Drupal review 2026: Drupal CMS, hosting costs and who it's for

Web Building also builds websites for clients. That never changes our picks, their order or what we say about a platform. How we make money

What Drupal is and who it’s for

Drupal is free, open-source software for building websites. It is a CMS (content management system) written in PHP, and you install it on your own web hosting or on a managed Drupal host. There is no Drupal company that bills you. The nonprofit Drupal Association supports the project, and the code is licensed GPLv2 or later, so there are no license fees.

Drupal is built for structured content. You define content types (an event, a staff profile, a product), give them fields, and control who can create or edit each one with roles and permissions. That is why Drupal.org lists government agencies, media companies such as the BBC and NBC, and the University of Oxford among its users.

Our verdict: Drupal is one of the strongest choices for large, complex sites run by a team with a developer or agency. It is a poor fit for a small business owner who wants to build and run a simple site alone. For that, WordPress or a website builder will cost you far less time.

Drupal is also small by usage. W3Techs, a web survey company, found it on 0.6% of all websites on October 23, 2026, compared with 39.6% for WordPress. A smaller user base means fewer ready-made themes, fewer developers to hire and fewer answers when you search for help. Our Drupal encyclopedia entry covers its history from a 2001 student project to today.

Drupal core vs Drupal CMS

There are now two ways to start. Drupal core is the base software, which the project positions for developers. Drupal CMS is a ready-to-go version of Drupal aimed at marketers, designers and content teams, and it is the recommended starting point for most sites.

Drupal CMS 2.0 came out on January 28, 2026. It made Drupal Canvas, a visual page editor with live previews, the default way to build pages. It also added site templates. The first one, Byte, is a marketing site for a software product with a blog, newsletter signup, pricing pages and a contact form, and Drupal says it installs in under 3 minutes.

Plans and what they really cost

Drupal itself costs $0. What you pay for is hosting, a domain, email and, for most owners, a developer. Here are the hosting options with published prices.

Hostinger’s pricing page lists Premium at $2.49 a month, or $119.52 for 48 months paid up front, renewing at $10.99 a month. Its Drupal hosting page says you can “set up Drupal with a single click,” but on the same day it showed a higher $143.52 for the same plan. We use the main pricing page. Check the total at checkout.

SiteGround’s help center says to install Drupal from Site Tools, Devs, App Installer. Its StartUp plan costs $35.88 for the first 12 months, then $17.99 a month.

Pantheon is a managed host built for Drupal and WordPress. Every plan includes development, staging and live environments, backups, a CDN and caching. Its free Silver workspace gives you sandbox sites to build on, but a paid site plan is required to go live. The Gold workspace, with team tools and 24/7 support, is $500 a month on top of site plans.

Acquia, another managed Drupal platform, does not publish prices. You request a demo.

A 3-year cost example

Here is a small business site on Drupal with a .com domain and one Google Workspace inbox, on budget shared hosting and on managed hosting.

How we got these numbers:

• Hostinger. $119.52 pays for 48 months, so a fourth year is already covered. After that, the plan renews at $10.99 a month, or $131.88 a year.
• Pantheon. $500 a year times 3 is $1,500. Billed monthly at $55, it is $1,980, which makes the total $2,280.24.
• Domain. We use Namecheap’s listed .com prices as a stand-in: $11.28 for the first year and $18.48 a year to renew. With a free first year from the host, you pay two renewals: $36.96.
• Email. Google Workspace Business Starter at $7 per user per month on the annual plan, or $252 over 3 years.

What you can build

Content and structure

This is where Drupal stands out. Custom content types, fields, taxonomy (tags and categories), views (lists and filters built from your content) and fine-grained user roles are part of the core design. A university with hundreds of editors, each allowed to edit only their own department, is a classic Drupal job.

Design and page building

Design comes from themes. Drupal CMS adds Drupal Canvas, so editors can drag ready-made components onto a page and see the result live. Drupal says Canvas needs no Drupal knowledge to start. Still, the theme and component library behind it are usually set up by a developer.

Modules

Features are added with modules, Drupal’s word for a plugin. Drupal.org listed 56,705 modules on October 23, 2026. Recipes in Drupal CMS install and configure groups of modules for you.

Online store

Drupal Commerce is a free set of contributed modules. Commerce 3.x supports Drupal 10.3 and 11, and 41,680 sites report using it, according to its project page. Drupal charges no transaction fee. Your payment processor’s fees still apply.

SEO and AI

Drupal CMS includes built-in SEO tools, automated accessibility testing and automated sitemaps. Its AI tools are optional: they can generate pages from a text prompt, answer site-building questions in an admin chatbot, and suggest image alt text for a person to review. Drupal lists built-in support for the amazee.ai provider, with free tokens included, plus OpenAI and Anthropic.

Hosting needs

Drupal 11.3 and 11.4 support PHP 8.3, 8.4 and 8.5, and need at least 64MB of memory. Databases must be MySQL 8.0+, MariaDB 10.6+, PostgreSQL 16+ or SQLite 3.45+. Drupal.org recommends Linux servers for live sites. Composer, a command-line tool for PHP software, is the recommended way to install and update Drupal, so a host with SSH access helps.

What happens when you leave

Drupal is open source, so nothing is locked to one company. The Drupal User Guide lists what a full backup needs:

• Content and data: the entire database, which holds pages, users, form entries and store orders.
• Media: uploaded files, by default in the sites/default/files folder.
• Design and code: the sites folder (including settings.php) and your custom modules and themes. Core and contributed code can be downloaded again.
• Domain: Drupal does not sell domains, so yours stays at your own registrar.

The free Backup and Migrate module can back up the database, code and files on a schedule. On Pantheon, you can download code, database and files backups from the dashboard. Our glossary explains website backups.

Why “high” skill? Moving a Drupal site to another host needs Composer, a database import and some server know-how. Moving to a different CMS is a full website migration. A WordPress plugin, FG Drupal to WordPress, moves articles, pages, categories, tags and images in its free version; users, comments, menus and redirects need its paid version. Our guide to leaving your website builder walks through the steps.

Gotchas

• Drupal 10 ends soon. Drupal 10 reaches end of life on December 9, 2026, according to the release schedule. Drupal 12 is planned for the week of December 7, 2026, and supports only PHP 8.5.
• Drupal 7 is already unsupported. Community security support ended on January 5, 2025. Leaving Drupal 7 is a migration, not an update.
• Monthly security work. Security release windows fall on the third Wednesday of each month. In October 2026, Drupal fixed a critical remote code execution flaw (SA-CORE-2026-014, October 14) and urged a critical PHP update on October 21.
• Free hosting can’t go live. Pantheon’s free sandboxes are for building only; a live site needs a paid plan.
• Acquia has no public price list. Expect a sales conversation.

Who should pick Drupal, and who should not

Pick Drupal if your site has a lot of structured content, many editors with different permissions, or strict security and portability rules, and you have a developer or agency. Governments, universities, publishers and large nonprofits fit this profile.

Skip Drupal if you want to build a small business site yourself this weekend, or you don’t have someone to apply updates every month. A website builder or WordPress will get you live faster, with a much larger pool of themes and help.

Alternatives worth a look

• Drupal vs WordPress: the closest alternative, with the same 10 out of 10 exit score and a far larger ecosystem.
• Joomla review: another free PHP CMS, with built-in multilingual features and simpler hosting.
• Ghost vs WordPress: if your site is mostly publishing and newsletters.