Stop finding out about your clients' problems when it's already too late
Your Drupal sites, controlled from one screen. Install the free audit module, connect to your dashboard, and know exactly which sites need attention today. No more Friday-evening surprises.
Open-source module published on drupal.org. Free forever for unlimited projects.
If you manage more than 5 Drupal sites, you probably recognize this
You find out about critical updates... on Twitter
A Drupal security advisory drops and then the scramble begins: checking every site one by one to see who's affected. By the time you're done, the afternoon is gone.
Your client asks if their site is well maintained
And you don't have anything tangible to show them. No report, no score, no before-and-after. Just "trust me, we're on it."
Half your maintenance hours go to checking, not fixing
You spend hours every week on maintenance, but half of that time goes to logging into admin panels and verifying things are OK. That's time you can't bill for actual improvements.
Staging and production have been drifting apart for months
Nobody noticed until something broke in production. Now it's a firefighting session instead of a planned deploy.
Inherited projects eat 4-6 hours before you can even quote
Another agency hands off a project and you need half a day just to figure out what state it's in. Before you've written a single line of code.
AI-generated code works... until it doesn't
A dev or an AI writes a hook, a controller, a service. It works in local. Passes the tests. But nobody checks if it follows Drupal coding standards. Those problems pile up quietly until production breaks.
What changes when you use DruScan
Centralized visibility
Stop reviewing sites one by one. One dashboard, all your projects, all the alerts. No module update, no Drupal core patch, no security advisory slips through the cracks across any of your projects.
A client calls because their site got hacked. Turns out a module had a security advisory 6 months ago and nobody applied the patch. With DruScan, you'd have seen it across all your projects the same day it was published.
Prove your work to clients
Share the dashboard with your client. With historical tracking on paid plans, they see the security score went from 68 to 91. Problems detected and resolved. Without jargon, without preparing reports. The dashboard speaks for you.
An agency that proves tangible value retains maintenance clients. If the contract is €300-500/month, keeping one client for an extra year is €3,600-6,000. The dashboard is a client retention tool, not just monitoring.
Safety net for custom code & AI
The Drupal community's best practices as an automatic quality gate. Whether a dev or an AI wrote the code, the audit module checks it against real community standards.
Generate code with AI. Validate it with the community.
Who uses DruScan
Whether you manage the sites or pay for them, DruScan gives you the visibility you need.
For Drupal agencies & developers
Install the free module on each client site. See your entire portfolio's health from one screen. And here's the part that pays for itself: share the dashboard with your clients.
Your best retention tool. Let your client see, without technical jargon, that their site is healthy and protected. With paid plans, show them the evolution: the security score that went from 68 to 91, the problems detected and resolved. Without preparing reports, without digging through tickets, without inventing summaries. The dashboard speaks for you.
- Audit inherited projects in 10 minutes and walk into the meeting with data
- Know about security updates before your clients find out from somewhere else
- Validate AI-generated code against Drupal community standards automatically
- Compare staging and production before every deploy
Free for unlimited projects. Each module installation generates a complete audit. Upgrade to track history, multiple environments, and add team members.
For website owners
Ask your agency to invite you to view your site's dashboard. Stop wondering if your maintenance budget is being well spent. See the proof without needing to understand the technical details.
- See your site's health at a glance: green means good, red means action needed
- Track if your site is improving over time or if problems are piling up
- Know if security updates are being applied or if your site is falling behind
- Get proof that your maintenance budget is going toward real technical work
No technical knowledge required. Your agency controls access and you see what they share.
Every pending update
across all your projects. One screen.
Instead of logging into each admin panel individually, see every pending update across your entire portfolio in one view. Know exactly which client sites have security updates waiting. No more discovering critical updates three weeks late.
-
Complete module inventory
Every module on every project, with current and available versions.
-
Security updates flagged instantly
Know about a security advisory the same day it drops, not three weeks later when something breaks.
-
Your team focuses on fixing, not checking
Stop spending hours verifying what needs updating. DruScan shows you. You fix it.
Generate code with AI.
Validate it with the community.
In the age of AI, the amount of Drupal code being generated has multiplied. But quality doesn't always keep up. A dev or an AI writes a hook, a controller, a service. It works in local. Passes the tests. But it doesn't follow Drupal coding standards, misuses APIs, has subtle security issues.
Those problems don't explode immediately. They pile up. And one day in production, something breaks and nobody knows why. The audit module is the automatic code review that applies the Drupal community's standards, regardless of who wrote the code.
-
Community-backed standards, not arbitrary rules
The audit module checks against best practices agreed upon by the Drupal community.
-
Custom code analysis
Security issues, anti-patterns, incorrect API usage. Catches the problems a manual review would catch.
-
Safety net for junior devs and AI tools
Supervise the code your team or AI tools generate without reviewing every line manually.
Six health scores. Each one means something for your business.
Like getting a continuous health checkup for every Drupal site in your portfolio. Each score from 0 to 100 tells you exactly what's at risk and what to fix first.
Scores are calculated on your server. Only the numbers come to us. Your code and data stay private.
Site Health & Status
If this score drops below 70, your site has stability problems that can cause downtime. Every outage means visitors who leave and don't come back. Cron, PHP memory, core version, database performance: the basics that keep Drupal running.
Modules & Updates
A low score here means you have unpatched security updates. That's the open door an attacker needs. Every module inventoried, security patches flagged, obsolete modules identified. You'll never be the agency that missed a critical update.
Content Architecture
Unused fields and uncached Views accumulate like technical debt. Your site gets slower every month and you don't know why. This score tracks the silent bloat that drags down database queries and page load times.
Frontend & Theming
This is where user experience lives. Templates with issues, misconfigured image styles, responsive images that aren't actually responsive. What your visitors notice, even if they can't explain it.
Technical SEO
A low SEO score means you're leaving organic traffic on the table. Google sees the technical infrastructure before the content. Sitemap, metatags, URL structure, robots.txt: the foundation nobody thinks about until rankings drop.
Internationalization
For multilingual sites, this is where most implementations quietly break. Translation modules enabled and configured, content translation actually working, interface languages set up correctly. The silent failures that frustrate your international visitors.
Set up your health check in 10 minutes
No complex setup. No hosting restrictions. Works with Drupal 10 and 11.
Install the module on each project
Run a Composer command. Enable the base module. Then turn on only the submodules you need: Updates, SEO, Performance, Fields, Views, i18n... Each project gets exactly the monitoring it needs. Nothing more.
composer require drupal/audit && drush en audit audit_seo audit_updates
Connect to your dashboard
Create your free account at app.druscan.com, get an API key, paste it into the module settings. That's it. Cron automatically sends scores to your dashboard. The Updates module also sends your module list with versions. Your passwords, code, content, and user data never leave your server. We only receive scores (0-100), module versions, and Drupal core version. Nothing else.
Open DruScan with your morning coffee
In 30 seconds you know which sites need attention today.
Free plan: Current health scores for all your projects. Paid plans: Historical trends, email alerts when scores drop, and environment comparison.
Built by someone who's been in your shoes
Years of Drupal development experience behind every check in the audit module
Individual checks the audit module runs per site, across six categories
Open-source. Published on drupal.org. Inspect every line of code before you install.
The math is simple
30 min/week per site to check updates, cron, logs
10 sites = 5 hours/week of non-billable work
5h × 48 weeks × €50/hour =
in developer time. And you still miss things.
Daily sync. Alerts. Historical tracking.
10 sites × €139/year =
11% of manual cost. And nothing slips through.
The free plan shows you what's wrong today. Paid plans let you track the evolution, prove improvements to clients, and get alerted before small issues become expensive emergencies. Most agencies upgrade after seeing their first audit results.
Start free. Upgrade when you need the full picture.
The first 100 paid projects get 30% off for 3 years.
Lock in this price for your first three years. Real scarcity: once 100 projects are claimed, the discount closes. Early adopters get 3 full years to grow before paying the standard rate.
Free
per project
- 1 environment per project
- Weekly data sync
- All audit scores
- Detailed module list
- Update alerts
- Multi-user access
- Historical data
Free tells you what's wrong. Paid tells you the story.
Free gives you today's diagnosis. Paid adds the follow-up: historical trends to show your client their site went from 68 to 91, alerts so you know the moment something needs attention, and environment comparison to catch problems before deploy.
Daily sync instead of weekly. Know about issues the same day, not a week later when they've already caused damage.
Multiple environments. Verify that staging and production are aligned before each deploy. No more crossed fingers.
Team access. Let your client see the dashboard without sharing credentials. They see the work you do. You keep the client.
Need alerts, history, or team access?
Annual billing per project. Mix free and paid however you want.
Starter
per project / year
- 1 environment per project
- Weekly data sync
- All audit scores
- Detailed module list with versions
- Monthly update alerts
- Multi-user access
- Historical data
Coming soon. We will notify all registered users when available.
Pro
per project / year
- 2 environments per project
- Daily data sync
- All audit scores
- Detailed module list with versions
- Weekly update alerts
- Multi-user access
- Historical data (30 days)
Coming soon. We will notify all registered users when available.
Business
per project / year
- Unlimited environments
- Daily data sync
- All audit scores
- Detailed module list with versions
- Daily update alerts
- Multi-user access
- Unlimited history
Coming soon. We will notify all registered users when available.
What you get for €139/site/year (Pro):
Total value: €15,000+/year. Your investment: €1,390/year for 10 sites.
No payment required for Free. Upgrade or downgrade individual projects anytime. You're in control.
Early adopter discount is locked in for 3 years. After that, your plan renews at the standard rate.
Frequently asked questions
What data is sent to the dashboard?
How do I install the module?
composer require drupal/audit in your project. Enable the base module in Drupal. Then enable the submodules you need: Updates, SEO, Performance, Fields, etc. Get your API key from app.druscan.com, paste it in, and you're done. Cron handles the rest automatically.