Google shows a red warning
“This site may harm your computer” or “Deceptive site ahead” — shown to everyone before they reach you.
Usually replies within a few hours
Your website got hacked. I'll tell you exactly what's wrong — free.
Type in your web address. I look at your site from the outside, the same way Google and your customers see it, then email you what I found in plain English.
- No passwords needed
- Nothing to pay up front
- You decide after you know
Sound familiar?
If any of these are happening, your site is very likely hacked.
Every one of these costs you sales and trust for as long as it stays up. The good news: almost all of them are fixable, and most are the same handful of problems I've seen before.
Your site sends visitors somewhere else
Often only on phones, or only when people arrive from a Google search — so it looks fine to you.
Pages you never made
Searching your own business name turns up pills, casinos, or pages in a language you don't speak.
The site is blank or won't load
White screen, error message, or endless loading where your homepage used to be.
Your web host emailed you
They found malware, or they switched your site off to protect their other customers.
You can't log in anymore
Your password stopped working, or there's an admin account in the list that you didn't create.
The free check
What I can find without ever touching your site.
All of this is public — it's what anyone visiting your site can already see. I don't need a login, and I don't need to change anything to look.
- Whether Google has officially flagged your site as dangerous, and what for.
- How many fake pages were added to your site and pushed into Google's results.
- Whether your site redirects people on a phone, or from a Google search.
- Which version of WordPress you're running, and whether it's out of date.
- Which of your plugins have known security holes — usually this is how they got in.
- Whether hidden code has been injected into your pages.
- Whether files that should be locked away are sitting there for anyone to read.
If it turns out you're fine, I'll tell you that too — and it costs you nothing.
Google Safe Browsing statusFlagged
Spam pages in Google's index41 found
Redirect on mobile devicesActive
WordPress version6.4.2 — old
Plugin with known security holeCritical
Hidden code injected in themeFound
Backup file left readableExposed
SSL certificateValid
If you want me to fix it
What the cleanup actually is.
The same five steps, in the same order, every single time.
-
Back everything up first
Before I change a single thing, there's a full copy saved. Nothing I do is one-way.
-
Find and remove the malware
Every infected file, plus the hidden back doors they left behind so they could come back later.
-
Kill redirects, delete spam pages
Then tell Google to drop those fake pages out of your search results.
-
Close the door they came through
Usually an out-of-date plugin. Then lock the rest: strong logins, 2-step login, remove accounts that shouldn't be there.
-
Get the Google warning cleared
I submit your site for review and hand you a short report of what was wrong and what I did.
Most jobs finish in 24–48 hours
Counted from the moment you give me access — not from when you first wrote to me.
14-day re-clean, free
If the same hole gets used again within two weeks of my cleanup, I clean it again at no charge.
Cost
One flat price. You see it before you commit.
The big security companies charge $229–590 a year for the watching part alone. Here you're talking to the person doing the work, not a ticket queue.
Outside check
Free
Find out what's wrong before you spend anything.
- No access needed
- Plain-English email back
- No commitment
Full cleanup
$249 flat
Malware removed, site hardened, Google warning cleared.
- Backup taken first
- Back doors removed
- 14-day re-clean included
- Short written report
Watch
$49 /month
I keep an eye on your site and tell you before your customers notice.
- Daily malware checks
- Google warning alerts
- Cancel any time
Care
$99 /month
Everything in Watch, plus I do the upkeep so it doesn't happen again.
- Updates and backups handled
- Re-cleans included
- Cancel any time
If your site turns out to be a big or unusual job, I tell you the price before I start — never after.
Straight talk
Things I won't tell you.
You're about to trust a stranger with your website. So here's what I'd want to know if I were you.
If that makes me sound less impressive than the ads promising a hack-proof site — good. Those promises are why people stopped trusting this business.
- I won't promise you'll never be hacked again. Nobody can honestly promise that. Be careful with anyone who does.
- I won't say “100% secure” or “bulletproof.” No website is. I close the common doors and keep watching the rest.
- I won't touch your site without your say-so. You give me access on purpose, and I take a full backup before I change anything.
- I won't scare you into buying. If the free check says you're fine, I'll say you're fine.
Questions people ask
Before you hand anyone your website.
How fast can you start?
The free check comes back within a few hours. If you want the cleanup, I usually start the same day, and most sites are done inside 24–48 hours.
Do I have to give you my passwords?
Not for the free check — I never need a login for that. For the cleanup, yes: I need a WordPress admin account and access to your hosting. You create the account, and you can delete it the moment I'm done.
Can you get the Google warning taken off?
Yes — once the site is genuinely clean, I submit it to Google for review. That part runs on Google's clock, usually about a day, but it doesn't happen at all until the malware is really gone.
What if my site is too broken to log in?
That's normal, and it's fixable. If WordPress locked you out, I can usually get in through your hosting account instead.
Will I lose my content?
No. The backup happens first, before anything else, exactly so that answer stays “no.”
What if it turns out I'm not hacked?
Then I tell you that, tell you what I think is really going on, and you owe me nothing.
Find out what's wrong in the next few hours.
It costs you nothing but your web address — and you'll finally know what you're actually dealing with.