Question 1

How do I know if my site is hacked?

Accepted Answer

Often, you can't tell just by visiting it. Modern infections switch themselves off for logged-in administrators and their IP addresses: the site looks perfectly normal to you while your visitors receive malicious code. The indirect signals — a Google warning, clients reporting a strange popup, a drop in traffic — usually arrive too late. Only a technical scan settles it.

Question 2

Is the audit really free?

Accepted Answer

Yes, with no strings attached. The external scan requires no access to your site: it's done from the outside, like any visitor would. You receive the report whether you decide to work with me or not.

Question 3

Do I have to change hosts?

Accepted Answer

No. Maintenance and monitoring work on your current hosting, whatever it is. Migrating to my managed infrastructure is an option if your host is holding you back, never a requirement.

Question 4

My site is already infected. What do I do?

Accepted Answer

Call directly, it's faster than a form. Emergency cleanup includes quarantining the malicious code, rotating access credentials, invalidating stolen sessions and finding the point of entry. That last step matters most: without it, the infection comes back.

Question 5

Why didn't my security plugin catch anything?

Accepted Answer

Because security plugins mostly compare files against known signatures. An infection that lives in the database, in a browser service worker, or that loads its code from an external source leaves nothing to compare. That's exactly what happened in the case above, despite an active security plugin.

Legal notice

Hosting

Purpose

Intellectual property

Liability

Governing law