Drupal Security Team

Goals of the security team

• Resolve reported security issues in a Security Advisory
• Provide assistance for contributed module maintainers in resolving security issues
• Provide documentation on how to write secure code
• Provide documentation on securing your site
• Help the infrastructure team to keep the drupal.org infrastructure secure

How to report a security issue

If you discover or learn about a potential error, weakness, or threat that can compromise the security of Drupal, we ask you to keep it confidential and submit your concern to the Drupal security team.