Find out what state your Drupal site is really in
A free, no-obligation health check across security, performance, accessibility and code quality — delivered as a prioritised report in plain English, not developer jargon.
When an audit pays for itself
- You've inherited a site — new role, new responsibility, no idea what's under the hood.
- Your agency disappeared (or the relationship soured) and you need an independent picture before choosing what's next.
- The site feels slow, flaky or fragile and you want causes, not guesses.
- You're planning a migration or redesign and need to know what you're working with.
- Compliance is knocking — accessibility obligations, security questionnaires, procurement requirements.
What we check
Security
Core and module versions vs. known vulnerabilities, user roles and permissions review, configuration hardening, exposed endpoints, dependency scanning.
Performance
Core Web Vitals on real devices, caching configuration, database query hotspots, image and asset handling, hosting suitability.
Code quality
Custom module review against Drupal coding standards, deprecated API usage, technical debt inventory, upgrade-readiness assessment.
Accessibility
Automated WCAG 2.2 scan plus manual keyboard-navigation and screen-reader checks on key journeys.
Content architecture & editor experience
Content types, taxonomy sanity, workflow fit — and the honest question: is the admin experience helping your editors or fighting them?
The deliverable
Executive summary for whoever holds the budget; findings prioritised Critical to Low with impact and effort-to-fix; a quick-wins-first roadmap; and a 45-minute walkthrough call with the developer who ran it. The report is yours — act on it with your team, another agency, or us. No strings.
One audit. Free. No catch.
Essential audit
FreeFor live Drupal sites of any vintage, D7 to D11.
- Security + performance focus
- Prioritised findings report, Critical to Low
- 45-minute walkthrough call with the developer who ran it
- Delivered in ~1 week
- The report is yours — act on it with us or anyone else
Why free? Because most audits turn into a conversation — a migration, a fix list, a care plan — and we'd rather earn that work on evidence than on a sales pitch. If nothing comes of it, you still keep the report. Larger estates, full custom-code review or compliance-oriented reporting are scoped and quoted individually.
Common questions
Do you need admin access?
For a full audit, yes — read-only where possible, under a signed NDA if you'd like one. An external-only "lite" review is possible but tells you much less.
Will you just tell us to rebuild everything with you?
No. Plenty of audits conclude "this site is fundamentally fine — patch these things and carry on." The report is the product; its credibility is worth more to us than upselling you.
Our site is on Drupal 7 — is an audit still worth it?
Yes, but framed differently: for D7 the audit doubles as migration discovery — the same code and content inventory feeds directly into an honest migration quote.
Know before you spend
Tell us the URL and a little context, and we'll confirm a start date — usually the same day.
Get your free audit