Original research · July 2026
The State of CMS Migration Readiness 2026
We measured a random sample of 48,588 live websites across eleven signals that determine whether a site keeps its search and AI visibility when it changes CMS — 27,385 were reachable and measurable. This page is the method and the data behind the finding, free to cite and download.
Headline finding
WordPress and Drupal score identically on overall readiness (75.4% vs 76.2%) — but fail in opposite directions. WordPress sites carry 2.6× more structured data than Drupal sites, while Drupal sites are 2.4× more likely to ship security headers.
Source: Replatform Radar, State of CMS Migration Readiness 2026 (n=4,998 WordPress, 989 Drupal). Free to cite with attribution and a link to this page.
What we measured
A random sample of 48,588 domains drawn systematically from the Tranco top 80,000, filtered to remove CDNs, DNS infrastructure and ad-tech endpoints. Each site was fetched once with a single polite request; 27,385 were reachable and measurable (the rest were dead, bot-walled, or unreachable and are excluded rather than counted as failures). For each site we recorded eleven signals that determine whether a replatform preserves search and AI visibility: HTTPS, title quality, meta description, mobile viewport, canonical tag, structured data, Open Graph tags, a single H1, and three security headers (HSTS, CSP, X-Content-Type-Options).
Finding: WordPress and Drupal fail in opposite directions
The averages are statistically tied. The profiles behind them are almost perfectly inverted — each platform’s defaults become its users’ strengths and its users’ blind spots.
| Signal | WordPress (n=4,998) | Drupal (n=989) |
|---|---|---|
| Overall readiness | 75.4% | 76.2% |
| Structured data | 83.9% | 32.2% |
| Open Graph tags | 90.8% | 66.6% |
| X-Content-Type-Options | 40.1% | 97.6% |
| HSTS | 49.5% | 72.7% |
| Canonical tag | 92.4% | 97.1% |
| Page weight | 299 KB | 186 KB |
| Script tags | 18.2 | 17.1 |
WordPress’s dominant SEO plugins emit schema markup by default; Drupal ships hardened HTTP headers out of the box. The migration lesson generalizes past these two platforms: what your current CMS does for you by default is exactly what you are most likely to forget to rebuild.
Readiness by platform
Every CMS with at least 30 measurable sites in the sample, by overall readiness and the two signals most often lost in a migration — structured data (SEO / AI visibility) and security headers.
| Platform | Sites | Readiness | Structured data | Security headers |
|---|---|---|---|---|
| WordPress | 4,998 | 75.4% | 83.9% | 40.1% |
| Drupal | 989 | 76.2% | 32.2% | 97.6% |
| Adobe Experience Manager | 687 | 84% | 58.5% | 88.2% |
| HubSpot CMS | 474 | 80.5% | 56.8% | 42.8% |
| Sitecore | 234 | 78.1% | 46.6% | 61.5% |
| TYPO3 | 161 | 76.7% | 35.4% | 82.6% |
| Salesforce Commerce Cloud | 117 | 78.8% | 73.5% | 82.1% |
| Optimizely (Episerver) | 89 | 78.5% | 46.1% | 50.6% |
| Shopify | 58 | 76.6% | 60.3% | 53.4% |
| Adobe Commerce (Magento) | 57 | 75.3% | 70.2% | 86% |
| Kentico | 50 | 69.8% | 30% | 58% |
| Squarespace | 45 | 81.6% | 82.2% | 93.3% |
| Joomla | 42 | 55.2% | 35.7% | 59.5% |
| Concrete CMS | 40 | 67.7% | 60% | 32.5% |
| Wix | 38 | 83.5% | 86.8% | 81.6% |
Method & limitations
- Each domain was fetched once with a single identified GET request; no crawling, no repeated hits. Platform was inferred from response fingerprints, so a share of sites are recorded as “Unknown” and are excluded from the per-platform table.
- Percentages are of measurable sites only. Reachability exclusions (dead DNS, refused connections, bot walls) are published in the dataset so the base is transparent.
- CMS detection is fingerprint-based and conservative: a platform is only assigned on a platform-specific marker, not a generic path, so counts under-report rather than over-report.
- Signals are presence checks, not quality audits — “has structured data” means schema was detected, not that it was complete or valid.
Cite this
Replatform Radar, The State of CMS Migration Readiness 2026, July 2026. replatformradar.com/research/cms-migration-readiness-2026. Licensed CC BY 4.0.
Want these eleven signals scored for your own site before you migrate?
Request a scan →