Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.Congratulations Andrei on your Cyber Security MSc!
We’re big believers in supporting our team’s growth, because when our people develop, our clients benefit too. Whether that’s through industry certifications, new technologies, or further study, we’re always proud to see our team expanding their skills.
Recently, Andrei, one of our Drupal developers, completed a Masters in Information Systems & Cyber Security with the University of Chichester. This was a great personal achievement that also strengthens our collective focus on keeping clients’ websites secure. We gave him the opportunity to reflect on the course and its interplay with work via some questions...
How has studying Cyber Security influenced the way you work?
The course reinforced the importance of thinking about security beyond just code or infrastructure. In my role as a Drupal developer, I now approach projects with a more holistic mindset—considering not only secure coding practices but also risks introduced by third-party modules, integrations, and hosting environments.
How Witze Van der Straeten Uses AI to Build a Figma-to-Drupal Workflow
Oaisys 25 Is Almost Here; Vidit Anjaria Has the Inside Story
Thank you, Drupal Security Team
Today is Thanksgiving in the US. I know it's not a global holiday, but it has me thinking about gratitude, and specifically about a team that rarely gets the recognition it deserves: the Drupal Security Team.
As Drupal's project lead, I'm barely involved in our security work. And you know what? That is a sign that things are working really well.
Our Security Team reviews reports, analyzes vulnerabilities, coordinates patches across supported Drupal versions, and publishes advisories. They work with Drupal module maintainers and reporters to protect millions of websites. They also educate our community proactively, ensuring problems are prevented, not just fixed. It can be a lot of work, and delicate work.
To get an idea of the quality of their work, check out recent advisories at drupal.org/security. I know it's maybe strange to point out security advisories, but their work meets the highest standards of maturity. For example, Drupal is authorized as a CVE Numbering Authority, which means our security processes meet international standards for vulnerability coordination.
Whether you're running a small blog or critical government infrastructure, the Security Team protects you with the same consistency and professionalism.
While I'm on our private security team mailing list, they do all this without needing me to oversee or interfere. In fact, the team handles everything so smoothly that my involvement would only slow them down. In the world of open source leadership, there is no higher compliment I can pay them.
Recommended Vector Databases (VDB) for Drupal – Overview of AI Providers
Vector databases have become a key component of modern AI applications in Drupal. Thanks to integration with the AI Search module, they enable semantic content search, reduction of hallucinations in AI chatbots, and implementation of advanced RAG (Retrieval Augmented Generation) functions. Choosing the right VDB provider can significantly impact the performance, cost, and scalability of your AI solution in your Drupal project.
Our highlights from LocalGov Drupal Week 2025
LocalGov Drupal Week 2025 recap: Explore key takeaways from the conference that brought together brilliant minds to advance public sector digital transformation and build better citizen services.
The Human Edge in Presales: Beating AI-Drafted Drupal Proposals
Infinite scroll with htmx
Several years ago, I built a photo stream on my Drupal-powered website. You can see it at https://dri.es/photos. This week, I gave it a small upgrade: infinite scroll.
My first implementation used vanilla JavaScript using the Intersection Observer API, and it worked fine. It took about 30 lines of custom JavaScript and 20 lines of PHP code.
But Drupal now ships with htmx support, and that had been on my mind. So a couple of hours later, I rewrote the feature with htmx to see if it could do the same job more simply.
It's something I love about Drupal: how we keep adding small, well-chosen features like htmx support. Not flashy, but they quietly make everyday work nicer. Years ago, Drupal was one of the first CMSes to adopt jQuery, and our early adoption helped contribute to its widespread use. Today, we're replacing parts of jQuery with htmx, and Drupal may well be among the first CMSes to ship htmx in core.
Florida DrupalCamp voted best DrupalCamp on the planet (and sessions are now open)!
Keep your Drupal Site Secure: Managing All Keys Safely and Easily with the Key Module
“Where did I put the key?” — you might ask yourself this when searching for your house or car keys, and the same can happen on a Drupal site. Almost all modern websites rely on keys for integrations with other services, secure authentication, and sensitive data protection. They can be used by anyone — a developer wiring up a complex integration or a marketer adding credentials from a user-friendly service like Mailchimp.
DrupalCon Vienna 2025: A Celebration of Open Source and Community Impact
The following is a guest post from DrupalCon Vienna Marketing Committee.
When the Drupal community gathers, something extraordinary happens.
From 14 to 17 October 2025, nearly a thousand people came together at the Austria Center Vienna, Austria to celebrate open source, exchange ideas, and contribute to the future of Drupal.
DrupalCon Vienna 2025 was not only a conference, it was a living example of collaboration, diversity, and innovation in action.

This year’s event welcomed 935 registered participants, with an impressive 96.04% check-in rate.
Interest in DrupalCon Vienna built steadily through the year, with the highest number of registrations coming in June (307) and September (236).
A Truly Global AudienceDrupalCon Vienna brought together a remarkable mix of voices and perspectives.
Participants represented over 40 countries, with 85% coming from across Europe, 8% from the United States, and 7% from other regions.
The top ten countries represented were:
DevBranch’s Remote Driesnote Watch Parties Reflect Wartime Resilience and Drupal Loyalty
Testing Isn’t Broken – But Your Method Might Be
How the Irish Government's “Build to Share” Vision Comes to Life: A New Public Consultations Module for All
Local spark, national impact: an open-source public consultations module built to share, built to scale.
markconroy 25th Nov 2025Keywords vs. Search Intent: Still stuffing keywords or optimizing for relevance?
Seeking Subsystem and Topic Maintainers for Open Positions
The 2025 Annual Maintainer Check-In is now complete, a huge thank you to everyone who responded and to all the maintainers who continue to keep Drupal core moving forward.
As part of this process, we’ve confirmed that a number of Drupal Core subsystems and topic areas are currently without an active maintainer.
If you’ve ever thought about stepping into a maintainer role, or co-maintaining alongside others, now is the perfect time to get involved.
Why maintainers matterMaintainers play a key role in ensuring the quality, stability, and momentum of Drupal core.
Maintainers help shape the direction of their subsystem or topic area, guide contributors as well as triage issues and review merge requests.
You don’t need to be a long-time contributor, if you’ve been active in a related area or are keen to grow your involvement, we’d love to hear from you.
Learn more about the maintainer role:
Your Guide to the SEO Tools recipe in Drupal CMS
Search engine optimization (SEO) is a rich and multi-dimensional craft, with numerous best practices and techniques to apply on your Drupal site. Optimizing your content, configuring an XML sitemap, and creating well-structured URLs are just a few examples of what should be done for SEO success.
Talking Drupal #530 - Join the Community Working Group
Today we are talking about the community working group, What they do, and how you can help with guests AmyJune Hineline, Mark Casias, and Matthew Saunders. We'll also cover Drupal CMS Geo Images as our module of the week.
For show notes visit: https://www.talkingDrupal.com/530
Topics- Exploring the Community Working Group (CWG)
- Roles and Responsibilities within the CWG
- Conflict Resolution and Community Health
- Matthew's Journey and Joining the CWG
- Qualities and Experiences for CWG Members
- Identifying the Need for Cultural Sensitivity
- The Importance of Patience and Grace in Conflict Resolution
- Onboarding and the Role of the Community Health Team
- Time Commitment and Responsibilities of CWG Members
- Supporting the CWG Without Formal Membership
- Maintaining Confidentiality and Promoting Transparency
- Addressing Credit Abuse and Community Health
- Parting Words of Wisdom for Aspiring Community Members
AmyJune Hineline - volkswagenchick Matthew Saunders - jamesmatthewsaunders.ai MatthewS Mark Casias - omibee.com markie
Where Dries Points Next
DrupalCon Asia 2025 in Nara, Japan, closed with a strong sense of momentum. Dries Buytaert’s Q&A format replaced a traditional keynote, and it paid off with direct insight into where Drupal is heading. The discussion tracked real trends across the ecosystem. Drupal CMS adoption continues to rise, the upcoming Drupal Canvas release is shaping expectations for easier site building, and the planned site template marketplace signals a shift toward faster delivery for agencies and teams.
Government interest in open source also stood out. Dries noted that digital sovereignty is becoming a priority across regions, positioning Drupal well for long-term public-sector growth. On the ground in Nara, the commitment felt real. The city’s mayor, Gen Nakagawa, opened the event by stating his goal to make Nara the most Drupal-friendly city in the world. It is rare for municipal leadership to tie open source directly to civic strategy, and it captured the tone of the week.
Beyond the sessions and the packed YouTube playlist, the Drupal CMS leadership team used the conference as a working sprint to align on priorities for the next six months. Agencies and end users shared where they need support, shaping the product roadmap. The result is a community that feels focused, confident, and ready for another cycle of growth.