Original research · Vertical · July 2026
The State of Higher-Ed CMS Readiness 2026
We measured every reachable US university homepage in a set of 2,368 .edu domains — 1,796 were live and measurable — against the same eleven signals that decide whether a site keeps its search and AI visibility when it changes CMS. Higher ed turns out to be its own country: it made a collective platform bet the rest of the web never made, and it is quietly falling behind on the one signal that is starting to matter most. Which is a little awkward for a sector that invented the citation and is now below average at receiving one from a machine.
Headline finding
Drupal is higher education’s CMS. It runs on 18% of measurable university sites versus 3.6% of the general web — 5.0× the adoption. Yet higher ed emits less structured data than the average website (43.4% vs 50.1%), leaving only 31.4% of university sites cleanly citable by AI answer engines — exactly as prospective students start their search in ChatGPT.
Source: Replatform Radar, State of Higher-Ed CMS Readiness 2026 (n=1,796 measurable .edu sites). Free to cite with attribution and a link to this page.
Higher ed bet on Drupal — and the web didn’t
On the open web, WordPress outnumbers Drupal roughly five to one. Inside .edu that gap narrows to under two to one: Drupal is the second-most-common platform and runs at 5.0× its web-wide rate. Practically, that means a higher-ed replatform is usually a Drupal replatform — and the strengths and blind spots of Drupal are the strengths and blind spots of the sector.
Higher ed bet on Drupal — and under-built the AI layer
Drupal runs on 18% of university sites — 5.0× its web-wide rate — yet higher ed emits less structured data (43.4%) than the average website (50.1%).
Drupal share of sites
Structured data
| Platform | Share of .edu |
|---|---|
| WordPress | 33.9% |
| Drupal | 18% |
| Adobe Experience Manager | 1.1% |
| HubSpot CMS | 1% |
| Sitecore | 0.5% |
| Optimizely (Episerver) | 0.4% |
| Concrete CMS | 0.3% |
| Kentico | 0.3% |
| Squarespace | 0.2% |
The large Unknown slice is characteristic of the sector: many universities run bespoke or heavily themed stacks that expose no platform fingerprint. It is excluded from the per-platform readiness table below rather than guessed at.
The real gap isn’t security — it’s AI visibility
University sites are nearly universally on HTTPS (99.9%) and carry titles and descriptions at healthy rates. Where they fall down is structured data: just 43.4% emit schema markup, below the 50.1% general-web rate, and only 31.4% clear the combination (schema + canonical + title + description) that answer engines lean on to quote a page. That is the machine-readable layer ChatGPT, Perplexity and Google’s AI overviews use to decide which institution to name — and higher ed is under-built on it at the worst possible moment. The buildings are beautiful and structurally sound. Nobody put numbers on the doors.
| Signal | Higher ed | General web |
|---|---|---|
| Structured data (schema) | 43.4% | 50.1% |
| AI-citable combination | 31.4% | 36.8% |
| Overall readiness | 70% | 69.4% |
| Content-Security-Policy | 23.7% | 31.4% |
Most Drupal is current — a stubborn tail is not
The good news first: of the 307 university Drupal sites that expose a version, the overwhelming majority are on the modern, supported line — Drupal 10 and 11. But 6.8% (21 institutions) are still running end-of-life Drupal 7, 8 or 9: no security patches, a migration that only gets harder the longer it waits, and in several cases a flagship or internationally-ranked university. This is the sharp end of the replatform question, and it is a named, finite list.
Most university Drupal is current — a stubborn tail is not
Of the 307 university Drupal sites that expose a version, 6.8% run end-of-life Drupal 7, 8 or 9 (21 institutions) — no security patches, and a migration that only gets harder the longer it waits.
University Drupal sites by version
| Drupal version | Sites | Status |
|---|---|---|
| Drupal 10 | 192 | Supported |
| Drupal 11 | 94 | Supported |
| Drupal 8 | 9 | End-of-life |
| Drupal 9 | 8 | End-of-life |
| Drupal 7 | 4 | End-of-life |
Version is only observable on the share of sites that publish a generator tag, so the true end-of-life count is a floor, not a ceiling. It is also a security conversation rather than a visibility one, but it tends to land on the same desk, usually on the same afternoon.
Grades: four in ten university sites are D or F
Scored across all eleven signals, 42.6% of measured university homepages land at grade D or F — concentrated in exactly the signals (structured data, security headers) that a migration is most likely to drop on the floor if nobody is measuring.
| Grade | A | B | C | D | F |
|---|---|---|---|---|---|
| Share of .edu | 14.5% | 17.5% | 25.3% | 19.7% | 22.9% |
Readiness by platform
Every CMS with at least fifteen measurable university sites, by overall readiness and the two signals most often lost in a migration, structured data (SEO / AI visibility) and security headers.
| Platform | Sites | Readiness | Structured data | Security headers |
|---|---|---|---|---|
| WordPress | 608 | 72.7% | 80.1% | 31.6% |
| Drupal | 324 | 73.8% | 25.9% | 98.8% |
| Adobe Experience Manager | 20 | 81.8% | 55% | 90% |
| HubSpot CMS | 18 | 75.2% | 27.8% | 16.7% |
Method and limitations
- Population: the US
.eduregistrant set (the domain is administered by EDUCAUSE under a US Department of Commerce cooperative agreement). Each domain was fetched once with a single identified GET request; no crawling. 1,796 of 2,368 were reachable and measurable — the rest were dead, parked, or bot-walled and are excluded rather than counted as failures. - CMS and version are inferred from response fingerprints and the generator meta. A large Unknown share is expected in higher ed (bespoke stacks) and is excluded from per-platform cuts, so counts under-report rather than over-report.
- Signals are presence checks, not quality audits. “has structured data” means schema was detected, not that it was complete or valid.
- End-of-life percentages are of the Drupal sites that expose a version; the true count is a floor.
Sources and related work
The platform lifecycle documentation, standards and research this study builds on, and independent surveys you can check our numbers against.
- Drupal Association. Drupal 7 end of life. Official EOL status for the version tail identified in this study.
- Drupal Association. Drupal core release schedule and support policy. The supported-vs-end-of-life boundary (Drupal 7/8/9 vs 10/11) used in our version analysis; independently tracked at endoflife.date/drupal.
- W3Techs. Usage statistics of content management systems. Independent web-wide platform shares — the baseline the 5× Drupal ratio is computed against can be sanity-checked here.
- Pew Research Center. 34% of U.S. adults have used ChatGPT, about double the share in 2023, June 2025. Adoption context for why AI answer-engine visibility now matters for student recruitment.
- Google Search Central. Introduction to structured data markup.
- Schema.org. Schema.org — shared structured-data vocabulary.
- Le Pochat, V., et al.. Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation, NDSS 2019. The sampling frame for the general-web baseline used throughout.
- Koster, M., Illyes, G., Zeller, H., Sassman, L.. Robots Exclusion Protocol (RFC 9309), IETF, 2022.
Cite this
Replatform Radar, The State of Higher-Ed CMS Readiness 2026, July 2026. replatformradar.com/research/higher-ed-cms-readiness-2026. Licensed CC BY 4.0 — the dataset and every number on this page may be reused with attribution. See also our web-wide readiness study. Archived on Zenodo: doi:10.5281/zenodo.21615309. Ready-to-paste formats:
Replatform Radar, "The State of Higher-Ed CMS Readiness 2026," July 2026, https://replatformradar.com/research/higher-ed-cms-readiness-2026. doi:10.5281/zenodo.21615309. Open dataset, CC BY 4.0.
{{cite web |author=Replatform Radar |title=The State of Higher-Ed CMS Readiness 2026 |date=2026-07-23 |url=https://replatformradar.com/research/higher-ed-cms-readiness-2026 |publisher=Replatform Radar |doi=10.5281/zenodo.21615309 |access-date=}}@misc{replatformradar2026edu,
author = {{Replatform Radar}},
title = {The State of Higher-Ed CMS Readiness 2026},
year = {2026},
doi = {10.5281/zenodo.21615309},
howpublished = {\url{https://replatformradar.com/research/higher-ed-cms-readiness-2026}},
note = {Open dataset, licensed CC BY 4.0}
}Run these eleven signals against your own institution’s site before you migrate.
Request a scan →