Alerts for Drupal core and modules on insecure releases
drupal.org marks every release superseded by a security update as "Insecure". It is the same data the Update Status module uses, except we check it for all your sites at once.
Few people open the available updates report.
Update Status shows insecure releases in each site's admin pages and emails the configured addresses, when someone configured them.
Across dozens of sites with different modules, the forgotten module is exactly the one nobody updates.
Inventory from the site, releases from drupal.org.
Inventory
The agent reads the version and project of core and of every non-core module and theme.
Release history
For each project we read the drupal.org release history, with its supported branches.
Alert
If the installed version is insecure you get a critical alert with the first security release of its branch.
Want to try it on a real site? The 30-day trial needs no credit card.
Start free trialFrequently asked questions
Do you use drupal.org security advisories?
Yes. We read the drupal.org and GitHub advisories through OSV.dev, with title, CVE and link. For Drupal 7 and for modules with no advisory we use the release history, the source of the Update Status module. If several sources publish the same issue you get one alert.
Does it work with Update Status disabled?
Yes. The platform runs the check: the site only needs our module.
Goes well with
- Drupal core file integrity checks, Composer projects includedEvery core file compared with the drupal.org archive, archives and Composer.
- Drupal 7 has reached end of life: how to protect the sites still running itMonitoring, integrity, Drupalgeddon backdoors and backups on Drupal 7, even on PHP 7.1.
- Drupal site monitoring for web agenciesA native Drupal module, with insecure releases and core integrity from drupal.org.
- Detecting Drupalgeddon and Drupalgeddon2 backdoors on Drupal sitesDatabase backdoors, PHP in public files, miners in core: the traces of both attacks.
Try it on your clients' sites.
Connect your first sites today and see what SitePing finds on them.
- Every Complete feature except backups
- Up to 10 sites
- No credit card needed to start
- At the end you choose a plan or move to Free, and nothing is charged
Already have an account? Log in. Prefer to look at one site first? Free read-only audit.