Which Drupal version is this website running?
Type any web address. You get the major version, whether that version still receives security updates, and the date they stopped — read from what the site already hands to every visitor.
This tool needs JavaScript. Without it, email the address to shandalyuk94@gmail.com and you get the same answer by reply.
The dates, as published by drupal.org
| Version | Security updates | Released |
|---|---|---|
| Drupal 7 | Stopped — 5 January 2025 | 2011 |
| Drupal 8 | Stopped — 17 November 2021 | 2015 |
| Drupal 9 | Stopped — 1 November 2023 | 2020 |
| Drupal 10 | Stops — 9 December 2026 | 2022 |
| Drupal 11 | Current | 2024 |
A version past its date does not stop working, and nothing about the site looks different from the outside. What stops is the publishing of fixes: when a weakness is found in supported software a patch goes out, and when one is found in unsupported software only the weakness is published.
What is actually being read
Nothing here requires access to the site. Every signal below is something a Drupal site hands to any browser that asks for a page.
| Signal | What it gives |
|---|---|
| X-Generator response header | The major version, stated outright |
| <meta name="Generator"> | The same, in the page's own markup |
| X-Drupal-Cache, X-Drupal-Dynamic-Cache | Confirms the platform, not the version |
| /core/misc/drupal.js exists | Drupal 8 or newer |
| /misc/drupal.js exists | Drupal 7 or older |
| data-drupal-* attributes in the markup | Confirms the platform |
A site that removes those — many do, on purpose, and a CDN or firewall can strip them too — can only give up the platform, or the branch. That is reported as exactly that rather than guessed at: “Drupal 8 or newer” covers one version that lost support in 2021 and one that still has it, and putting the wrong date on a screen is worse than putting none.
Common questions
Is this safe to run against a site I do not own?
Yes. It asks for the home page the way any browser does and looks at two well-known file paths. No login is attempted, no form is submitted, nothing is written, and no vulnerability is probed for.
It says “version hidden”. Is that bad?
No — it is often deliberate, and hiding the version is a reasonable thing for an administrator to do. It also does not protect a site whose version is out of support: the weaknesses are public and the site is still running the code that has them.
My site is on an unsupported version. Do I have to migrate?
Not necessarily, and there are four routes rather than one — doing nothing, buying extended commercial support, moving to Drupal 11, or leaving Drupal altogether. They are set out side by side, including the ones that do not involve paying anybody, on the options table.
What does moving cost?
Published fixed prices rather than an hourly rate: €8,000–12,000 up to about 300 pages, €15,000–30,000 for roughly 300 to 2,000, and from €30,000 above that. A Drupal 10 site needs an update rather than a rebuild, from €1,500. The full tables are here.
Once you know the version, the next question is the number. The free check turns the band into one fixed price for your site, in writing, within one working day — no call to book and no obligation.
Get the fixed price — free