01
Compromise & redirects
Altered pages, search spam or visitors being redirected.
- Investigate altered pages and injected content
- Remove malicious redirects and links
- Retest access and search behavior
WEBSITE SECURITY / RECOVERY
When your website is compromised,
contain, recover and harden.
For WordPress, DedeCMS, Empire CMS and other common platforms: investigate compromise, remove malware, repair entry points, recover access and maintain hosting and server security.
Incident investigationCleanup & recoveryRepair & protection
WEBSITE SECURITY / RECOVERY
01 / THE RIGHT STARTING POINT
Start with the symptoms.
02
Malware & backdoors
Unexpected files, hidden accounts or infections that return after cleanup.
- Inspect malicious files and hidden accounts
- Review scheduled tasks and database content
- Trace reinfection entry points
03
Vulnerabilities & protection
Upload endpoints, outdated components, malicious requests or unexpected DNS changes.
- Review upload validation and access permissions
- Inspect component versions and known issues
- Check DNS, CDN and access rules
04
Website maintenance & hosting
From server setup to ongoing maintenance, troubleshooting and DDoS / CC protection.
- Hosting, backups and recovery
- Troubleshooting and server setup
- DDoS and CC protection
02 / SCOPE OF WORK
Remove threats and address entry points.
Scope depends on the platform, hosting access and incident.
01Incident response
Website security & recovery
Incident response
Review pages, files, logs and accounts to assess impact, preserve relevant evidence and agree containment steps.
- Review and document
- Implement agreed repairs
- Verify and hand over
02Malware removal
Website security & recovery
Malware removal
Inspect malicious scripts, scheduled tasks, hidden administrators and injected database content, then clean against trusted sources.
- Review and document
- Implement agreed repairs
- Verify and hand over
03Vulnerability repair
Website security & recovery
Vulnerability repair
Review component versions, file permissions and upload validation; repair confirmed issues and retest normal functionality.
- Review and document
- Implement agreed repairs
- Verify and hand over
04Attack protection
Website security & recovery
Attack protection
Configure WAF, access rules, login protection and rate limits for the environment, then check for false positives.
- Review and document
- Implement agreed repairs
- Verify and hand over
05Domain & DNS recovery
Website security & recovery
Domain & DNS recovery
Review domain access, DNS, CDN, certificates and redirects to help restore trusted resolution and website access.
- Review and document
- Implement agreed repairs
- Verify and hand over
06Maintenance & hosting
Website security & recovery
Ongoing care for website operations.
Hosting, troubleshooting, server setup, backups and recovery. Configure upstream DDoS mitigation, CDN / WAF and CC rules according to infrastructure and traffic; capacity and service periods are agreed.
- Web, database, HTTPS and access setup
- Updates, backups, availability and log checks
- Downtime, certificates, databases and resource issues
- Mitigation integration, rate limits and false-positive review
03 / CHECKABLE DELIVERABLES
Make the work concrete.
Quantities, implementation access, review periods and fees are set in the agreed proposal.
01
Incident findings
Document findings, affected areas and priorities.
02
Remediation log
Record cleanup, repairs and configuration changes.
03
Recovery checks
Check key pages, login, forms and uploads.
04
Protection handover
Hand over protection rules, backup advice and monitoring recommendations.
05
Maintenance configuration
Hand over environment settings, backup policies, review tasks and incident procedures.
06
Protection verification
Document CDN / WAF, rate limits and mitigation setup; verify normal traffic and key pages.
04 / PROJECT WORKFLOW
A clear next step at every stage.
- 01
Assess
Share the URL, symptoms, timing and available access.
- 02
Investigate
Preserve a backup and investigate impact and entry points.
- 03
Remediate
Clean, repair and configure agreed protection.
- 04
Verify
Verify functionality and deliver remediation notes.
05 / FAQ
A few useful answers.
Agree scope, fees, access and handover before work starts.
Ask about this service ↗
What information and access are needed?+
Start with the URL, symptoms and timing. Hosting, logs, admin or domain access is agreed as needed.
Can future incidents be prevented entirely?+
No permanent zero-risk guarantee can be made. Component updates, access reviews, backups and ongoing monitoring remain necessary.
What are the timeline and fees?+
Timing and fees follow an assessment of impact, platform, backups and access.
Which platforms are supported?+
WordPress, DedeCMS, Empire CMS and other common platforms are supported. Other PHP and custom systems are assessed against versions, source code and hosting/database access. Hosted platforms depend on available permissions.
What does maintenance cover?+
Hosting, updates, backups, troubleshooting, server setup and security-rule maintenance. Review frequency, response times and third-party costs are agreed.
How is DDoS and CC protection implemented?+
Integrate mitigation suited to traffic and infrastructure, configure WAF, rate limits and caching, and verify critical flows. Capacity and resource costs depend on the plan.
Can a site be repaired without backups?+
Assess trusted application files, database integrity and existing content before agreeing cleanup or rebuild. Recoverability depends on the findings.
Website security & recovery
Share the symptoms. Start recovery.
Share your current website, market and the problem you want to solve so we can define the scope.
Discuss a security issue ↗Understand the need, then agree a plan.