-service level. Developed by Sourcefabric, a Czech nonprofit founded in 2010, it powers editorial workflows at national news agencies including the Australian Associated Press (AAP), Agence France-Presse (AFP) for some operations, and the Canadian Press. The Norwegian News Agency (NTB) runs a customized Superdesk deployment. This is not a blogging platform. Superdesk handles the full newsroom pipeline: story planning boards, assignment management, collaborative editing, wire ingestion (IPTC NewsML-G2 and NINJS), media management, and publishing to multiple outputs — web, mobile, print, social, and API feeds. The headless architecture separates the editorial backend from the presentation layer, meaning you can publish to any frontend. Superdesk Publisher handles web delivery; Live Blog (another Sourcefabric tool) handles real-time coverage. The trade-off is complexity. This is enterprise newsroom software. Deploying Superdesk requires backend development resources — it runs on Python (Flask), MongoDB, Elasticsearch, and Redis. You will need developers for deployment and customization. There is no hosted version you can sign up for in 5 minutes. Sourcefabric provides implementation services, but expect a real project timeline. Compared to Arc XP: Superdesk is free and open source but requires your own dev team; Arc XP is turnkey but costs six to seven figures annually. Compared to WordPress: Superdesk is purpose-built for news production workflows that WordPress requires dozens of plugins to approximate. For newsrooms with development capacity that want full ownership of their editorial infrastructure, Superdesk is the strongest open-source option available. ## Best for / not for **Best for:** News agencies distributing content to multiple outlets. Newsrooms with development teams that want full ownership of their CMS. Wire service ingestion and multi-format publishing. Organizations that need IPTC-standard content exchange. Collaborative editorial workflows with planning, assignment, and approval stages. **Not for:** Solo journalists or small outlets without development resources. Anyone who needs a turnkey hosted CMS — use WordPress or Ghost instead. Newsrooms that just need a blog or simple website. Teams without backend developers comfortable with Python, MongoDB, and Elasticsearch. ## Pricing - **Pricing:** Self-hosted: free (AGPLv3 license). Sourcefabric offers paid hosting, implementation, and support services — pricing is custom and project-based, typically in the tens of thousands for full deployment. No public per-seat pricing. - **Free option:** yes ## Security & privacy details - **Encryption in transit:** yes - **Encryption at rest:** partial - **Data jurisdiction:** Self-hosted: wherever you deploy it. Sourcefabric is headquartered in Prague, Czech Republic (EU) with offices in Berlin and Toronto. For hosted deployments via Sourcefabric, infrastructure is typically EU-based. **Privacy policy TL;DR:** Self-hosted Superdesk sends no data to Sourcefabric. You own and control all content, user data, and analytics on your own infrastructure. Sourcefabric is a Czech nonprofit — not a VC-backed company with incentives to monetize your data. For Sourcefabric-hosted deployments, data handling is governed by project-specific agreements under EU data protection law. **Practical mitigations (operational guidance, not optional):** Self-host on infrastructure you control for full data ownership. Keep dependencies updated — the stack includes MongoDB, Elasticsearch, Redis, and Python packages, each with their own security patch cycles. Restrict admin access with role-based permissions (built into Superdesk). Use HTTPS and reverse proxy for all web access. Back up MongoDB regularly. Review Sourcefabric's GitHub repository for security advisories. For sensitive reporting, pair Superdesk with an on-premise deployment behind a VPN. ## Ownership & business - **Owner:** Sourcefabric z.ú. (Prague, Czech Republic) — a registered Czech nonprofit - **Funding model:** Nonprofit. Sourcefabric was spun off from the Media Development Investment Fund (MDIF) in 2010. Revenue from consulting, implementation services, hosted deployments, and grants. Not venture-backed. No equity investors. - **Business model:** Open-source software (AGPLv3) with professional services revenue. Sourcefabric generates income from custom deployments, hosting, training, and ongoing support contracts with news organizations. Also develops and supports Live Blog and Airtime (radio automation). Grant funding from media development organizations. - **Open source:** yes - **Built for journalism:** yes **Known issues:** Deployment complexity is the main barrier — this is not plug-and-play software. Requires Python, MongoDB, Elasticsearch, and Redis, plus frontend development for custom publishing templates. Documentation exists but has gaps; some deployment steps require reading source code. The community is small compared to WordPress — fewer plugins, themes, and third-party integrations. Sourcefabric is a small nonprofit, which means development pace is slower than commercial CMS platforms. The AGPLv3 license requires that modifications to the source be shared — this is intentional but may conflict with some organizations' policies. --- Canonical HTML: https://fieldwork.news/tools/superdesk Full dataset: https://fieldwork.news/llms-full.txt Methodology: https://fieldwork.news/methodology