Clock's Ticking: One Month Until Drupal 7 End-of-Life

The Drupal Association has issued a final reminder that Drupal 7 will reach its End of Life on 5 January 2025, marking 14 years since its release. From that date, Drupal 7 will no longer receive security updates, leaving websites using the platform vulnerable to security breaches and compatibility issues. With only one month remaining, the Drupal Association urges site owners to complete any final preparations to migrate their websites or implement alternative solutions. To assist with this transition, a dedicated Drupal 7 migration resource page provides guidance and support.

For those planning to remain on Drupal 7 temporarily, the association recommends the Drupal 7 Extended Security Support (ESS) Program. Certified ESS partners offer ongoing security updates and monitoring, helping to mitigate risks for sites that cannot immediately migrate. For those ready to transition to newer versions of Drupal, certified migration partners are available to help with content strategy, site audits, and the migration process, ensuring a smooth upgrade to modern Drupal. Stories from organizations that have already migrated are available on the case studies page to provide insight and encouragement for the transition.

The Drupal Association also stresses the importance of transparency for organizations unable to migrate or enroll in extended support. Communicating plans with users, managers, CISOs, and other stakeholders about how security and potential vulnerabilities will be managed is crucial for maintaining trust and compliance. The Drupal Association remains committed to supporting the community during this final stage of Drupal 7’s lifecycle and encourages all users to take the necessary steps to secure their websites before the deadline.