The Scan
WordPress
aclu.org
Source: WebPulse scanner detection, May 2026.
Drupal
eff.org
Source: WebPulse scanner detection, May 2026.
The ACLU runs WordPress. The EFF — the organization that defends digital rights — runs Drupal. Both legacy. Both carrying the security burden of frameworks with thousands of CVEs.
The Budget Reality
Nonprofits spend 2-5% of budget on IT. WordPress is chosen because it's free to download. But Astro and Hugo also deploy for free on CDN hosting — with no PHP servers, no plugin licensing, no database maintenance. For content-focused nonprofit websites, modern frameworks are objectively cheaper when total cost is calculated. The barrier isn't money — it's awareness.
