How secure and flexible is Drupal?

This is a recurring question that our clients ask themselves when they are choosing between the options to develop their solutions and these are our arguments for them to consider Drupal as a very good option.

Security in Drupal

Drupal is a software with high development and security standards, even as all existing software has its flaws. Fortunately, since it is open source, these flaws are detected early by the community and the Drupal association's own security team and the companies that are part of the Drupal ecosystem.

The following aspects are what we highlight

  • Drupal is a tool that has been on the market for years and is used by government entities, companies, institutions, among many others. It is worth noting that the website of the Colombian National Police  www.whitehouse.gov  is made in Drupal and one of the factors for which it was chosen is its security.
  • All development in Drupal revolves around APIs, these have been created with the security of the entire system in mind in such a way that the risks of accepting malicious code are reduced.
  • SeeD is a company that has been working with Drupal for more than 8 years and all our practices are based on the development standards accepted by the community, in this way we are aligned with the security practices of the entire Drupal core when creating modules. personalized
  • The Drupal Security team is made up of a team of more than 35 security experts. This team is responsible for reviewing the modules that have a stable version and the core of Drupal to identify possible vulnerabilities, to learn more about the Drupal team. security you can visit  https://www.drupal.org/security-team
  • Drupal has a serious update policy, on the third Wednesday of each month a version is released that corrects security problems (If they exist)  https://www.drupal.org/documentation/version-info#when  From SeeD we always recommend to our Clients maintain a similar update policy from their technical team or purchase a Support package that can help them keep their environment updated.

 

Flexibility in Drupal

Drupal's flexibility has been its greatest advantage over other tools on the market. With Drupal you can build any type of website you have in mind, from a basic informational site, to an online academic system, an online product store with variations by country in products, language, currencies or payment gateways, corporate sites that process thousands of transactions for corporate clients connecting through services to internal company systems and if you are thinking of other types of websites, that is surely also possible.

Faced with this degree of flexibility, there are only two aspects that must be taken into account:

  • Learning curve:  Learning and working with Drupal at the development level is not like working with a regular CMS. There are many new concepts and practices that must be assimilated in order to work correctly and make the most of what already exists to save a lot of work. All of this is necessary precisely because of how flexible the architecture is.
  • Good architecture is the key to a successful Drupal project:  When you have a tool with the degree of flexibility of Drupal, there are many ways to solve the same problem, some more efficient than others, so it is important to have the expert advice of a team that defines the best way to solve the requirements of a project, not only for the immediate solution but also for the future direction of the project.
  • Not everything can be solved with Drupal:  We in the Drupal community believe that a good architecture can also be made up of the intercommunication of various applications, and Drupal has the necessary tools to integrate with other tools through web services or other communication APIs. This is what allows Drupal to integrate with one of the best corporate search engines on the market, Apache Solr. In the end, the result is a very powerful content manager that is so flexible that it allows for a very powerful search engine to be integrated into the solution.