Yes, it is. Drupal has built-in security controls, a secure code base, refined access control, and database security. With these security features, it meets Open Web Application Security Project (OWASP) security standards.