CMS
Drupal Website Audit
Drupal audit: cache bins, Twig, and headers at the vhost
· Configuration notes, not a newsroom.
SiteRune fingerprints Drupal from generator tags, Drupal.settings, and /sites/default/files. The brief is reverse-proxy cache and modules — not a Drupal.org essay.
DRWhat SiteRune checks on this stack
- CMS / framework fingerprint from HTML, headers, cookies, and generator tags — fingerprint-based, not a plugin inventory
- Titles, meta descriptions, canonicals, H1, and robots on the homepage and walked interiors
- Security headers a crawler can see: HTTPS, HSTS, CSP, framing, nosniff, Referrer-Policy, Permissions-Policy
- HTML TTFB, compression, and Cache-Control on the document — not a Lighthouse filmstrip
- AI-bot robots policy, llms.txt, and Organization / FAQ / Article JSON-LD
Common problems
- Marketing homepage looks finished; interior templates ship empty titles or leftover noindex
- Hosted CMS cannot set HSTS/CSP, so the brief tells you to put a proxy in front instead of inventing an admin UI
- A security plugin's 'block AI' preset Disallows GPTBot on a site that wanted citations
- Session cookies or no-store on every anonymous GET, so the CDN never caches HTML
Internal page cache is not a CDN
Drupal can cache HTML in bins and still send no-store at the edge, or skip cache on anonymous traffic because a module personalized the page. SiteRune scores the document Cache-Control and TTFB from this vantage point. Internal cache that never reaches a shared CDN still looks like a cold PHP bootstrap.
Modules are the tax
Aggregator, unused views, and a dozen JS libraries on every page are cms-health in spirit even when we do not name the module. Headers belong in nginx or the host, not a theme preprocess that dies on cache. Publish llms.txt at the docroot. Do not Disallow GPTBot because a security module shipped a preset.
FAQ
How do you know this is my stack?
Fingerprints in HTML, headers, cookies, and generator tags. Confidence is a score, not a certificate. Unknown stacks stay generic — we will not invent a CMS.
Do I need an account?
Three guest scans, no card. Create a free account when you want history and more interiors.
Run it on a live URL
Same scan engine. Guest scans stay free.