Hacked site repair
WordPress site hacked? We'll clean it up and protect it from here.
Buy a year of Pressfort and cleaning up your hacked site is included. We remove the malware, with a WordPress developer finishing the job by hand if needed. Then we keep your site updated and behind a firewall, to close the usual ways in.
- Clean-up included on the yearly plan
- Two more included each year
- Full refund if we can't get it clean
Is it hacked?
Signs your WordPress site has been hacked
Any one of these is worth taking seriously. Most hacks are automated, so they're rarely personal and usually quiet.
Google shows a warning
Your site has "This site may be hacked" under it in Google, or browsers show a red "Deceptive site ahead" page.
Visitors get redirected
People land on spam, scam or adult sites instead of yours. Often it only happens on mobile, or when they arrive from Google, so you might not see it yourself.
Pages you didn't write
Search Google for site:yourdomain.com and you find pages in Japanese, or selling pills, fake designer goods or casino links.
Admin users you don't recognise
There are administrator accounts in WordPress that nobody on your team created.
Your host has stepped in
Your hosting company has emailed about malware, or suspended your account.
Spam is going out
Your site is sending spam emails, or your own emails have started landing in spam folders.
How it works
From hacked to protected in three steps.
Buy a year and add the plugin
Enter your site's address, choose yearly and pay by card. Then upload the Pressfort plugin to WordPress and activate it. Your site connects on its own.
We clean it up
The first scan finds the malware and the clean-up starts, automatically where possible. If that can't remove everything, a developer finishes the job by hand. WordPress security keys are reset afterwards, so anyone logged in is signed out.
It stays protected
From then on, the firewall, virtual patching and safe updates close the usual ways in. Daily backups mean there's always a clean copy. If anything gets through, two clean-ups a year are included.
Why not a one-off clean-up?
A clean-up on its own often doesn't last.
Most WordPress hacks get in through a plugin that's out of date, or one with a flaw nobody has fixed yet. In 2025, 46% of WordPress vulnerabilities still had no fix when they were made public. Remove the malware but leave that gap open, and the same automated attacks find it again.
So Pressfort doesn't stop at the clean-up. Your site is kept updated, with a backup and a staging test first, and the firewall blocks attacks on known flaws, including ones the plugin developer hasn't fixed yet. We've been building and repairing WordPress sites for almost 15 years.
- Malware removed, by a developer if the automatic clean-up can't finish it
- Firewall and virtual patching from day one
- Plugins, themes and WordPress kept up to date, safely
- Daily off-site backups, kept for 90 days
Figure from Patchstack, State of WordPress Security in 2026.
- Malware foundSpam links injected into 3 files
- Our team alertedStraight from the scanner
- Site cleanedInfected files replaced, backdoor removed
- Scan clean againWeak spot patched so it can't happen the same way
FAQ
Hacked site repair, answered
Something else? Email hello@getpressfort.com and tell us what you're seeing.
How quickly does the clean-up start?
Straight after your site's first scan, which runs once it connects. Where we can, the clean-up starts automatically. If an automatic clean-up isn't possible, can't remove everything, or is still running after 6 hours, a developer takes over and finishes the job by hand. We'll email you as it goes, and again when your site is clean.
Will the Google warning go away?
Yes, once Google checks your site again. When your site is clean, ask for a review in Google Search Console, under Security issues. Google says malware reviews usually take a few days, and reviews for spam can take a few weeks.
Not sure how? Reply to any of our emails and we'll talk you through it.
Do I need to be able to log in to WordPress?
Yes. You install the Pressfort plugin from your WordPress dashboard, so you need to be able to log in as an administrator. If you're locked out, or the hack has taken your site down, email hello@getpressfort.com before you buy and we'll tell you what we can do.
Does this clean-up use up one of the two included each year?
No. On the yearly plan, cleaning up an infection that was already there is included on top of them. You still have both clean-ups for the year ahead.
What if it gets hacked again?
Then we clean it up again. Two clean-ups a year are included, and a site that's hacked again within 7 days of a clean-up counts as the same incident. If it keeps happening, something outside the plugin is usually letting the attackers back in, so we'll find the cause with you. See how hack repair works.
What if you can't get it clean?
On the yearly plan, we'll refund you in full. Some causes are outside what any security service can fix, such as a stolen password or other infected sites on the same hosting account. If that's what we find, we'll tell you and explain what to do about it. Read the terms.
I want to pay monthly. Is the clean-up included?
Cleaning up an infection that was already there is included with the yearly plan. On the monthly plan, we'll try an automatic clean-up free of charge where we can. If that isn't possible or doesn't clear it, we'll quote to finish the job by hand, or refund you in full if you'd rather not go ahead.
Not sure yet?
Find out how exposed your site is.
Send us your site address and get a free, plain-English report of what we find. We check from the outside, so there are no logins to hand over and nothing to install.
- Known vulnerability in 1 pluginGallery plugin, file upload flawUrgent
- WordPress is out of dateRunning 6.7.1, latest is 6.8.3To fix
- 6 plugins and 1 theme out of dateOldest is 14 months behindTo fix