Start with the symptoms
Share what changed, when you first noticed it, which provider sent an alert, and what steps have already been taken. If the incident is active, contact your hosting provider as well.
Incident recovery service
Hacked website recovery and malware cleanup.
Help for site owners facing redirects, injected content, browser or search warnings, suspicious account changes, or a hosting suspension.
Review and recovery plan
After confirming ownership and access, the site’s current state and available backups can be reviewed. Cleanup or restoration work is scoped to the findings and access available.
Reduce repeat risk
Where in scope, receive practical follow-up recommendations for access, updates, backups, and hosting coordination. A single cleanup cannot guarantee that reinfection will never occur.
What to prepare
Confirm ownership
Only the website owner or an authorized representative can request recovery. Hosting or platform support may need to verify account ownership.
Preserve evidence
Keep provider alerts, relevant timestamps, recent backups, and a summary of changes. Avoid deleting files or restoring backups until the impact is understood.
Share access safely
Do not send passwords in the first message. Agree on a secure access method and the exact work before providing credentials.
Is your website compromised?
Send the website address, symptoms, platform, and any hosting or security warnings. Do not include passwords, payment information, or private customer data.