WordPress site hacked? Let's get it clean and back online.

Common signs are visitors being redirected to other sites, spam or foreign-language pages appearing in Google, a warning in Chrome or Google search, new admin users you didn't create, your host suspending the site, or the site suddenly loading slowly or not at all.

Don't delete the site or start removing files at random, as that can destroy the evidence of how the attackers got in. Change your hosting and WordPress passwords, then get in touch so the site can be cleaned up properly.

It depends on how badly the site is infected and how out of date it is. I'll look at it and give you a fixed price before any work starts, so you know exactly what you're paying.

Most small business sites can be cleaned and secured within a day or two of the go-ahead. Clearing a Google warning can take a little longer, because Google has to review the site again. Malware can leave behind a backdoor if not fully removed, so thorough cleaning is essential.

Small business sites are rarely targeted personally. Often your site is used to spam other sites or to try and trick users into giving over access to their own computer. Automated bots scan the internet for WordPress sites running outdated plugins, themes or weak passwords, and attack whatever they find.

Keep WordPress, plugins and themes updated as well as your server, use strong passwords with two-factor authentication, and take regular backups. Our WordPress maintenance plan does all of this for you every month.

Yes. Outdated PHP versions can have security vulnerabilities that attackers exploit. Keeping PHP up to date is an important part of securing your WordPress site.