Drupal Security Guide

mgifford's picture

Wanted announce our Drupal Security Guide here. We've just updated it with information about Drupal 8.

This document has had contributions from lots of folks, but is still certainly a work in progress. That being said, there are over 65 pages worth of information about almost all aspects of Drupal security.


We're happy to add a few new sections to previous releases. There is now some information about crackers as well as highlights of security regulations that you may need to comply with. We've expanded the Drupal section to explain in more detail how to evaluate Drupal modules and themes for security.

We're always interested in ways to improve this document, so please free to send suggestions our way. Hopefully we'll have another release in a month or two.