WORD SECURITY
SERVICESMalware RemovalHacked Site RecoverySecurity HardeningOngoing Security RESOURCESWordPress Security GuidesHacked Site Recovery GuideSecurity ChecklistEmergency Checklist COMPANY PricingAboutContact REQUEST MALWARE CLEANUP
RESOURCES

WordPress security guides

Practical, technical guides for people dealing with a hacked WordPress site, or trying not to. Start with the complete recovery guide or the emergency checklist.

START HERE

Core resources

GUIDEThe Complete WordPress Hacked Site Recovery GuideThe full lifecycle: detect, contain, clean, validate, recover and prevent reinfection.GUIDEWordPress Hacked Site Emergency ChecklistA tick-off checklist for the first response to a compromise.GUIDEWordPress Security Checklist for Small BusinessesA practical baseline for a business site, without enterprise tooling.
DURING AN INCIDENT

Recognise, contain and clean

GUIDEHow to Tell if Your WordPress Site Has Been HackedSymptoms, quick checks and what separates a hack from a glitch.GUIDEWhat to Do Immediately After Discovering a WordPress HackThe first-day decisions: contain, notify, preserve and communicate.GUIDEWordPress Malware Cleanup ChecklistA technical checklist for files, database, users, tasks and verification.GUIDEUnknown Admin User in WordPress: What to DoHow to assess and remove a suspicious administrator safely.GUIDEWordPress Website Suspended for Malware: Recovery GuideWhat your host wants, what to clean and how to get the site restored.GUIDEHacked wp-config.php: What Site Owners Should CheckWhat to look for in wp-config.php and what to rotate afterwards.
SPECIFIC PROBLEMS

Redirects, spam and reinfection

GUIDEWordPress Site Redirecting to Spam: Causes and FixesWhy redirects appear, why you may not see them, and how to track the source.GUIDECasino and Pharmacy Spam on WordPress: Cleanup GuideRecognise and remove injected gambling and pharmacy content.GUIDEHow to Remove Spam Pages From Google After a WordPress HackClean up the index once the site itself is clean.GUIDEWordPress Malware Keeps Coming Back: Why Reinfections HappenThe usual reasons a site is clean for a week and infected again.GUIDEWordPress Backdoors: How Reinfection HappensThe persistence mechanisms attackers leave behind, explained defensively.GUIDEWhy Restoring a Backup May Not Fix a Hacked WordPress SiteWhen a restore helps, when it re-creates the problem, and how to use one safely.
AFTERWARDS

Hardening and prevention

GUIDEHow to Secure WordPress After Malware RemovalClose the way in and make the next attempt harder.GUIDEWordPress Security Checklist for Small BusinessesA practical baseline for a business site, without enterprise tooling.

Rather have it handled?

Send us the details of the site and we'll tell you what we'd do and what it would cost.

Request Malware CleanupSee services