Drupal maintenance, properly done.
Security updates are the core of what we do. But keeping a Drupal site healthy — secure, stable, and on supported software — goes further than that. Here's everything we help with.
Security updates, applied within days.
The Drupal Security Team publishes advisories for core and contributed modules covering everything from SQL injection vulnerabilities to authentication bypasses. These are real risks, not theoretical ones — and they come with public disclosure.
Nodely monitors the Drupal security feed continuously. When an advisory drops, we review it, test the update against your site's configuration, and deploy it — typically within a few working days of the release. Public disclosure and deployment happen close together, not weeks apart.
What's included
- Continuous monitoring of Drupal security advisories
- Advisory review against your site's specific setup
- Pre-deployment backup
- Testing on staging before production deploy
- Production deployment with rollback capability
- Monthly report of all updates applied
- Direct notification for anything needing your attention
Covers: Drupal core security releases · Security-tagged contrib releases · Critical patches between major releases
Drupal version status
Still on Drupal 7 or 9? It's time to move.
Drupal 7 reached end of life in January 2025. Drupal 9 reached end of life in November 2023. Running either means your CMS has no security team behind it — and no patches coming, ever.
Upgrading between Drupal major versions isn't like a module update. It requires an upgrade path assessment, module compatibility review, and often custom code migration. It's a proper piece of work — but it's a well-understood one, with a clear process and a predictable outcome.
We assess your site, map the upgrade path, and carry out the migration to Drupal 10 or 11. We'll tell you honestly what's involved before we start, and work to a timeline that doesn't disrupt live operations.
Contrib module management.
Security advisories are the priority. But contrib modules (the add-ons and extra features your site uses on top of Drupal itself) also need regular updates to stay compatible with current Drupal versions, fix bugs, and remain supported by their maintainers.
We track the full picture: deprecated APIs, compatibility across your module stack, and maintainer activity — so you always know where things stand before a problem surfaces.
The base plan covers security releases. Broader contrib module maintenance — keeping your full stack current — is available as an add-on. We'll review your module list and tell you what makes sense.
What we manage
- Security-tagged contrib releases (base plan)
- Full contrib module updates (add-on)
- Compatibility review before updates
- Identification of unmaintained or abandoned modules
- Advice on module replacements where needed
- Staging tests after all updates
Monthly report covers
- All security advisories issued that month
- Updates applied and deployment dates
- Staging test results
- Current Drupal core version
- Current PHP version
- Open advisories awaiting stable patch
- Anything flagged for your attention
Monthly reports you'll actually read.
Every month you get a clear record of what we did: which advisories were issued, which updates were applied, what each one covered, and what we checked before deploying.
No stats to justify our existence, no padding. A straightforward record of the work — useful for audit trails, compliance requirements, or forwarding to a stakeholder who wants to know the site is being looked after.
If there's anything that needs your decision — a major update with breaking changes, an advisory with no patch yet — you hear about it when we do, not at the end of the month.
Ad hoc Drupal development.
We're Drupal developers, not an update bot. If you need custom code work alongside maintenance — bug fixes, configuration changes, small feature additions — we can scope and handle that too.
This isn't a separate retainer or a new contract. It's a conversation about what you need, a clear quote, and work delivered against that scope.
Good examples of work we handle: custom module fixes after a Drupal upgrade, Views configuration, content type changes, migration scripts, performance diagnostics, third-party integrations.
What we can help with
- Custom module fixes and updates
- Theme and template fixes
- Views, rules, and workflow configuration
- Content type and field changes
- Performance diagnosis and optimisation
- Migration scripts between Drupal versions
- Third-party API integrations
- Hosting environment setup and configuration
Start with a free site check.
Send us your site URL and we'll assess your current security posture — Drupal version, outstanding advisories, and anything obvious to address.