Skip to main content

THOUGHT LEADERSHIP

Insights

Playbooks and perspectives on keeping Drupal programmes fast, secure, and affordable.

  • business
  • technical
  • technology
  • Modular software components being calibrated in an upgrade laboratory
    business9 Nov 20266 min

    What website owners should ask before approving automated Drupal updates

    A practical guide to scope, testing, approval and recovery

    Ask the right questions about testing, approvals, recovery and reporting before agreeing to automated Drupal security updates.

    Ivan Grynenko

    TrueCMS insight author

    DrupalSecurityAutomated testingWebsite maintenance
  • Modular software components being calibrated in an upgrade laboratory
    business29 Oct 20263 min

    After PHP2Shell: what your provider should prove

    Before accepting a PHP2Shell update as complete, ask for evidence of the fix on every live site and a clear account of any remaining investigation.

    Ask your provider for clear PHP2Shell remediation evidence, production confirmation, named owners and an honest account of any continuing investigation.

    Ivan Grynenko

    TrueCMS insight author

    DrupalSecurityPHP2ShellRelease assurance
  • Modular software components being calibrated in an upgrade laboratory
    business29 Oct 20265 min

    Security patching cannot wait days for approval

    Authorise urgent security fixes in advance, remove repeated customer approval and UAT waits, and make minutes or hours the target for reaching production.

    Move urgent security fixes from days towards minutes. Pre-authorise remediation and deployment, remove repeated customer UAT and approval waits, and automate.

    Ivan Grynenko

    TrueCMS insight author

    SecurityDrupalCustomer approvalsAutomation
  • Illustrative UAT checks flowing to production sites and reported evidence, including fresh inventory, awaiting assessment and missing data
    technical25 Oct 20265 min

    What is actually running on your Drupal websites?

    From a version check in UAT to recurring evidence from production.

    UAT checks confirm a tested release. Recurring production reporting helps teams see what their live Drupal sites report after deployments and rollbacks.

    Ivan Grynenko

    TrueCMS insight author

    DrupalSecurityRelease assuranceSentinel Connector
  • A security patch moving through release checkpoints beside a deadline clock
    technical19 Oct 202611 min

    GovCMS PaaS security patching: how to meet the 48-hour Essential Eight timeframe

    A practical runbook for triage, testing, production releases and audit evidence

    On GovCMS PaaS, your agency owns Drupal patching. A practical 48-hour runbook for triage, testing, production releases and audit evidence.

    Ivan Grynenko

    TrueCMS insight author

    GovCMSSecurityDrupalEssential Eight
  • An AI workflow passing through deliberate human decision checkpoints
    business4 Sept 202613 min

    AI is getting faster. Is your organisation designed to keep up?

    Redesigning how work flows through the business as AI accelerates delivery

    AI makes individual tasks faster. Lasting value depends on redesigning workflows, reducing coordination costs and preserving human accountability.

    Ivan Grynenko

    TrueCMS insight author

    AIWorkflow designBusiness strategyAutomation
  • A radar detecting an incoming risk before it reaches a protected system
    business28 July 20267 min

    Why great technical support is proactive, not just reactive

    Why proactive technical support is essential for reducing long-term cost, improving maintainability, and turning ticket handling into responsible system stewardship.

    Ivan Grynenko

    TrueCMS insight author

    Technical supportProactivityAIMaintainability
  • Many data signals converging through a prism into one clear answer
    technology20 Dec 20255 min

    The Shift Explained: Answer Engine Optimisation (AEO)

    Practical foundations for discoverable, useful answers

    AEO builds on accessible pages, useful evidence and accurate metadata. Learn what to check, what our own audit found and how to measure changes without promising citations.

    Ivan Grynenko

    TrueCMS insight author

    AEOAI SearchDrupalFuture of Search
  • Modular software components being calibrated in an upgrade laboratory
    technical1 Dec 20257 min

    AI-Assisted CivicTheme Upgrades: Inside the CivicTheme Upgrade Lab

    How we used Codex and GPT-5.1 to upgrade a real CivicTheme site from 1.10.0 to 1.12.1 in four hours, with documentation as a first-class output.

    CivicTheme upgrades do not have to be a long, manual exercise. In this insight we walk through our CivicTheme Upgrade Lab framework and a real upgrade from 1.10.0 to 1.12.1 that took four hours end-to-end.

    Daniel Grynenko

    TrueCMS insight author

    CivicThemeGovCMSAI-assisted deliveryDrupal upgrades
  • A bridge connecting a legacy platform to a modern platform
    technical8 Nov 20259 min

    Breaking the Dead End: Migrating GovCMS8 UIKit Starter to Drupal 11

    A low‑risk bridge using maintained TrueCMS packages to eliminate vulnerabilities and buy time to modernise

    Still on the GovCMS8 UIKit Starter? The original @gov.au packages were abandoned years ago, leaving you with security debt and no upgrade path. Here’s how TrueCMS provides a safe, fast bridge to Drupal 11 without redesigning your site.

    Ivan Grynenko

    TrueCMS insight author

    GovCMSDrupal 11UIKitMigration
  • Interlocking pipeline modules forming a continuous delivery scaffold
    technical28 Oct 20257 min

    Vortex Template: Our Default Drupal Scaffold for CI/CD, Testing, and Multi‑Platform Delivery

    Why every new TrueCMS engagement starts on a production‑grade scaffold

    We onboard every new customer onto the Vortex Template scaffold to deliver end‑to‑end CI/CD, automated testing, and rapid delivery across multiple platforms, paired with our in‑house autopilot for fully automated security updates into a dedicated UAT environment.

    Ivan Grynenko

    TrueCMS insight author

    CI/CDAutomationDrupalTesting
  • A sequence of automated quality checkpoints ending in a verified result
    technical10 Jan 20258 min

    The Practical Guide to Drupal Quality Gates

    How to automate code quality, testing, and security checks in your CI/CD pipeline

    Learn how to add automated quality gates to your Drupal CI/CD pipeline so defects never reach production.

    Daniel Grynenko

    TrueCMS insight author

    Quality gatesCI/CDAutomated testingDrupal
  • A security shield surrounded by an automated patching orbit
    technical5 Jan 20256 min

    Drupal Security Autopilot: What Overnight UAT Really Means

    How to keep security patches flowing without burning out your team

    Security updates do not need to be stressful. Here is how we automate Drupal patches, testing, and overnight UAT for our clients.

    Ivan Grynenko

    TrueCMS insight author

    SecurityAutomationDrupalUAT
  • A tangled support process becoming an ordered workflow beside descending cost columns
    business2 Jan 20257 min

    How to Cut Drupal Support Spend Without Cutting Scope

    Automation and senior ownership unlock better outcomes for less

    Support costs balloon when teams rely on manual workflows. Learn three ways to reduce avoidable effort in Drupal support.

    Ivan Grynenko

    TrueCMS insight author

    Cost optimisationSupportAutomationDrupal

Ready to reduce your Drupal support costs?

Get a free support audit and discover how TrueCMS can help you identify opportunities to reduce your Drupal support costs while improving quality and delivery speed.

Customer experience

Organisations TrueCMS has worked with

  • Omni Environmental Group
  • XADO
  • RedyHost
  • Tilkah
  • Quantum BioTek
  • Australian Citizens Party
  • DPV Health
  • Supervision Training Services