Skip to content
Helal
Site down or hacked?
Start a project

Site down, hacked or under attack?

Tell me what's happening in the form below. It reaches my phone straight away, and I start with the steps on this page.

First response within 4 hours

What's happening?

A sentence or two is enough. Never send passwords here.

How should I reach you first?

Only if you chose WhatsApp or a call. Include the country code.

01 / First hour

What I do in the first hour

  1. Confirm and contain

    I check what you're seeing from the outside: down, redirecting, defaced or taking fake orders. Then I stop the damage first: maintenance mode for a hacked site, blocking rules for bots at checkout.

  2. Keep the evidence

    Before changing anything, I copy the files, the database and the logs. That copy is how we find out how they got in.

  3. Change every key

    Hosting, database, admin users, payment and API keys. Every password and key that could have been seen is replaced.

  4. Find the way in

    Logs, recently changed files, outdated plugins and unknown admin users. A fix that doesn't close the way in only lasts until the next visit.

  5. Clean, restore and write it down

    From a clean backup if there is one, by hand if there isn't. Then a short written note of what happened and what I'd change so it doesn't happen again.

Not an emergency? Start a project is the better place to start.