24,332 Websites Still Run Drupal 7, 20 Months After Security Support Ended

    24,332 websites still run Drupal 7, more than 20 months after it stopped receiving security fixes on January 5, 2025. That is 21% of Drupal websites with a detectable version, and 1,005 of them rank among the 1 million most visited websites.

    Share of versioned by website popularity
    10,000 most visited
    11.4%
    10,000 to 100,000
    8.6%
    100,000 to 1 million
    11.8%
    1 million to 10 million
    20.2%
    Beyond the top 10 million
    24.4%
    All websites
    21%

    Source: Suff Digital analysis of 141,306 Drupal homepages · the public HTTP Archive crawl, September 2026

    Source: 24,332 Websites Still Run Drupal 7, 20 Months After Security Support Ended - Suff Digital