Drupal says everything is fine. Visitors see an error.
Up’n’Top recognises Drupal and watches it from outside: uptime, pages that show a PHP error while the server reports success, files that should never be public, and old scripts with known vulnerabilities.
Our own algorithm, built on years of hands-on work growing real websites.
What Up’n’Top checks on Drupal
- Uptime every 5 minutes; the site counts as down only after repeated failures and a check from a second location.
- Pages that answer as usual but show a PHP error: Fatal error, Parse error or an uncaught exception.
- Files that must never be public: .env, the .git folder, SQL dumps such as backup.sql, .svn folders.
- JavaScript libraries with known vulnerabilities — jQuery, jQuery UI, Bootstrap and others — checked against the OSV database every day.
- Broken links and images, pages closed to search with noindex or robots.txt, redirects to another site.
- Analytics tags on every checked page, and your SSL certificate and domain before they expire.
How to connect
Add your site’s address. Up’n’Top recognises Drupal on its own — no module to install.
Mark up to 20 key pages and choose where alerts go: email, Telegram, Slack or a webhook.
Confirm that the site is yours with a meta tag, a file, a DNS record or Google Search Console. This turns on the contact form test.
Under the hood
A lot happens before you get a message. All of it is our own work.
A page counts as broken only after a second failed check hours later — no false alarms at night.
Exposed files are judged by their content, not by status: a server that answers every address with a page raises no false alarm.
Library versions are read from pages we have already checked — no extra requests to your site.
Calm alerts: urgent ones at once, the rest in one digest every 15 minutes.
Questions
Do I need to install a Drupal module?
No. Everything on this page is checked from outside. There is no Drupal module; our plugin is for WordPress only.
Do you follow Drupal security advisories?
No. On Drupal we check the JavaScript libraries your pages load against the OSV database; core and modules are not checked.
What does the robots.txt fix look like for Drupal?
When robots.txt is missing or closes too much, the free check writes one that keeps /admin/, /user/login, /user/register and /search/ closed and adds the Sitemap line.
Will the checks slow my site down?
No. We make at most 2 requests per second, one at a time, and back off when your server asks us to.
Check your Drupal site now — free
About 30 seconds. No sign-up, no code on your site.
Everything Up’n’Top does →