Drupal 9 reached end of life. Move to Drupal 10 or 11.
Drupal 9 hit end of life on November 1, 2023. No more security updates, no more contrib support.
Most Drupal 9 sites can move to Drupal 10 or Drupal 11 in 2 to 6 weeks with our composer-driven upgrade.
Why staying on Drupal 9 is a problem.
Post-EOL RealitySecurity advisories stop
Drupal 9 no longer receives Security Advisory releases from the Drupal Security Team. Known CVEs accumulate without official patches.
Contrib drops Drupal 9
Most contrib modules now ship Drupal 10 and 11 only. Bug fixes are not backported. Your dependency tree shrinks every quarter.
Compliance flags it
PCI, HIPAA, SOC 2 audits flag end of life CMS versions. The longer you wait, the more often "yes you need to upgrade" appears in audit findings.
The upgrade path is short. The work is in the audit.
Drupal 9 to Drupal 11 is a Composer upgrade plus a deprecation cleanup. Not a rebuild like Drupal 7 to Drupal 10. Most sites finish in 2 to 6 weeks.
Compatibility audit
Upgrade Status module + manual review of every custom module for D10/D11 deprecations. List of must-fix issues.
Deprecation cleanup
Custom module updates, contrib version bumps, hook_*_alter cleanup, deprecated function replacements.
Composer upgrade
composer require drupal/core-recommended:^11. Database update, config import, full QA on staging.
Cutover
Production deploy with rollback plan. 14 days hypercare. Post-upgrade Lighthouse and security regression report.
Drupal 9 to Drupal 11. Two to six weeks.
$3,500 to $12,000 fixed-price for most sites. Quoted in writing after the audit, with the deprecation list attached.
Book the audit