WillItSurvive
Creator economy and media tech · United Kingdom

Ghost

ghost.org ↗

Non-profit, open-source publishing platform for independent newsletter creators.

Hard to displace
Assessed 23 July 2026 · Evidence as of 23 July 2026
Strong structural protection; the business model survives ai pressure.
On the recordSince 23 July 2026 · Checkable from H1 2026 · Every call on the record Checkpoint: Fallout tracking from CVE-2026-26980 SQL injection patch (6.19.1) after ClickFix campaign hit Harvard, Oxford, Auburn, DuckDuckGo
The call

Ghost runs small, profitable, and unsellable by design, while beehiiv and Substack race ahead on growth features it may not chase.

Ghost makes blogging and newsletter software that people pay about $10 million a year to use. It is hard to copy because it is run as a nonprofit foundation that cannot be bought or forced to change by investors, which keeps it stable and focused on users rather than profit chasing. However, beehiiv is winning the race to add features like podcasts and group subscriptions that creators want, while Ghost deliberately stays smaller and slower on artificial intelligence tools, and a serious security hole in early 2026 briefly exposed some major websites to hacking. Neither of these problems threatens Ghost's survival, but both could slowly make it less relevant to new customers looking for the newest features.

Why
01
AI pressure: beehiiv's AI-powered growth and discovery tools. beehiiv adds AI tools for podcasts, social feeds, and discovery while Ghost stays deliberately AI-light, risking growth-segment creators. Could AI do the core job? Unlikely.
02
Bigger players: WordPress/Automattic. Automattic could bolt a focused, modern newsletter product onto WordPress, but has moved slowly on this for years. Could a giant copy it? Probably.
03
What protects it. Non-profit foundation structure with zero external capital blocks acquisition and removes exit pressure entirely.
What would change this call
Ghost ships podcast, social feed, or group subscription features within 12 months. Shows Ghost is responding to beehiiv's feature-parity race instead of ceding growth segment.
Substack changes its revenue-cut model away from percentage fees. Would erode Ghost's 0%-fee differentiation versus Substack.
Reports of unpatched Ghost sites still exploited via CVE-2026-26980 after mid-2026. Would signal reputational damage from the SQL-injection ClickFix campaign persists.
Key numbers
  • $10.5M ARR, 29.7K paying customers (2026-07-09)
  • 13 consecutive profitable years since 2013 (2023-05-02)
  • 34 staff, self-capped near 50 (2025-10-01)
Named risks
  • Critical SQL-injection CVE-2026-26980 exploited in ClickFix campaign hitting major institutions. Severity: high
  • beehiiv and Substack outpacing Ghost on podcast, group-subscription, and social features. Severity: medium
  • Self-imposed ~50-person staff cap may limit capacity to respond to security incidents or scale support. Severity: medium
  • If Substack ever drops its revenue-cut model, Ghost's 0%-fee differentiation weakens. Severity: low
Rivals, as read in July 2026
RivalDirectionEvidence
Substackgaining on63,000+ newsletters vs Ghost's ~25,000 customers as of 2025-04-09, per Digiday
beehiivcontestingMatches Ghost's 0% fee model and outships it on podcast/social features through 2026
WordPress/Automatticgaining onDominant general CMS incumbent could ship a focused newsletter product to erode Ghost's niche
Questions people ask
Is Ghost profitable?
Yes. Ghost states it has been profitable every year since its April 2013 Kickstarter launch, funded by over $8.2 million in customer revenue with zero equity investment, per its own funding FAQ published 2023-05-02.
Who owns Ghost?
Ghost is owned by the Ghost Foundation, a non-profit registered in Singapore. Founders John O'Nolan and Hannah Wolfe hold no equity or IP, and the constitution reportedly bars acquisition, per a November 2024 post by co-founder O'Nolan.
Could AI replace Ghost?
Unlikely to replace its core function. Ghost's value is subscriber-list ownership, payments, and 0% fees, not content generation. Third-party AI writing tools like Skrivia are built as add-ons around Ghost, not replacements, per a Ghost forum post from December 2025.
Who is Ghost's biggest competitor?
Substack, with 63,000+ active newsletters versus Ghost's roughly 25,000 paying customers as of April 2025, per Digiday. beehiiv (26,000+ publishers) matches Ghost on fees and is outshipping it on features like podcasts.
How many employees does Ghost have?
Wikipedia reported 34 full-time staff at the Ghost Foundation as of October 2025. The company has a stated policy of never growing the team beyond roughly 50 people.
Was Ghost CMS hacked?
Yes. A critical SQL-injection flaw, CVE-2026-26980, in versions 3.24.0-6.19.0 was patched February 19, 2026 in 6.19.1, but was exploited in a large-scale ClickFix campaign that compromised sites at Harvard, Oxford, Auburn, and DuckDuckGo.
Timeline
  • 2026-05-24BleepingComputer reports ClickFix campaign exploiting Ghost flaw hit Harvard, Oxford, Auburn, DuckDuckGo
  • 2026-04-29Ghost recognized by UN-endorsed Digital Public Goods Alliance as a digital public good
  • 2026-02-19Ghost patches critical SQL-injection CVE-2026-26980 in version 6.19.1
  • 2025-08-01Ghost 6.0 'Social Web' released with native ActivityPub/Fediverse support
  • 2025-04-09Digiday reports Ghost at ~25,000 customers vs Substack's 63,000+ and beehiiv's 26,000+
  • 2025-03-17Ghost launches public ActivityPub beta for federated social publishing
  • 2024-01-01Platformer (Casey Newton) migrates from Substack to Ghost
  • 2019-10-22Ghost announces $5 million cumulative customer revenue with Ghost 3.0 launch
  • 2017-03-30Ghost's public ChartMogul dashboard shows about $750K annual run rate
  • 2013-04-01Ghost founded by John O'Nolan and Hannah Wolfe after $300,000+ Kickstarter
Revision history
23 July 2026
First assessed. Hard to displace. The text above is fixed as of this date and is not edited afterwards.
In the same band
LINEDouyinWeverse
More in Creator economy and media tech →
Sources