Just Two Months to Drupal 7's Final End-of-Life. What Lies Ahead?

After over a decade of service, Drupal 7 security support will officially conclude on January 5, 2025. This end date signifies the last extension, marking 14 years since Drupal 7’s original release. After this, Drupal 7 will no longer receive security updates or compatibility fixes. Sites running Drupal 7 beyond this date will be vulnerable to security risks and may not comply with standards such as FedRAMP, PCI, HIPAA, and SOC 2.

To support site owners, the Drupal Association and Drupal Security Team have provided resources and certified migration partners to help transition from Drupal 7. Migrating to a newer version, like Drupal 10 or 11, ensures continued security and access to advanced features.

For those unable to migrate by January 2025, the Extended Security Support (ESS) Provider Program offers continued security from certified vendors, including HeroDevs, Tag1 Consulting, and DropSolid. This program provides a bridge for those who need more time to migrate.

Whether migrating independently or using a certified partner, Drupal has resources to guide you. Transparent communication with stakeholders about your security plan is essential to maintain trust and compliance during this transition. Visit the Drupal Migration Resource Center to explore support options and prepare your site’s future beyond Drupal 7.