Detect Drupal
Drupal is a free and open-source web content management framework.
Detection looks at response headers, cookies, meta tags, script sources, javascript globals, dom selectors, html markup, inline scripts across 10 fingerprint rules among the site's public responses.
01
Websites using Drupal
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying Drupal. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
- Cookies
- Meta tags
- Script sources
- JavaScript globals
- DOM selectors
- HTML markup
- Inline scripts
03
Example public indicators for Drupal
Illustrative indicators derived from public catalog metadata for Drupal. A live scan may match additional proprietary rules beyond these examples.
- expires: 19 Nov 1978
- x-drupal-cache
- x-generator: Drupal ?
- SESS
- generator: Drupal ?
- drupal.js
- Drupal
- link, link, link, link, style, style, style, style
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known Drupal signature (10 rules) at the time of the scan.
- Does not establish
- A sitewide install of Drupal, an active vendor contract, exclusive use, or that Drupal is still in place today.
05
How to check a site for Drupal
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Drupal signals.
- 2. PluginView reads only public responses (response headers, cookies, meta tags) and scores them against the Drupal signature set (10 rules).
- 3. Review the confidence score and text explanation for Drupal on the results page.
06
Commonly implies
A confirmed Drupal match also implies these technologies are present.
07
FAQ: detecting Drupal
- Can PluginView detect Drupal without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Drupal — typically response headers, cookies, meta tags, script sources. It does not bypass authentication or paywalls.
- What category is Drupal?
- Drupal is classified under CMS in the PluginView directory.
- How many fingerprint rules cover Drupal?
- This reference currently tracks 10 fingerprint rules across response headers, cookies, meta tags, script sources, javascript globals, dom selectors, html markup, inline scripts. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Drupal?
- Illustrative public indicators for Drupal include expires: 19 Nov 1978; x-drupal-cache; x-generator: Drupal ?. A live scan may match additional proprietary rules beyond these examples.
