Hacked Site Recovery

Website hacked? We'll get it clean, and keep it that way.

Spam links you didn’t add. Strange posts under your name. A warning from Google, or a site your host has quietly taken offline. A hacked WordPress site is stressful, but it is fixable. We find exactly what is wrong, clean it out completely, and move you onto hosting that keeps it from happening again.

Photography and video services, Control Shift Auckland
Paul from Control Shift in a website planning conversation

Not sure if you've been hacked?

It happens to well-run businesses too, and it is entirely fixable.

Most hacked sites belong to careful people. It usually comes down to an out of date plugin, a reused password, or a previous developer who left a door unlocked. The good news is that once we can see the site, we can tell you exactly what is going on, in plain English.

How it works

From compromised to clean.

01

Send us the site

The web address is enough to start. We take a safe copy and get to work finding what has been planted, without touching your live site.

02

We find what's been planted

A plain English rundown of exactly what we found: the back doors, the spam, the rogue logins. No jargon and no scare tactics, just the real picture.

03

We move you to secure hosting

We set you up on our managed hosting, hardened and monitored, so the cleaned site has somewhere safe to live from day one.

04

We clean it out, and keep it clean

Back doors, spam and malicious files all removed, your genuine content left exactly as it should be. From there, updates, backups and monitoring keep it clean rather than letting it drift back.

The free assessment

What we find and remove.

Every hack is a little different, but these are the usual suspects. We check for all of them, and clear out anything that should not be there.

Hidden back doors

Fake plugins and disguised files that let an outsider back in, even after the obvious mess is cleared. These are what we hunt for hardest.

Spam posts and links

Casino, betting and counterfeit pages published under your name, plus invisible links slipped into your real pages to trick Google.

Rogue admin logins

Extra administrator accounts quietly added so whoever got in can stroll back in later. We remove any that should not be there.

Malicious plugins

File managers and code consoles that hand over full control of the site. Handy for a developer, a gift for an attacker. Off they come.

Phoning-home scripts

Code that quietly checks in with a criminal server waiting for its next instruction. We cut the connection and pull the code out.

A clean bill of health

We reset the security keys and passwords to lock out whoever got in, then check the site the way Google sees it so your rankings can recover.

Reviews

5-star rated on Google, here's why

★★★★★
“

I once had an issue that Paul was able to fix for me on a Sunday. Paul went out of his way to help me which was not expected, but very much appreciated. The exceptional expertise and service provided by the team at Control Shift are unparalleled. I wholeheartedly recommend their services to anyone.

“

Campbell Hunter

Dick Smith

★★★★★
“

I’ve known the guys at Control Shift for years, always good value and great to bounce ideas around with. We’ve had plenty of chats about security, DNS setups, and website firewall tweaks, and they always bring solid insight. Super helpful, easy to talk to, and just all-around good humans.

“

Ryan Watkinson

Command IT

★★★★★
“

Control Shift are a trustworthy partner, focusing on quality website builds and NZ based hosting. They leave no stone upturned when it comes to website builds, with an unwavering customer focus and the technical ability to ensure you’re getting exactly what you need. As a web host they’re focused on security and speed to ensure […]

“

Leighton Wilson

Ladder & Co

Think your site's been hit? Let's take a look.

Send us the details and we will take a safe look, then tell you plainly what is going on. The first assessment is free, and there is no obligation to go further.