Research

Drupal AI readiness statistics

In November 2026, we could only tell which sites run on Drupal where our scanner could read the page, so this page covers those sites and says nothing about how many turned our scanner away.

Updated 21:07 UTC · November 2026

Based on the sites Bot Appétit has scanned. Most of these sites come from lists we scan for research. Not a random sample of the web.

All sites on the State of the Web

How Drupal sites land

Every page we read gets a score out of 100, the number at the top of its report (how scoring works). Each row is a range of scores. Where too few sites score in the lowest ranges, they are joined into one row.

Not enough sites yet There are not enough sites yet to split them by score.

A platform is only detectable on a page our scanner could read, so these shares are of the Drupal sites we could read.

Based on the sites Bot Appétit has scanned. Most of these sites come from lists we scan for research. Not a random sample of the web.

Better or worse

Not enough history yet.

Based on the sites Bot Appétit has scanned. Most of these sites come from lists we scan for research. Not a random sample of the web.

AI access

  • robots.txt disallows some AI crawlers 16%
  • robots.txt disallows major AI crawlers 4%
Show as a table
How Drupal sites treat AI crawlers
What we foundShare of sites
robots.txt disallows some AI crawlers16%
robots.txt disallows major AI crawlers4%

Based on the sites Bot Appétit has scanned. Most of these sites come from lists we scan for research. Not a random sample of the web.

What Drupal sites get right and wrong

Passed more often than on the average site: “Semantic HTML landmarks” (82%, against 52% of all sites); “Images are optimised” (39%, against 14% of all sites); “This page declares its canonical URL” (82%, against 60% of all sites). Least often passed: several checks that no Drupal site we could read passed.

Every check, Drupal against all sites

Share of sites that pass each check, over the sites the check applies to. The Gap column is the difference in percentage points between the two shares; a dash means not enough sites yet.

Drupal sites against all sites: share passing each check
Check Drupal sites All sites Gap (points)
Served over a secure HTTPS connection 100% >99% Level
HTTP redirects to HTTPS 86% 94% −8 points
No mixed (insecure) content 98% 99% −1 point
Core security headers are set 24% 11% +13 points
Not flagged for malware or phishing 100% 100% Level
No server version leakage 39% 93% −54 points
security.txt is published 4% 5% −1 point
Reached without a redirect chain 94% 98% −4 points
Caching or validation headers are set 100% 94% +6 points
The site settles on one host (www vs non-www) 76% 87% −11 points
robots.txt is present and not over-blocking 96% 90% +6 points
Not accidentally set to noindex 98% 99% −1 point
This page declares its canonical URL 82% 60% +22 points
Mobile viewport is set 94% 93% +1 point
Has a title tag 100% >99% Level
Title fits a search snippet 53% 57% −4 points
Has a meta description 71% 91% −20 points
Description fits a search snippet 68% 64% +4 points
The page has an H1 53% 84% −31 points
Logical heading order 67% 63% +4 points
Topic is consistent across title, H1 and description 31% 62% −31 points
Images have descriptive alt text 73% 94% −21 points
Your page's HTML isn't oversized 100% 99% +1 point
Open Graph tags for sharing 35% 26% +9 points
Twitter/X card tags 55% 73% −18 points
XML sitemap is present and referenced 27% 74% −47 points
Missing pages return a real 404 90% 91% −1 point
Images are optimised 39% 14% +25 points
Language and charset declared 98% 87% +11 points
hreflang for language variants — 99% —
Analytics is installed 96% 76% +20 points
Search Console / Bing verification 82% 82% Level
A favicon is set 100% 98% +2 points
No meta-refresh redirect 100% >99% Level
Your content survives without JavaScript 98% 96% +2 points
Your answer is in the HTML 100% 95% +5 points
Buttons, links and fields have names 34% 32% +2 points
Semantic HTML landmarks 82% 52% +30 points
Content is scannable in self-contained chunks 96% 93% +3 points
Claims come with figures, quotes or sources 53% 56% −3 points
Section headings are phrased as questions 13% 21% −8 points
Reading the page is affordable for a machine 81% 89% −8 points
No hidden text written for an AI model 100% >99% Level
Sitemap dates tell a machine what changed 78% 67% +11 points
The links in llms.txt resolve — 85% —
Author / publisher is clear 24% 49% −25 points
A machine-readable published / updated date 33% 12% +21 points
llms.txt is present and valid 12% 27% −15 points
Clean content for agents (Markdown) 0% 4% −4 points
Structured data is present 43% 55% −12 points
Structured data is valid — 97% —
FAQ / Q&A schema — 47% —
Organization schema with sameAs 10% 32% −22 points
Right schema type for the page — 93% —
Schema facts also appear in the page text — 56% —
Breadcrumb structured data — 27% —
AI crawlers aren't blocked 82% 90% −8 points
Automated visitors can reach your pages — — —
Engines are allowed to quote the page 98% 99% −1 point
Your page arrives quickly 91% 95% −4 points
AI bot rules are explicit and intentional 16% 14% +2 points
Content usage preferences declared 6% 4% +2 points
Resource-discovery Link headers 0% 2% −2 points
No broken links 84% 86% −2 points
Links don't point at redirects 73% 91% −18 points
Descriptive anchor text 100% 99% +1 point
Sensible internal/external link mix 98% 96% +2 points
Links are real links 66% 89% −23 points
Largest Contentful Paint (LCP) — — —
Cumulative Layout Shift (CLS) — — —
Interaction to Next Paint (INP) — — —
Page weight and render-blocking — — —
MCP Server Card 0% 1% −1 point
AI catalog 0% 1% −1 point
A2A Agent Card 0% <1% Level
WebMCP tools in the page 0% 1% −1 point
AI usage preferences (Content-Usage) 0% <1% Level
Licensing terms for AI (RSL) 2% <1% +2 points
Text-and-data-mining reservation (TDMRep) 2% <1% +2 points
Markdown version linked from the page 0% 1% −1 point
Content signals agree everywhere — — —
Agent Skills index 0% 1% −1 point
API catalog 0% 1% −1 point
OAuth authorization-server metadata 0% 3% −3 points
OAuth protected-resource metadata 0% 2% −2 points
OpenID Connect discovery 0% 2% −2 points
Web Bot Auth (operates a signed bot) 0% <1% Level
Universal Commerce Protocol manifest — 6% —
Auth.md agent registration 0% <1% Level
AI discovery via DNS 0% <1% Level

Based on the sites Bot Appétit has scanned. Most of these sites come from lists we scan for research. Not a random sample of the web.

See how your site compares

A free scan checks all of this on your page in seconds, with no signup.

Scan your site free

Want it handled? We do that too. No pitch, just a plain-English chat.

Book a call