Original research · Vertical · July 2026

The State of Higher-Ed CMS Readiness 2026

We measured every reachable US university homepage in a set of 2,368 .edu domains 1,796 were live and measurable — against the same eleven signals that decide whether a site keeps its search and AI visibility when it changes CMS. Higher ed turns out to be its own country: it made a collective platform bet the rest of the web never made, and it is quietly falling behind on the one signal that is starting to matter most. Which is a little awkward for a sector that invented the citation and is now below average at receiving one from a machine.

Headline finding

Drupal is higher education’s CMS. It runs on 18% of measurable university sites versus 3.6% of the general web — 5.0× the adoption. Yet higher ed emits less structured data than the average website (43.4% vs 50.1%), leaving only 31.4% of university sites cleanly citable by AI answer engines — exactly as prospective students start their search in ChatGPT.

Source: Replatform Radar, State of Higher-Ed CMS Readiness 2026 (n=1,796 measurable .edu sites). Free to cite with attribution and a link to this page.

Download the data (CSV)Download as JSONCC BY 4.0 — reuse with attribution

Higher ed bet on Drupal — and the web didn’t

On the open web, WordPress outnumbers Drupal roughly five to one. Inside .edu that gap narrows to under two to one: Drupal is the second-most-common platform and runs at 5.0× its web-wide rate. Practically, that means a higher-ed replatform is usually a Drupal replatform — and the strengths and blind spots of Drupal are the strengths and blind spots of the sector.

Higher ed bet on Drupal — and under-built the AI layer

Drupal runs on 18% of university sites 5.0× its web-wide rate — yet higher ed emits less structured data (43.4%) than the average website (50.1%).

Drupal share of sites

Structured data

PlatformShare of .edu
WordPress33.9%
Drupal18%
Adobe Experience Manager1.1%
HubSpot CMS1%
Sitecore0.5%
Optimizely (Episerver)0.4%
Concrete CMS0.3%
Kentico0.3%
Squarespace0.2%

The large Unknown slice is characteristic of the sector: many universities run bespoke or heavily themed stacks that expose no platform fingerprint. It is excluded from the per-platform readiness table below rather than guessed at.

The real gap isn’t security — it’s AI visibility

University sites are nearly universally on HTTPS (99.9%) and carry titles and descriptions at healthy rates. Where they fall down is structured data: just 43.4% emit schema markup, below the 50.1% general-web rate, and only 31.4% clear the combination (schema + canonical + title + description) that answer engines lean on to quote a page. That is the machine-readable layer ChatGPT, Perplexity and Google’s AI overviews use to decide which institution to name — and higher ed is under-built on it at the worst possible moment. The buildings are beautiful and structurally sound. Nobody put numbers on the doors.

SignalHigher edGeneral web
Structured data (schema)43.4%50.1%
AI-citable combination31.4%36.8%
Overall readiness70%69.4%
Content-Security-Policy23.7%31.4%

Most Drupal is current — a stubborn tail is not

The good news first: of the 307 university Drupal sites that expose a version, the overwhelming majority are on the modern, supported line — Drupal 10 and 11. But 6.8% (21 institutions) are still running end-of-life Drupal 7, 8 or 9: no security patches, a migration that only gets harder the longer it waits, and in several cases a flagship or internationally-ranked university. This is the sharp end of the replatform question, and it is a named, finite list.

Most university Drupal is current — a stubborn tail is not

Of the 307 university Drupal sites that expose a version, 6.8% run end-of-life Drupal 7, 8 or 9 (21 institutions) — no security patches, and a migration that only gets harder the longer it waits.

University Drupal sites by version

Drupal versionSitesStatus
Drupal 10192Supported
Drupal 1194Supported
Drupal 89End-of-life
Drupal 98End-of-life
Drupal 74End-of-life

Version is only observable on the share of sites that publish a generator tag, so the true end-of-life count is a floor, not a ceiling. It is also a security conversation rather than a visibility one, but it tends to land on the same desk, usually on the same afternoon.

Grades: four in ten university sites are D or F

Scored across all eleven signals, 42.6% of measured university homepages land at grade D or F — concentrated in exactly the signals (structured data, security headers) that a migration is most likely to drop on the floor if nobody is measuring.

GradeABCDF
Share of .edu14.5%17.5%25.3%19.7%22.9%

Readiness by platform

Every CMS with at least fifteen measurable university sites, by overall readiness and the two signals most often lost in a migration, structured data (SEO / AI visibility) and security headers.

PlatformSitesReadinessStructured dataSecurity headers
WordPress60872.7%80.1%31.6%
Drupal32473.8%25.9%98.8%
Adobe Experience Manager2081.8%55%90%
HubSpot CMS1875.2%27.8%16.7%

Method and limitations

Sources and related work

The platform lifecycle documentation, standards and research this study builds on, and independent surveys you can check our numbers against.

  1. Drupal Association. Drupal 7 end of life. Official EOL status for the version tail identified in this study.
  2. Drupal Association. Drupal core release schedule and support policy. The supported-vs-end-of-life boundary (Drupal 7/8/9 vs 10/11) used in our version analysis; independently tracked at endoflife.date/drupal.
  3. W3Techs. Usage statistics of content management systems. Independent web-wide platform shares — the baseline the 5× Drupal ratio is computed against can be sanity-checked here.
  4. Pew Research Center. 34% of U.S. adults have used ChatGPT, about double the share in 2023, June 2025. Adoption context for why AI answer-engine visibility now matters for student recruitment.
  5. Google Search Central. Introduction to structured data markup.
  6. Schema.org. Schema.org — shared structured-data vocabulary.
  7. Le Pochat, V., et al.. Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation, NDSS 2019. The sampling frame for the general-web baseline used throughout.
  8. Koster, M., Illyes, G., Zeller, H., Sassman, L.. Robots Exclusion Protocol (RFC 9309), IETF, 2022.

Cite this

Replatform Radar, The State of Higher-Ed CMS Readiness 2026, July 2026. replatformradar.com/research/higher-ed-cms-readiness-2026. Licensed CC BY 4.0 — the dataset and every number on this page may be reused with attribution. See also our web-wide readiness study. Archived on Zenodo: doi:10.5281/zenodo.21615309. Ready-to-paste formats:

Plain textarticles, newsletters, reports
Replatform Radar, "The State of Higher-Ed CMS Readiness 2026," July 2026, https://replatformradar.com/research/higher-ed-cms-readiness-2026. doi:10.5281/zenodo.21615309. Open dataset, CC BY 4.0.
Wikipedia{{cite web}} wikitext
{{cite web |author=Replatform Radar |title=The State of Higher-Ed CMS Readiness 2026 |date=2026-07-23 |url=https://replatformradar.com/research/higher-ed-cms-readiness-2026 |publisher=Replatform Radar |doi=10.5281/zenodo.21615309 |access-date=}}
BibTeXLaTeX / reference managers
@misc{replatformradar2026edu,
  author       = {{Replatform Radar}},
  title        = {The State of Higher-Ed CMS Readiness 2026},
  year         = {2026},
  doi          = {10.5281/zenodo.21615309},
  howpublished = {\url{https://replatformradar.com/research/higher-ed-cms-readiness-2026}},
  note         = {Open dataset, licensed CC BY 4.0}
}

Run these eleven signals against your own institution’s site before you migrate.

Request a scan →