Skip to main content
Security

Hacked website? We clean it up and lock it down

If you're seeing content you didn't add, strange redirects or a “not secure” warning, get in touch now: we remove the malware, restore your site and harden it so it doesn't happen again.

Get help How we fix it

What you see and what it means

What you see What it usually means What to do now
Pages, links or ads you didn't add are showing up. Someone has got into the site and is using it to slip in spam or links to other sites, usually through a plugin, a theme or a weak password. Take a full backup of the files and database before touching anything: it's the trail that shows how they got in.
Your site sends visitors elsewhere, sometimes only on mobile. Malicious code is redirecting some of your visitors, and it often hides so you don't see it when you're logged in. Check the site on your phone and from Google, and save screenshots and the addresses you land on.
Google or the browser warns people your site may be dangerous. Google has detected malware or deceptive content on your site and flags it to protect visitors; once it's clean, you ask Google for a review to remove the warning. Don't request the Google review yet: the site has to be cleaned first, or the warning will stay.
There are admin users you don't recognise, or your password no longer works. Whoever got in has created an account or taken over yours so they can come back whenever they like. Change every password now: the site, the hosting, FTP and the database.
Your hosting provider has flagged malicious files or suspended your site. Its scan found malware in your files, and it cuts the site off so it stops infecting visitors or sending spam. Ask your host for the report of affected files, but don't delete them blindly: there may be more hidden.

How we fix it

  1. We find out what happened

    Before touching anything, we check what has changed: modified files, new users, and plugins or themes with security flaws. That way the cleanup tackles the cause, not just what you can see.

  2. We remove the malware

    We delete the malicious code and the files and users that shouldn't be there. Your site works as it did before, with your content.

  3. We shut the door

    We harden security after the attack: security headers, a firewall (WAF), two-factor authentication and a permissions review.

  4. We help you keep it from happening again

    We explain what left the door open and how to keep the site up to date. If you'd rather not deal with it yourself, the Smart and Business plans include emergency recovery.

What's included and what it costs

What What's included Timeframe Price Action
Malware Recovery Full malware cleanup, site restoration and security hardening after the attack. 24-48 hours €300-800 + VAT Request a quote , Malware Recovery
Smart plan Recommended Emergency recovery included, advanced security against attacks and a daily backup. Monthly, no lock-in €59 + VAT/mo €71.39/mo incl. VAT
Business plan Everything in the Smart plan, with emergency recovery included, plus urgent support. Monthly, no lock-in €100 + VAT/mo €121/mo incl. VAT
See everything each plan includes See our full security service

Related posts

WordPress

Has Your Website Been Hacked? A Step-by-Step Emergency Guide

What to do if your WordPress site has been hacked: immediate steps, how to clean malware and how to prevent it happening again.

WordPress

The 10 Essential WordPress Plugins in 2026

A curated selection of must-have WordPress plugins for security, performance, SEO and backups. Only the ones you actually need.

Frequently asked questions

Get in touch as soon as possible through the contact page. Malware recovery is resolved within 24-48 hours: full cleanup, site restoration and security hardening so it does not happen again (security headers, WAF, two-factor authentication and permission review). Our blog has a guide with the first steps.
It costs between €300 and €800 + VAT, depending on the size of the website and the extent of the infection. Emergency recovery is already included in the Smart and Business maintenance plans.
With the Smart and Business plans, yes: emergency recovery is included with top priority. With the Essential plan, an additional charge applies depending on the type of incident.
By keeping the core, plugins and theme up to date, with backups and stronger security. That's what the maintenance plans do, with no lock-in; Smart and Business add advanced security against attacks and daily backups.
Yes. WordPress is our specialty and most of the cases we see, but we also work with websites built on other technologies: tell us about yours and we'll prepare a custom quote.

Tell us what's wrong with your website

Tell us what you need and we'll get back to you within 24 hours. No commitment, no strings attached.

Other problems we fix