Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.The Drupal Association is the non-profit that runs the infrastructure, security, and programs that keep Drupal working for more than one million websites worldwide.
We are not a vendor. We do not sell Drupal. We maintain the systems that let a global community of contributors build it, the channels that get it to the organisations who use it, and the programs that keep the project healthy for the long term.
Who we are
The Drupal Association is a 501(c)(3) non-profit founded in 2008. We employ a small staff and work alongside thousands of community contributors and a network of Drupal Certified Partners. Our work is funded by Drupal Certified Partners, individual members, Sustaining Member organisations, grants, and DrupalCon.
What the Drupal Association does
Our work falls into four areas.
1. We run the infrastructure that Drupal is built on
Drupal.org is more than a website. It is the operational backbone of the Drupal project.
- Drupal.org runs on a modern Kubernetes cloud architecture behind a global CDN and next-generation web application firewall, with 99.9% uptime maintained by an on-call engineering team.
- The Drupal software supply chain — update servers, Composer-ready packages, security releases, and package signing for automatic updates — is delivered from Drupal.org to every Drupal site in production.
- git.drupalcode.org, our self-hosted GitLab instance, hosts more than 50,000 repositories and the custom integrations that power Drupal's collaborative contribution workflow.
- GitLab CI runners execute thousands of automated tests against Drupal code every month, with compute resources worth more than $25,000 monthly.
- localize.drupal.org delivers the translation files that make Drupal available in more than 100 languages.
- The contribution credit system recognises and incentivises the organisations and individuals who contribute to Drupal.
2. We coordinate Drupal security
Drupal has one of the strongest security track records of any major CMS. The Drupal Association makes that possible.
- We coordinate the global Drupal Security Team, which monitors for vulnerabilities, manages responsible disclosure, and ships fixes around the clock.
- We publish official security advisories and coordinated patches through Drupal.org, the single source of truth for Drupal security information.
- We give site owners, agencies, and enterprise security teams the information they need to respond quickly when issues arise.
3. We sustain the Drupal project for the long term
A healthy open source project needs more than code. It needs people, governance, and the structures that keep contributors engaged year after year.
- DrupalCon and regional event support bring the community together in person.
- Drupal.org documentation, API references, and forums lower the barrier to entry for new contributors and give experienced ones a place to solve problems together.
- Onboarding and community programs welcome new members and connect them to the people and resources they need.
- Governance support keeps the project's decision-making transparent and accountable.
4. We tell the world about Drupal
Open source projects don't come with marketing budgets. Most successful platforms have a vendor behind them spending millions on awareness. Drupal has the Drupal Association.
- We maintain Drupal.org as the authoritative source of information about what Drupal is, what it does, and who builds with it.
- We run campaigns, content, and brand assets in partnership with the Drupal Certified Partner network.
- We operate Drupal's owned channels — social media, newsletters, and editorial content — to keep the community informed.
- We steward the Drupal trademark so the project is represented consistently worldwide.
- We represent Drupal at industry events where decisions about platforms, procurement, and open source policy are made.
- We equip local communities to promote Drupal in their regions.
Who relies on the Drupal Association
- Site owners running the more than one million Drupal websites in production
- Drupal contributors — developers, designers, marketers, and maintainers around the world
- Drupal Certified Partners — the 100+ agencies that build Drupal sites for clients
- Enterprise and government end users that rely on Drupal as critical infrastructure
- The broader open source ecosystem, which benefits from Drupal's security work, governance model, and contribution norms
How the Drupal Association is funded
We are funded by the people and organisations who benefit from Drupal:
- Drupal Certified Partner membership fees
- Sustaining Member contributions from organisations that depend on Drupal
- Individual memberships and donations
- DrupalCon registrations and sponsorships
- Grants supporting specific initiatives, including the Drupal AI Initiative
Every dollar goes back into the infrastructure, security, and programs above.
How to work with us
- Use Drupal. Start at drupal.org.
- Find a partner. Browse the Drupal Certified Partner directory.
- Contribute. See the contributor guide.
- Become a member. Individual and organisational memberships are at drupal.org/association.
- Sponsor DrupalCon or join as a Sustaining Member. Contact sponsorship@association.drupal.org.
Group maintainers
