Is Drupal Secure?

Absolutely. Our Drupal implementations are very secure.

First, Drupal itself is an extremely safe and secure platform. If a visitor attempts to access a file or folder within your installation directly, Drupal will not allow it, and instead will present them with a custom Drupal page or search.

Drupal data is stored in a secure MySQL database that we set up with strong passwords, and verify that the hosting account you're using is also secure.

Finally, steps are taken during development to further secure the site. For instance, visitors to your site will never have access to place HTML or PHP or other code into a form field or other input area. Any input areas for visitors are stricly plain text, which means they can enter comments and information, but that's it.

Our clients are also advised to notify us when new releases and security patches are available for their installation (based on messages received from their site), or to sign up for a monthly maintenance program in which we would take care of any releases automatically.