Signs Your Website May Be Compromised

  • Pages have been defaced or unexpected users appear in the CMS
  • Customers report malware warnings or suspicious redirects
  • Google flags the website as hacked or unsafe
  • Your hosting provider suspends the account
  • Files, plugins or integrations change without authorisation

Our Recovery Process

  1. Containment: We reduce further access and protect the live environment.
  2. Investigation: We review accounts, files, logs and recent changes to identify the likely entry point.
  3. Remediation: We remove malicious code, close vulnerabilities and restore trusted components.
  4. Verification: We test the website, check redirects and help with security warnings and monitoring.

Do Not Make the Situation Worse

A rushed restore can overwrite evidence, reinstall the vulnerability or leave hidden access behind. Avoid repeatedly changing passwords, deleting files or restoring an unverified backup until the incident has been assessed.

Pricing

The Emergency Investigation is £390 ex. VAT and provides diagnosis, root cause identification and a written action plan. Any recovery implementation is quoted separately and requires approval first.