What end of life means

The Drupal community stopped releasing security fixes for Drupal 7 in January 2025. The site still works. The risk is in what happens next: a new vulnerability with no official patch, a hosting company that drops old PHP versions, a module that quietly stops working.

Paid extended support exists. Certified vendors still sell security fixes for Drupal 7, and one offers free coverage through January 2027 to sites on its partner host. That buys time. It doesn't get you off Drupal 7.

You're not alone

More than a hundred thousand sites still run Drupal 7, by most counts. A lot of them belong to nonprofits and universities, where the site still works and nobody owns the problem.

How I'd approach it

  1. An assessment first: a Site Checkup for $595. I inventory the content types, modules, custom code and integrations, then tell you what moving would actually involve.
  2. A choice, with numbers: current Drupal or WordPress, based on what the site does and who edits it, with a quote for each phase.
  3. The move, in capped phases. Content migrated, URLs kept or redirected, nothing dropped quietly.
  4. Care afterwards, on a monthly plan, if you want it.

Why me

I kept a university's flagship magazine running through every Drupal upgrade from version 6 to 11, plus its alumni and giving sites. I've moved sites off Drupal when that was the right call, and kept them on it when it wasn't. I'll tell you which one I'd pick for yours.

Ask about getting off Drupal 7

Got a site that needs looking after?

Tell me what it runs on and what's bothering you. I'll reply within one business day. Working out whether I can help costs nothing.

Tell me about your site or email joe@joehahn.dev