Security FAQ’s for WordPress

Common signs include: Google showing a red “Deceptive site ahead” warning, visitors being redirected to spam websites, your hosting provider suspending your account, strange admin users appearing in your WordPress dashboard, or Google Search Console showing a Security Issues alert. You can also run our free security scan for an instant check.

Yes, this is extremely common. Most hacks are designed to be invisible to site owners and logged-in administrators. The malware only shows itself to search engines or first-time visitors. Always test your site in an incognito browser window, or use our free scanner, to see what Google actually sees.

The vast majority of WordPress hacks exploit one of four things: an outdated plugin with a known vulnerability, a weak or compromised admin password, a nulled (pirated) theme or plugin, or a shared hosting environment where another site was infected first. In our experience, outdated plugins are responsible for over 70% of hacks we clean up.

The Japanese keyword hack injects thousands of spam pages onto your site that are only visible to search engines not to you when you’re logged in. These pages are optimised for Japanese search terms promoting counterfeit goods. Your domain authority is being used to rank spam content. It’s completely removable. Read our full guide here.

Yes, in almost every case. After a clean removal and successful Google review, most sites recover their pre-hack rankings within 4–8 weeks. The faster you act, the better the recovery. Sites that have been infected for months take longer to recover than those cleaned quickly.

Our Emergency Recovery service is fixed at £495. Full Recovery + Hardening is £595. Monthly Security Care Plan is £149/month. All prices are fixed — no hidden fees, no hourly rates. If we can’t fix it, you don’t pay.

It means exactly what it says. If we cannot fully clean and recover your WordPress site, you pay nothing. In over 300 cleanups, we have maintained a 100% success rate but the guarantee gives you complete peace of mind before you commit.

We respond to all enquiries within 2 hours, 24 hours a day, 7 days a week. For Emergency Recovery, work typically begins within 2 hours of receiving access credentials and the initial payment.

Emergency Recovery typically takes 4–8 hours from start to finish. Full Recovery + Hardening can take up to 24 hours for severely compromised sites. We keep you updated throughout the process.

Yes — we need temporary SFTP/cPanel access and WordPress admin credentials. All credentials are used only for the agreed work and are not retained after completion. We are happy to sign an NDA before we begin.

Yes. We work with all major WordPress hosts worldwide including SiteGround, WP Engine, Kinsta, Bluehost, GoDaddy, Cloudways, cPanel hosts and managed WordPress hosting platforms.

Emergency Recovery includes 30-day monitoring. Full Recovery includes a 90-day re-infection guarantee if the same hack returns due to our cleanup being incomplete, we fix it again for free. Security Care Plan members receive unlimited free cleanups throughout their subscription.

We accept card payments via Stripe (all major cards), bank transfer and PayPal. For Emergency and Full Recovery services: 50% upfront, 50% on completion. A full invoice is provided for every service.

Yes, cancel anytime with no penalty. Your plan continues until the end of the current billing month. No questions asked.

If we cannot fix your site (which has never happened), you receive a full refund of any payment made. For completed work, refunds are not offered but our no-fix, no-fee guarantee means you only pay when the work is done to your satisfaction.