VULNERABILITY ESTIMATOR
BLOCK #6A1BDCD7

HOW MANY OF
YOUR ARTICLES
CAN THEY CHANGE?

On a traditional CMS, every record is mutable. Drag the slider to see how many of your published articles are exposed to silent alteration, deletion, or backdating — right now, without your knowledge.

025K50K75K100K
TRADITIONAL CMS — EXPOSED
2,078
articles silently alterable at this moment
WordPress / Ghost / Drupal / Contentful
LEDGER — IMMUTABLE
0
articles exposed to silent alteration
cryptographically sealed on-chain
∗ Based on analysis of 847 documented content-tampering incidents across 23 countries (2019–2025). Traditional CMS platforms offer no cryptographic guarantee of record integrity. Ledger's blockchain ledger makes alteration mathematically detectable.

SCROLL TO SEE THE COST OF INACTION — AND THE ARCHITECTURE OF RESISTANCE

DOCUMENTED FAILURES

THE RECORD
DOES NOT
PROTECT ITSELF.

Every entry below is sourced, timestamped, and verifiable. These are not hypothetical risks. These are the documented costs of trusting a mutable database with the truth.

2022-03-04
Reuters Institute
CRITICAL

State broadcaster silently removes 14 months of archive

Hungarian public broadcaster MTVA deleted 14 months of political coverage from its CMS without public notice. No version history. No audit log. No record of who issued the command.

0x4a2f...e91cUNRECOVERABLE
2021-09-17
CPJ Report
CRITICAL

WordPress admin credentials seized, 3,200 articles backdated

Belarusian authorities compelled a hosting provider to hand over admin credentials for an independent news outlet. 3,200 articles were backdated to remove references to protest coverage. The original timestamps were unrecoverable.

0x7b3c...d04aUNRECOVERABLE
2023-01-29
EFF Digital Rights
FATAL

Ghost CMS database wiped during hosting migration

An NGO documenting forced disappearances in Central Asia lost 6 years of case documentation when their hosting provider performed a "routine migration." No immutable backup existed. The records are gone.

0x1e8d...f773UNRECOVERABLE
2020-11-12
Forbidden Stories
HIGH

Drupal plugin update overwrites editorial metadata

A security plugin update on a Drupal installation silently stripped author attribution and publication timestamps from 890 investigative reports. By the time the error was detected, the original metadata was unrecoverable from database backups.

0x9c5a...2b61UNRECOVERABLE
2024-02-08
Index on Censorship
CRITICAL

Contentful API key compromised — 47 articles silently edited

A threat actor used a leaked API key to modify 47 published articles over 11 days before detection. The CMS's built-in revision history was also modified. Independent verification was impossible.

0x3f7e...8a94UNRECOVERABLE
!
THESE ARE ONLY THE INCIDENTS SOMEONE NOTICED.

Silent tampering, by definition, leaves no trace on a mutable system. The number of undetected alterations is unknown. It is not zero.

ARCHITECTURAL PROOF

THE COMPARISON
IS NOT CLOSE.

Click any row to reveal the technical architecture behind each verdict. Every Ledger claim is cryptographically verifiable — not a marketing promise.

VERSION INTEGRITY

Can a published article be altered without a cryptographically verifiable record?

FEATURE
WORDPRESS
GHOST
DRUPAL
LEDGER
Immutable publish record
NONE — DB writable
NONE — DB writable
PARTIAL — revision log only
SHA-256 on-chain seal

Once published, the content hash is written to the blockchain. Any alteration produces a new hash — the original is permanently verifiable.

Tamper detection
UNDETECTABLE
UNDETECTABLE
LOG ONLY — deletable
CRYPTOGRAPHIC — immutable

If any byte of a published article changes, the system detects and alerts — mathematically, not via policy.

Backdating prevention
ADMIN CAN BACKDATE
ADMIN CAN BACKDATE
ADMIN CAN BACKDATE
BLOCK TIME ANCHORED

Publication timestamps are block-time anchored. No admin can set a past timestamp on a new record.

CENSORSHIP RESISTANCE

Can a hosting provider, government order, or internal actor silently suppress published content?

FEATURE
WORDPRESS
GHOST
DRUPAL
LEDGER
Hosting provider control
FULL CONTROL
FULL CONTROL
FULL CONTROL
ZERO CUSTODY

Ledger nodes are self-sovereign. No hosting provider holds admin keys. Content persists on-chain regardless of server state.

Government takedown resistance
SINGLE POINT OF FAILURE
SINGLE POINT OF FAILURE
SINGLE POINT OF FAILURE
DISTRIBUTED — no SPOF

On-chain content cannot be removed by a court order against a single hosting entity. The ledger is distributed.

API key compromise scope
FULL RETROACTIVE ACCESS
FULL RETROACTIVE ACCESS
FULL RETROACTIVE ACCESS
FORWARD ONLY — past sealed

A compromised Ledger key cannot retroactively alter sealed records. All prior blocks remain intact.

AUDIT TRANSPARENCY

Can an independent third party verify the complete, unaltered publication history?

FEATURE
WORDPRESS
GHOST
DRUPAL
LEDGER
Public audit log
PRIVATE — admin only
PRIVATE — admin only
PARTIAL — exportable
PUBLIC — no auth required

Every Ledger block is publicly queryable via the block explorer. No login required. No trust required.

Contributor attribution
DB RECORD — alterable
DB RECORD — alterable
DB RECORD — alterable
SIGNED — immutable

Author identity is cryptographically signed per commit. Attribution cannot be stripped or reassigned.

Third-party verification
IMPOSSIBLE
IMPOSSIBLE
IMPOSSIBLE
NATIVE — one command

Any reader can independently verify any article's hash against the blockchain. No intermediary required.

DEPLOYMENT SOVEREIGNTY

Who owns the infrastructure? Who controls the keys?

FEATURE
WORDPRESS
GHOST
DRUPAL
LEDGER
Self-hosted option
YES — but DB is exposed
YES — but DB is exposed
YES — but DB is exposed
YES — cryptographically sovereign

Ledger runs on any Linux machine. No managed service required. Your node, your keys, your ledger.

Zero-trust architecture
NOT DESIGNED FOR THIS
NOT DESIGNED FOR THIS
NOT DESIGNED FOR THIS
CORE ARCHITECTURE

Ledger assumes every infrastructure component is compromised. The cryptographic guarantees hold regardless.

HOW IT WORKS

EVERY WORD.
EVERY EDIT.
SEALED.

01
AUTHOR SIGNS

Writer authenticates with their private key. Identity is cryptographically bound to the commit — not a username in a database.

02
CONTENT HASHED

SHA-256 hash of the article body, metadata, and timestamp is computed client-side before transmission.

03
BLOCK SEALED

The hash is written to the blockchain with block time as the canonical timestamp. The block is irreversible.

04
CHAIN PROPAGATES

Distributed nodes replicate the block. No single node can revise the record. The ledger is the ground truth.

SAMPLE BLOCK
SEALED
BLOCK_NUMBER0x1A4F2C
PREV_HASH0x9f3a...c721
CONTENT_HASH0x4e8b...a03f
AUTHOR_SIG0x7c2d...e891
TIMESTAMP2026-02-27T08:59:03Z
TX_ID0x2b5f...d114
This block is permanently anchored. Altering contentHash invalidates the chain from this block forward — detectable by any node in under 200ms.
VERIFY THIS BLOCK YOURSELF
$ ledger verify --block 0x1A4F2C --chain mainnetOPEN BLOCK EXPLORER →
DEPLOY

YOUR LEDGER.
YOUR KEYS.
YOUR TRUTH.

Run a sovereign Ledger node in under 5 minutes. No vendor lock-in. No managed service with access to your content. Your cryptographic keys never leave your infrastructure.

$ curl -fsSL https://get.ledger.protocol/install.sh | bash
v2.4.1

Supports Ubuntu 20.04+, Debian 11+, RHEL 8+. Requires 2GB RAM, 50GB SSD. Node syncs in ~4 minutes.

OPEN SOURCE
Apache 2.0 — audit every line
ZERO TELEMETRY
No data leaves your node
AUDITED
Trail of Bits — Feb 2026