[ Features ]

Every feature, in one place.
No bolt-ons. No surprises.

A complete content platform — content delivery, dashboards, AI builder, storage, security, integrations, and analytics — bundled, hosted, and supported by us.

[ API ]

API-First Architecture

Every published entry is reachable over a fast, read-only content API the moment you publish. No build step, no rebuild trigger, no waiting.

  • ✓Public, read-only content API — no key required for reads
  • ✓Edge-cached, CORS-open responses for your live sites
  • ✓Scoped API keys (read / write / admin) for automation
  • ✓Outbound webhooks for content and media events
  • ✓Per-plan rate limits on dashboard APIs

[ Dashboard ]

Unified client dashboard

One dashboard per organisation — same URL, same shell, same tooling. Multi-org users switch with one click.

  • ✓Org-scoped URLs (`app.exerax.com/{slug}/dashboard`)
  • ✓Pages, content, media, analytics, integrations, settings
  • ✓Six built-in roles with granular permissions
  • ✓Native block editor (TipTap) for rich text
  • ✓Audit log per organisation

[ AI Builder ]

AI website builder

Describe what you want, upload brand assets, get a production-quality Next.js site deployed to Cloudflare Pages in minutes.

  • ✓Choose Claude (Anthropic) or OpenAI per build
  • ✓Iterative re-prompting — "make the hero darker"
  • ✓Production restricted to add/edit only — no destructive AI on live sites
  • ✓Switch request flow with staff approval before production
  • ✓Generated code is committed to a per-site git branch

[ Security ]

Security by default

The boring stuff that should never be optional, isn't. RBAC, 2FA, audit logs, WAF, DDoS — all on, all the time.

  • ✓Bcrypt(12) password hashing, AES-256 at rest for integration keys
  • ✓TOTP-based 2FA on every account
  • ✓Enterprise-grade WAF, DDoS protection & bot filtering
  • ✓HttpOnly + SameSite cookies, CSRF protection on all state-changing endpoints
  • ✓Immutable audit log retained 12 months

[ Analytics ]

Real-time analytics

Visitors, page views, traffic by country, and performance in one place — powered at the edge by Cloudflare, with no third-party trackers to install.

  • ✓Visitors, page views, requests, and bandwidth
  • ✓Traffic by country on an interactive world map
  • ✓Cache hit ratio, threats blocked, and bot traffic
  • ✓Core Web Vitals (LCP, INP, CLS)
  • ✓Privacy-first — no cookie banners, no PII

[ Storage ]

Built-in storage routing

Static files and video live on EXERAX Cloud Storage. You upload, we route, optimise, and CDN-deliver by type.

  • ✓Drag-and-drop media library
  • ✓Auto-routing by MIME type — no per-bucket logic
  • ✓Public CDN URLs with edge caching
  • ✓TipTap inline image uploads route through the same endpoint
  • ✓UK & EU regions for all customer storage

[ Integrations ]

Connect the tools you use

Paste an API key, flip a toggle. Stripe, Mailchimp, SendGrid, Attio, Clerk, Vercel, Umami — all one-click.

  • ✓Stripe Customer Portal embedded in the dashboard
  • ✓Mailchimp opt-in on register and contact forms
  • ✓SendGrid for transactional email
  • ✓Attio CRM sync, Umami analytics, Resend
  • ✓Webhook builder for anything custom

[ RBAC ]

Role-based access

Six client roles, six staff roles. Enforced server-side on every API endpoint. Never trust client claims.

  • ✓Customer roles: Owner, Admin, Editor, Reviewer, Developer, Viewer
  • ✓Staff roles: Super Admin, Sales, CAM, Marketing, Support, Engineer
  • ✓Per-route enforcement — never client-side
  • ✓Shadow login for support (reason required, audit-logged)
  • ✓Session timeout configurable from platform settings
[ Get started ]

Want a closer look?

Sign up free, or talk to sales if you need a deeper conversation about how EXERAX fits into your stack.

Get Started →Talk to Sales