WordPress hacked? We clean it up.
Malware, spam pages, redirects or an admin user you don't recognise? We find out how they got in, remove everything and close the hole so it doesn't happen again. For businesses and organisations.
- For businesses and organisations only
- Reply within an hour during business hours
- We agree a fixed price before we start
- We explain what happened
How you know the site is hacked
- Google shows "This site may be hacked" or warns visitors
- Visitors get redirected to other sites
- New pages, products or links you never created
- Your host took the site offline, or email from the domain lands in spam
- An administrator you don't recognise, or plugins you didn't install
How we clean up
- 01
Backup and investigation
We copy everything before touching anything and find out how the attacker got in. Usually a vulnerable plugin, an old theme or a weak password.
- 02
Cleanup
We remove malicious code, backdoors, fake users and spam content. Not just what's visible: EdgePress checks every file and the database.
- 03
Closing the hole
Core, plugins and themes updated, passwords and keys rotated, login and file permissions hardened.
- 04
Documentation
You get a short report: what happened, what we removed and what to do from now on. If Google flagged the site, we help get the warning lifted.
Afterwards: keep it clean
EdgePress, our own WordPress scanner, checks your site every week: known vulnerabilities in plugins and themes, changed files and new users. You hear about it before it becomes a problem. No lock-in.
Read about EdgeTester and EdgePressWhy us
Security specialists with more than ten years of breaking into systems. That's why we know where the holes are. We run penetration tests for companies and built EdgePress specifically for WordPress. We're in Copenhagen.
See our penetration testingTell us what you see
Fill in the form and we reply within an hour during business hours. Call if it's urgent.
Frequently asked questions
Have a question that isn't covered here? Email us at info@edgetek.dk
01 Will we lose content?
No. We back up first and remove only malicious code. Fake pages and spam posts are removed in agreement with you.
02 Can you guarantee it won't happen again?
Nobody can. But we close the path the attacker used, update everything and set up monitoring so you hear about it immediately next time.
03 What access do you need?
WordPress admin and FTP/SFTP or access to the hosting account. We use our own accounts, which you can delete afterwards.
04 What if the site isn't actually hacked?
Then we say so. Sometimes it's a broken plugin or a DNS error. We agree the price for the investigation before we start.
05 How fast can you start?
We reply within an hour during business hours and agree a start time and a fixed price straight away.
06 Do you help private individuals?
No. We work only for businesses, associations and public organisations, so every job gets the same thorough cleanup and documentation.