From the blog

Drupal security, explained plainly.

Practical guides on Drupal security advisories, PHP version support, Drupal upgrades, and what it all means for teams running live sites.

Security

Drupal security advisories: what actually happens when one lands

Most people know security advisories exist. Far fewer know how the process works — from discovery to disclosure to patch.

4 Nov 2026 · Nodely
Security

What actually happens when a Drupal security update gets skipped

Skipping a Drupal security update feels low-risk in the moment. Here's what actually happens over time — and why the window to act closes faster than most people expect.

29 Oct 2026 · Nodely
Upgrades

Drupal 7 reached end of life in January 2025. Here's what that actually means.

Drupal 7 no longer receives security updates. If your site is still running it, here's what end of life means in practice — and what your options are.

21 Oct 2026 · Nodely
PHP

PHP end of life: the security risk hiding underneath your Drupal site

Drupal security updates patch Drupal. But if your server is running an end-of-life PHP version, no Drupal update can cover that gap.

13 Oct 2026 · Nodely
Security

Your Drupal site has more moving parts than you might think

Most people know Drupal core needs security updates. Fewer know the modules — the add-ons that make your site work — need them too, and just as urgently.

7 Oct 2026 · Nodely
Maintenance

What to look for in a Drupal maintenance service

Not all Drupal maintenance services are the same. Here's what actually matters when choosing one — and a few questions worth asking before you sign up.

29 Sep 2026 · Nodely

Not sure where your site stands?

Send us your URL and we'll run a free Drupal security health check — Drupal version, outstanding advisories, and anything that needs addressing.

Get a free site check