Calibrate
Contact

Drupal audit

Troubles with your Drupal website performance?? We perform a thorough checkup and present you with the results in a clear, concrete report.

As a client, you can make a choice: an audit that focuses on general performance, or a full technical scan, where we dig deeper into the details.

Magnifying glass

Drupal audit

The audit uses a detailed checklist to make an assessment of the website.

This is partly done automatically by our scanning tools. A Drupal analyst also examines the most sensitive subjects.

Telescope

Drupal deep scan

When we perform a full checkup, we will check all the details of the Drupal website.

Also custom code in the website is checked for errors and sensitivities.

screen_shot_2018-08-08_at_15.37.30.png

Expert review of the user experience

A technical audit is not everything. A thorough scan of the user experience helps to optimize the conversion of your website and keep your visitors satisfied.

Is your website GDPR proof?

The question whether your website is GDPR proof will be answered. Calibrate has its own Data Protection Officer, who is also consulted during the audit. We give you tailored advice on how your website can meet the GDPR guidelines.

What is being investigated?

For our research, we use a number of tools focused on the task at hand and not in the least, our years of Drupal experience! After all, not everything can be reviewed by automated tools, but requires a thorough understanding of best practices, Drupal coding and structure standards and security approaches.

  • First we look at the general setup of the website. Is this done according to the applicable Drupal standards with a correct folder structure. Is there a code repository available?
  • In case of external hosting we look at the specifications of the server. Do these meet the needs of the website?
  • We take a technical look at the database. Do they contain custom tables that are not linked or tables that seem proportionally too large?
  • Are all user accounts on the website actual users or do they contain spam profiles?
  • Have core or contrib modules been hacked? This means that they cannot be updated according to the standard procedure. A very important step not to let an apparently simple update turn into a small - or big - nightmare.
  • Are there safety risks when using certain modules or are some modules lagging far behind?
  • In case of a deeper analysis, we dive into custom code and see if it meets Drupal standards and best practices.

Tailor-made questions

Specific customer questions can also be answered

  • Performance problems on specific pages.
  • In-depth analysis of custom setup
  • Review of implemented architectural solution to a problem
  • Custom code review
  • GDPR validation
  • Go wild... you ask, we investigate.

But what do I get as a result?

"Is such an audit really useful? My site is safe and seems to work well. "
-  I'm sure you're wondering. Some examples of effective audits from the past...

  • After an extensive audit for a known site, a relatively large leak appeared to be present due to the absence of correct access controls. As a result, potentially sensitive user information was freely accessible to third parties. It goes without saying that this is a nightmare in the current GDPR era...
  • Analysis of custom code on a site that was not yet active, quickly showed that a large number of scenarios had not been thought of. When expanding the content on the website, it would run into serious problems due to a faulty structure. Removing certain datasets made sure that linked data was not removed.
  • Hardcoded accounts with passwords written in code.
  • A web site set up professionally contained 1 hacked contrib module.
    When this module would have been updated according to the standard procedure (e.g. due to a Drupal security release), a basic functionality in the webshop would have stopped working.
  • A website with spam profiles that had access to change certain content to a slightly more 'frivolous' nature.
  • Hardcoded translations in templates. What if you wanted to change the translation of the label through the website? Good luck with that...
  • ...