--- title: "Drupal 7 End of Life: 24,332 Websites Still Run It" url: https://www.suffdigital.com/resources/data-studies/drupal-7-sites-after-end-of-life description: "Drupal 7 end of life came on January 5, 2025, yet 24,332 websites still run it, 21% of Drupal sites with a detectable version. See the data." lang: en --- Share Share on X: https://twitter.com/intent/tweet?url=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fdrupal-7-sites-after-end-of-life&text=24%2C332%20Websites%20Still%20Run%20Drupal%207%2C%2020%20Months%20After%20Security%20Support%20Ended Share on Facebook: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fdrupal-7-sites-after-end-of-life Share on LinkedIn: https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fdrupal-7-sites-after-end-of-life Share on Reddit: https://www.reddit.com/submit?url=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fdrupal-7-sites-after-end-of-life&title=24%2C332%20Websites%20Still%20Run%20Drupal%207%2C%2020%20Months%20After%20Security%20Support%20Ended **24,332** websites still run Drupal 7, more than 20 months after it stopped receiving security fixes on January 5, 2025. That is 21% of Drupal websites with a detectable version, and 1,005 of them rank among the 1 million most visited websites. Analysis of 141,306 Drupal homepages · the public HTTP Archive crawl, September 2026 ## Key Findings 1. 1. **24,332** websites still run Drupal 7, which stopped receiving security fixes on January 5, 2025. Copy stat 2. 2. **21%** of Drupal websites with a detectable version still run Drupal 7, and 17.2% of all Drupal homepages do. Copy stat 3. 3. **24.4%** of Drupal websites outside the 10 million most visited run Drupal 7, more than twice the 11.4% of the 10,000 most visited. Copy stat 4. 4. **1,005** Drupal 7 websites rank among the 1 million most visited websites, including 5 among the 10,000 most visited. Copy stat 5. 5. Drupal homepages fell from **185,552** in October 2024 to 141,306 in September 2026. Copy stat ## Summary A university department's website has run on Drupal 7 for twelve years. It works, the staff know how to edit it, and rebuilding it has never reached the top of the budget. Since January 2025, though, any new security hole found in Drupal 7 stays open unless someone pays a third party to fix it. Drupal is an open-source content management system used by many universities, governments and large organizations. The Drupal Security Team stopped releasing fixes for version 7 on January 5, 2025. Moving from Drupal 7 to a current version is close to a full rebuild, which explains why so many websites have waited, and every month they wait, fewer developers still work on the old version. **24,332** websites still run Drupal 7, 21% of Drupal websites with a detectable version, about one in five. Most are less-visited websites, but 1,005 rank among the 1 million most visited. ## What we measured We counted homepages running Drupal in the September 2026 HTTP Archive crawl, a public project that loads millions of homepages each month and records the technologies they use: 141,306 in all. For the 115,809 where the major version was visible, we recorded it, and we split the results by how popular each website is, from the 10,000 most visited to those outside the top 10 million. End of life means the software's makers no longer release security fixes or updates for it. A major version is the main release number, such as Drupal 7 or Drupal 10. "Drupal 8 and newer" groups every version from 8 onward. ## One in five Drupal websites runs a version past end of life 21% of Drupal websites with a detectable version still run Drupal 7. That is 24,332 websites, or 17.2% of all Drupal homepages including those that hide their version. Each one runs core software that no longer receives security fixes from the Drupal project, unless the owner pays for extended support from an outside vendor. The rest of the Drupal world is not fully covered either. Drupal 8 and 9 have also reached end of life, and they are counted inside the 91,461 websites running Drupal 8 and newer. The share of Drupal websites on a supported major version is lower than the 79% that the Drupal 8 and newer figure suggests. ## Less-visited Drupal websites are the slowest to upgrade The Drupal 7 share is lowest among popular websites and highest among the least visited. Around 9% to 11% of Drupal websites in the 100,000 most visited are on version 7; beyond the top 10 million it is 24.4%, nearly one in four. The less-visited web also holds most of the Drupal 7 websites in absolute terms: 23,327 of the 24,332 sit outside the 1 million most visited. Share of versioned by website popularity 10,000 most visited 11.4% 10,000 to 100,000 8.6% 100,000 to 1 million 11.8% 1 million to 10 million 20.2% Beyond the top 10 million 24.4% All websites 21% Source: Suff Digital analysis of 141,306 Drupal homepages · the public HTTP Archive crawl, September 2026 | Website popularity | Drupal homepages | With version | Drupal 7 | Share of versioned | Drupal 8 and newer | | --- | --- | --- | --- | --- | --- | | 10,000 most visited | 70 | 44 | 5 | 11.4% | 39 | | 10,000 to 100,000 | 872 | 584 | 50 | 8.6% | 534 | | 100,000 to 1 million | 10,561 | 8,025 | 950 | 11.8% | 7,075 | | 1 million to 10 million | 81,367 | 66,778 | 13,482 | 20.2% | 53,285 | | Beyond the top 10 million | 48,436 | 40,378 | 9,845 | 24.4% | 30,528 | | All websites | 141,306 | 115,809 | 24,332 | 21% | 91,461 | Popular websites are not clear of it. 1,005 Drupal 7 websites rank among the 1 million most visited, and 5 of the 44 Drupal homepages with a readable version among the 10,000 most visited still run Drupal 7. The 1,005 carry the most traffic, so they have the most to lose from running without core security patches. ## Fewer Drupal websites overall The version problem sits inside a shrinking base. Drupal homepages in the HTTP Archive crawl fell from 185,552 in October 2024 to 141,306 in September 2026. Since moving from Drupal 7 to Drupal 10 or 11 is close to a full rebuild anyway, that rebuild is also the natural moment to choose a different platform. That makes the Drupal 7 decision a platform decision. An organization rebuilding its website has three routes: a current version of Drupal, another content management system, or a hosted builder. Each involves moving years of content, custom page addresses and the backlinks that point at them. ## What this means for organizations running Drupal 7 If you are on Drupal 7, you have two sensible options. Buy extended support from a vendor that still patches Drupal 7 while you plan a move, or rebuild on Drupal 10 or 11 or on another platform. Staying on unsupported Drupal 7 with no source of security patches is the one option to avoid. Treat the rebuild as a migration as well as a redesign. Drupal 7 websites often have years of content, custom page addresses and backlinks that need redirects. Our drupal migration services (https://www.suffdigital.com/services/website-migration/drupal-migration) map every old address to its new home and test the redirects before launch, so the new website keeps the search traffic the old one earned. ## Embed this research Paste this on your site to embed the charts. It links back to the source automatically.

Source: 24,332 Websites Still Run Drupal 7, 20 Months After Security Support Ended - Suff Digital

## Cite this study APA Suff Digital. (2026). 24,332 Websites Still Run Drupal 7, 20 Months After Security Support Ended. https://www.suffdigital.com/resources/data-studies/drupal-7-sites-after-end-of-life Plain link 24,332 Websites Still Run Drupal 7, 20 Months After Security Support Ended - Suff Digital - https://www.suffdigital.com/resources/data-studies/drupal-7-sites-after-end-of-life ## Frequently asked questions ### How many websites still run Drupal 7? ### When did Drupal 7 support end? ### Do any popular websites still use Drupal 7? ### Which websites are most likely to still run Drupal 7? ## Related studies - Website Migration Drupal Runs on 23.8% Fewer Websites Than Two Years Ago: https://www.suffdigital.com/resources/data-studies/drupal-market-share-2026 - Website Migration 1,669 Online Stores Still Run Magento 1, Six Years After Support Ended: https://www.suffdigital.com/resources/data-studies/magento-1-stores-still-running - Website Migration 382,097 Websites Still Load a Google Analytics Tag That Stopped Working in 2023: https://www.suffdigital.com/resources/data-studies/universal-analytics-still-installed - Website Migration Shopify Won 41% of Websites That Switched Platforms in Six Months: https://www.suffdigital.com/resources/data-studies/website-platform-switching-rate ## Structured data ```json [ { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://www.suffdigital.com/#organization", "name": "Suff Digital", "alternateName": "Suff Digital Marketing", "url": "https://www.suffdigital.com/", "logo": { "@type": "ImageObject", "@id": "https://www.suffdigital.com/#logo", "url": "https://www.suffdigital.com/logo.png", "contentUrl": "https://www.suffdigital.com/logo.png", "caption": "Suff Digital" }, "image": { "@id": "https://www.suffdigital.com/#logo" }, "description": "Suff Digital is a full-stack digital marketing agency that turns websites into predictable revenue engines, SEO, paid media, content, CRO, and web design built around revenue, not vanity metrics.", "slogan": "Digital marketing built for what's next.", "email": "hello@suffdigital.com", "telephone": "+1-629-236-0099", "foundingDate": "2022", "founder": { "@type": "Person", "name": "Matt Suffoletto", "jobTitle": "Founder & CEO" }, "contactPoint": [ { "@type": "ContactPoint", "telephone": "+1-629-236-0099", "email": "hello@suffdigital.com", "contactType": "sales", "areaServed": "US", "availableLanguage": [ "en" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Nashville", "addressRegion": "TN", "postalCode": "37219", "addressCountry": "US" }, "areaServed": { "@type": "Country", "name": "United States" }, "sameAs": [ "https://www.linkedin.com/company/suff-digital/", "https://www.instagram.com/suffdigital/", "https://www.youtube.com/@suffdigitalmarketing", "https://www.tiktok.com/@suffdigital" ], "knowsAbout": [ "Search Engine Optimization", "Pay-Per-Click Advertising", "Paid Social Advertising", "Conversion Rate Optimization", "Web Design", "Digital PR", "Link Building", "Website Migration", "Website Maintenance and Support", "Technical SEO", "Local SEO", "AI Search Optimization" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Suff Digital Services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Search Engine Optimization (SEO)", "url": "https://www.suffdigital.com/" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Pay-Per-Click (PPC) Advertising", "url": "https://www.suffdigital.com/services/ppc" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Paid Social Advertising", "url": "https://www.suffdigital.com/services/paid-social" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Conversion Rate Optimization (CRO)", "url": "https://www.suffdigital.com/services/cro" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Web Design", "url": "https://www.suffdigital.com/services/web-design" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Digital PR & Link Building", "url": "https://www.suffdigital.com/services/digital-pr" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Website Migration", "url": "https://www.suffdigital.com/services/website-migration" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Website Maintenance & Support", "url": "https://www.suffdigital.com/services/website-maintenance" } } ] } }, { "@type": "WebSite", "@id": "https://www.suffdigital.com/#website", "url": "https://www.suffdigital.com/", "name": "Suff Digital", "inLanguage": "en-US", "publisher": { "@id": "https://www.suffdigital.com/#organization" } } ] }, { "@context": "https://schema.org", "@graph": [ { "@type": "Article", "@id": "https://www.suffdigital.com/resources/data-studies/drupal-7-sites-after-end-of-life#article", "headline": "24,332 Websites Still Run Drupal 7, 20 Months After Security Support Ended", "description": "24,332 websites still run Drupal 7, more than 20 months after it stopped receiving security fixes on January 5, 2025. That is 21% of Drupal websites with a detectable version, and 1,005 of them rank among the 1 million most visited websites.", "image": [ "https://www.suffdigital.com/images/suff-digital-share-16x9.jpg" ], "url": "https://www.suffdigital.com/resources/data-studies/drupal-7-sites-after-end-of-life", "datePublished": "2026-09-24", "dateModified": "2026-09-24", "author": { "@type": "Person", "name": "Matt Suffoletto", "jobTitle": "Founder & CEO", "url": "https://www.suffdigital.com/who-we-are" }, "publisher": { "@id": "https://www.suffdigital.com/#organization" }, "mainEntityOfPage": { "@id": "https://www.suffdigital.com/resources/data-studies/drupal-7-sites-after-end-of-life", "@type": "WebPage" }, "isPartOf": { "@id": "https://www.suffdigital.com/#website" } }, { "@type": "BreadcrumbList", "@id": "https://www.suffdigital.com/resources/data-studies/drupal-7-sites-after-end-of-life#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://www.suffdigital.com/" }, { "@type": "ListItem", "position": 2, "name": "Resources", "item": "https://www.suffdigital.com/resources" }, { "@type": "ListItem", "position": 3, "name": "Data Studies", "item": "https://www.suffdigital.com/resources/data-studies" }, { "@type": "ListItem", "position": 4, "name": "24,332 Websites Still Run Drupal 7, 20 Months After Security Support Ended" } ] }, { "@type": "Dataset", "@id": "https://www.suffdigital.com/resources/data-studies/drupal-7-sites-after-end-of-life#dataset", "name": "24,332 Websites Still Run Drupal 7, 20 Months After Security Support Ended", "description": "24,332 websites still run Drupal 7, more than 20 months after it stopped receiving security fixes on January 5, 2025. That is 21% of Drupal websites with a detectable version, and 1,005 of them rank among the 1 million most visited websites.", "url": "https://www.suffdigital.com/resources/data-studies/drupal-7-sites-after-end-of-life", "creator": { "@id": "https://www.suffdigital.com/#organization" }, "datePublished": "2026-09-24", "dateModified": "2026-09-24", "license": "https://creativecommons.org/licenses/by/4.0/", "isAccessibleForFree": true, "measurementTechnique": "The public HTTP Archive crawl, September 2026" }, { "@type": "FAQPage", "@id": "https://www.suffdigital.com/resources/data-studies/drupal-7-sites-after-end-of-life#faq", "mainEntity": [ { "@type": "Question", "name": "How many websites still run Drupal 7?", "acceptedAnswer": { "@type": "Answer", "text": "24,332 websites ran Drupal 7 in the September 2026 HTTP Archive crawl, 21% of Drupal websites with a detectable version." } }, { "@type": "Question", "name": "When did Drupal 7 support end?", "acceptedAnswer": { "@type": "Answer", "text": "Drupal 7 reached end of life on January 5, 2025, when the Drupal Security Team stopped releasing fixes for it. 24,332 websites still ran it in September 2026." } }, { "@type": "Question", "name": "Do any popular websites still use Drupal 7?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. 1,005 Drupal 7 websites rank among the 1 million most visited websites, including 5 among the 10,000 most visited." } }, { "@type": "Question", "name": "Which websites are most likely to still run Drupal 7?", "acceptedAnswer": { "@type": "Answer", "text": "Less-visited ones. 24.4% of Drupal websites outside the 10 million most visited run Drupal 7, against 11.4% of Drupal websites among the 10,000 most visited." } } ] } ] } ] ```