Managing Drupal content with ChatGPT and MCP
ChatGPT can be a Drupal editorial assistant, but it should not be an admin user with a password. MCP makes it possible to build limited, auditable tools.
AI agents do not only read web pages: how to make a Drupal site understandable and safe for machines
In the age of AI agents, it is no longer enough for a website to be readable by humans. A large organisation's Drupal platform also needs to be understandable, verifiable and safe for machines.
Drupal 7 Migration Statistics in 2026: What the Numbers Really Mean
Drupal 7 is no longer a supported platform in 2026, but usage statistics show that migration debt remains a live issue for many organizations.
Drupal scanner: a public pre-check before maintenance or upgrades
The Drupal platform assessment gives an initial public-data-based view of whether a website may need maintenance, upgrades or a deeper audit.
Why an old website can be a business risk
If a website works only as long as nobody changes it, it is already a business risk.
Drupal security updates — why they cannot be postponed
Drupal publishes security updates through a structured process. Applying them requires Composer, testing and staged deployment — not just clicking update.
Drupal roles, permissions and editorial workflow
Permissions are not only about access. They affect content quality and security.
What happens when a Drupal site is not updated
An outdated Drupal site does not break overnight, but the risk grows every month. Security vulnerabilities, end-of-life PHP, broken modules and rising remediation costs.
How to check if a Drupal module is risky
One old module can keep the whole site stuck on an old version.
Drupal PHP version and hosting requirements
Drupal maintenance also covers the server PHP version, CLI PHP, Composer and backups because each can block a future upgrade.
Drupal 7 in 2026: what to do with an old site
A Drupal 7 site may still run, but technical and security risk grows every month.
Drupal security in practice — what actually happens when you skip updates
Drupalgeddon, SA-CORE-2018-002, CVE-2020-13671 — these are not abstract code numbers. They are vulnerabilities that were exploited at scale. Here is what actually happens.
Drupal security incident plan — what to do when your site is compromised
You cannot plan a security incident — but you can plan your response. Here is a clear plan for what to do when a Drupal site is compromised.
Drupal backup restore test — why "backup exists" is not enough
Many organisations have a backup. Fewer have checked whether it actually works. Here is why a restore test is mandatory.
Need Drupal help?
If the article describes your situation, you do not have to read everything first. A real person will help you choose the next step.