Clean up compromised websites and improve their security
If your website goes down,
you need a clear plan.
If you find malware, suspicious changes or a security vulnerability, we start by assessing what happened. We clean up the agreed areas, investigate how the site was compromised and plan how to strengthen protection. We document the steps and work directly with you.
of your website.ASSESS → CLEAN UP → PROTECT
Examples of supported content management systems
WordPress
TYPO3
Drupal
Joomla
This is what matters
Get your website back under control.
A structured response makes the findings, cleanup and follow-up maintenance clear.
01
Investigate the cause
We review files, the database, access and suspicious changes within the agreed scope.
02
Clean up affected areas
Remove malicious code and identified backdoors, replace affected components and secure access.
03
Reduce the chance of repeat incidents
We plan updates, backups and checks around your website. These steps reduce risk and help you respond if something happens.
If you suspect an active incident
Secure the site first.
Then act on the findings.
Note what you noticed and when, inform your hosting provider and agree whether access to the site should be restricted. Deleting files or restoring a backup without a plan can make the incident harder to investigate.
For the first message, send the domain, symptoms and whether your host has already suspended the site. Keep passwords out of the email. We will arrange the access we need separately.
This is how we proceed
A clear path to the right solution.
You know the next step — and the agreed scope.
01
Assess the incident
We document suspicious activity and preserve the current state before making changes.
02
Investigate and resolve
Within the agreed scope, we clean up affected areas and check the identified points of entry.
03
Review and strengthen protection
You get a summary of the work, any remaining issues and recommendations for running the site.
Good to know
Your questions.
Clear answers.
Suitable next steps
Can you guarantee complete security?
Security work reduces risk and improves detection and response. Ongoing maintenance is still important, and new attack methods can emerge.
What does a security review cover?
We agree the scope in advance. It may include access, extensions, configuration, backups and suspicious changes.
Do you review websites built with systems other than WordPress?
Yes. We review the system, hosting, available access and scope before committing to the work.
Can backups resolve every type of incident?
A suitable, available and usable backup can help restore the site. We still need to investigate what caused the incident.
How do I report a suspected incident?
Use the security incident form to send the domain, symptoms and when you first noticed them. We will agree a secure way to exchange credentials separately.
Your next step
Dealing with an active incident?
Want to improve your protection?
Briefly describe what you noticed. Keep passwords and access keys out of the form.