Drupal runs many association, member and government websites in Australia, including GovCMS, the Australian Government’s shared Drupal platform. Drupal is built on PHP and Symfony, where we’ve spent 25 years engineering production software, so we bring a security-first engineering approach to Drupal: custom code reviewed properly, integrations that hold up, and changes tested before they reach production.
Where Drupal versions stand (October 2026): Drupal 7 stopped receiving security updates on 5 January 2025. Drupal 10 reaches end of life on 9 December 2026, the same week Drupal 12 is released. If your site is on Drupal 7 or 10, now is the time to plan the move.
Upgrading Drupal is rarely just a version bump. Custom modules, contributed modules and themes all need checking, and a Drupal 7 site needs a full migration to current Drupal. We audit what you have, give you a fixed quote, and carry content, users and URLs across with redirects, so members and search engines don’t lose their way.
More on Drupal 7 and Drupal 10 end of life and what it means for your site.
Drupal core is well maintained, but custom modules and abandoned contributed modules are where problems hide. We review your custom code, roles and configuration, check every module against published security advisories, and look for signs of compromise. Then we report in plain English, with every finding rated by severity and a fix.
GovCMS is the Australian Government’s shared Drupal platform, used by Commonwealth and state agencies. On self-managed GovCMS sites we can help with development, upgrades and security work. On fully managed sites, where the platform team handles patching, we focus on themes, configuration and accessibility. We test our work against WCAG 2.2 AA.
Book a call and we’ll tell you where your site stands and what it will take to move it forward.
