Built a CMS with security in mind:

• Ed25519-signed automatic updating, powered by Halite
• Argon2i password hashing
• Prepared statements to prevent SQLi
• Context-sensitive escaping (via Twig)
• Integrated with CSPBuilder, plus a web UI to manage the rules
• CSRF Prevention baked in
• Secure long-term authentication
• Incredibly powerful and flexible access controls (whitelist-based)
• Separate authentication (users) from public identities (authors)