Drupal security advisories land on a fixed schedule and cannot wait. We apply core and contrib patches on staging first, run composer updates cleanly, monitor uptime and backups, and document every change. Twelve years of Drupal experience, including sites still on unsupported versions, with monthly reporting so you know exactly what was done.
Security advisories reviewed against your module set, patched on staging, then promoted.
Update
Composer core and contrib updates on a fixed cadence, never blind-applied to production.
Monitor
Uptime, backups, performance, and on the Large tier, WCAG 2.1 AA accessibility monitoring.
Three tiers, priced by complexity.
Month to month. Every tier includes development hours, staging testing, and a written monthly report.
Small
Small Drupal 10/11 sites, low complexity
$499/month
Security advisory response within 72 hours
Monthly core and contrib updates
Composer dependency management
Staging environment testing before every release
Daily offsite backups and 24/7 uptime monitoring
2 development hours per month
Most chosen
Medium
Institutional sites with custom modules
$999/month
Security advisory response within 24 hours
Bi-weekly core and contrib updates
Custom module maintenance and performance monitoring
Database and cache optimization
24/7 uptime monitoring with SLA
5 development hours per month
Large
Multisite, high traffic, or unsupported versions
$2,000/month
Security advisory response within 8 hours
Weekly core and contrib updates
Persistent staging plus daily and on-demand backups
Accessibility monitoring against WCAG 2.1 AA
Multisite support and major version upgrade planning
12 development hours per month, same-day response
Compare all features
Feature comparison of DoodleWeb managed Drupal support and maintenance packages
Feature
Small$499/month
Medium$999/month
Large$2,000/month
Security advisory response
Within 72 hours
Within 24 hours
Within 8 hours
Core and contrib updates
Monthly
Bi-weekly
Weekly
Composer dependency management
Staging environment testing
Persistent staging
Offsite backups
Daily
Daily
Daily + on-demand
Uptime monitoring
24/7
24/7 with SLA
24/7 with SLA
Database and cache optimization
Custom module maintenance
Performance monitoring
Accessibility monitoring (WCAG 2.1 AA)
Multisite support
Major version upgrade planning
Included development hours
2 per month
5 per month
12 per month
Response time
2 business days
1 business day
Same day
Monthly report
Yes + account contact
Frequently asked questions
How much does managed Drupal support cost?
Three tiers: $499 per month for small Drupal 10 or 11 sites, $999 per month for institutional sites with custom modules, and $2,000 per month for multisite, high traffic, or sites still on an unsupported version. Each tier includes development hours, so routine changes do not need a separate invoice.
How fast do you respond to a Drupal security advisory?
Within 72 hours on Small, 24 hours on Medium, and 8 hours on Large. Critical advisories affecting your specific module set are patched on staging first, verified, then deployed to production with a written change record.
Do you support Drupal 7 and other unsupported versions?
Yes. The Large tier is built for it, and includes major version upgrade planning so you have a path off end of life rather than a permanent patching bill. We have run Drupal 7 to 10 and 11 migrations for universities, government agencies, and nonprofits.
What are the included development hours used for?
Content type changes, view and block adjustments, template tweaks, form updates, accessibility fixes, and small feature work. Hours do not roll over. Larger work is quoted as a fixed-fee change order.
Do you test updates before they hit production?
Always. Core and contrib updates run through composer on a staging environment, are checked against your custom modules and theme, and are only promoted after verification. Large includes a persistent staging environment.
What do we get in the monthly report?
Every patch applied, advisories reviewed, uptime, backup verification, performance notes, and how the included development hours were spent. The Large tier adds a named account contact.