Drupal 7 no longer gets security updates
Community security support for Drupal 7 ended on January 5, 2025. Unpatched sites carry growing security and compliance risk.
Source: Drupal.org: Drupal 7 support
Drupal 7 stopped receiving security updates in January 2025, and Drupal 10 follows on December 9, 2026. We move your content, structure, and URLs to WordPress, redirect every page we find in your sitemap, Search Console, analytics, and backlinks, and monitor search for 90 days after launch.
Two support deadlines in two years have left many Drupal site owners choosing between an upgrade, paid extended support, or a move.
Community security support for Drupal 7 ended on January 5, 2025. Unpatched sites carry growing security and compliance risk.
Source: Drupal.org: Drupal 7 support
After that date there are no new Drupal 10 releases, including security fixes. The supported path inside Drupal is an upgrade to Drupal 11.
Source: Drupal core release schedule
Drupal’s share of sites with a known CMS fell from 1.8% at the start of 2023 to 0.9% in October 2026. Fewer sites usually means fewer developers and fewer maintained modules.
Source: W3Techs
Pages and articles move directly. Menus, taxonomies, and URL patterns need some reshaping. Custom modules are rebuilt.
| Item | What happens | How we handle it |
|---|---|---|
| Nodes (pages, articles, custom content types) | Moves unchanged | Each content type becomes a WordPress post type, with its fields mapped across. |
| Taxonomy terms | Moves unchanged | Vocabularies become categories, tags, or custom taxonomies, keeping their hierarchy. |
| Files and images | Moves unchanged | Files under /sites/default/files are moved and their URLs redirected or preserved. |
| URL aliases | Moves, with changes | Pathauto aliases are recreated as WordPress permalinks wherever the pattern allows. The rest are redirected. |
| Users | Moves, with changes | Accounts and roles move. Drupal 7 passwords can’t be read by WordPress, so those users reset their password or we add a compatibility step. Many Drupal 10 passwords carry over as they are. |
| Paragraphs and field collections | Rebuilt | Rebuilt as blocks or structured fields so editors keep the same flexibility. |
| Views and listing pages | Rebuilt | Rebuilt as WordPress templates and queries with the same URLs. |
| Webforms | Rebuilt | Rebuilt in a WordPress form plugin, with past submissions exported for your records. |
| Custom modules | Rebuilt | Replaced with a maintained plugin or rebuilt as custom code. We agree on each one with you in the scoping call. |
Redirects and URLs
Drupal sites often have several URLs for the same content. Each of them needs its own redirect, including the /node/ paths hidden behind your page addresses.
Every node also lives at /node/123 and every term at /taxonomy/term/45. Older links and some backlinks still point there.
Drupal URLs usually have no trailing slash; WordPress adds one by default. We match the old format or redirect consistently so nothing loops.
Drupal counts pages from zero, so ?page=1 is the second page. WordPress uses /page/2/. Paged archives that rank need rules that account for the offset.
PDFs and images linked from other sites live under /sites/default/files. We keep those paths working or redirect them individually.
Language prefixes like /es/ must map to the same structure in WordPress, or each language loses its rankings separately.
Send your site. We review it and send a quote and timeline within one business day.
We map every old page to its new address, rebuild your templates, and move content, images, and SEO settings on a private preview site you can check.
We compare the old and new sites page by page, point your domain to the new site, tell Google about the new pages, and test each redirect once it’s live.
For 90 days we watch which pages Google indexes and how much traffic your moved pages get. Anything our work caused, we fix at no cost, with reports at 30, 60, and 90 days.
Send your site and we’ll quote it within one business day.
For Drupal 7 sites already out of support, and Drupal 10 sites losing it on December 9, 2026.
From$4,500
Typical timeline4–10 weeks
“From” is the starting price for the kind of site described. Prices depend on your site’s size and setup. You get a quote before any work starts, and we don’t bill by the hour.
Nobody can promise rankings after a migration, and we don’t. We commit in writing to the process that protects them.
Every address we find in your sitemap, Search Console, analytics, and backlinks gets a destination: a matching page, the closest match, or a planned removal. You see the full list before launch.
Pages you choose to retire are removed on purpose. If any other old link stops working after launch, we fix it.
We watch which pages Google indexes, any errors it reports, and traffic to your moved pages for 90 days, with a report at 30, 60, and 90 days.
If something we missed or broke causes a problem in those 90 days, we fix it at no cost.
The guarantee covers our work. It doesn’t cover Google algorithm updates, content you change after launch, pages removed at your request, or problems caused by your host, third-party plugins, or other vendors.
If your site relies on fine-grained permissions, complex editorial workflows, or deep multilingual configuration, upgrading to Drupal 11 may cost less than rebuilding those features in WordPress. Paid extended support for Drupal 7 also exists if you need more time. It only postpones the move, though that can be worth it in a busy year.
Ask if you should stay on DrupalCommon questions about moving from Drupal to WordPress.
Yes. Drupal 7 doesn’t need to be upgraded first. We read content straight from the Drupal 7 database and map it into WordPress.
We keep URLs identical wherever WordPress allows it. Every URL that does change gets a one-to-one redirect, including /node/ system paths and old aliases.
Accounts and roles move across. WordPress can’t read Drupal 7 passwords, so we either add a compatibility step or send those users a reset link at launch. Drupal 10 sites often use a password format WordPress already accepts, which we check during scoping.
Most sites under 50 pages take about four weeks. Larger sites with custom modules take longer, and you get a timeline with your quote.
Sometimes. If your team depends on Drupal-specific features, an upgrade can be cheaper. We price the upgrade and the move side by side before you commit.
Drupal sites tend to lose traffic through the URLs nobody sees: /node/ paths, old aliases, paged listings, and files under /sites/default/files. We map all of them, test for broken links before launch, monitor search for 90 days, and fix anything our work caused at no charge.
Share your site and we’ll send a quote and timeline within one business day.