Website hacked or down?
Emergency website repair & recovery in Perth.

The usual signs are a red Google warning on your own site, spam pages showing up in search results for your domain — often Japanese text or pharmaceutical listings — redirects that only fire for visitors arriving from Google, admin accounts nobody created, and a suspension notice from your host. Several of those are invisible while you're logged in, so check your site in a private window.

We answer 24/7 and diagnosis starts immediately. Most rescues are completed the same day. We won't promise a fix time before we've seen the problem — nobody honestly can.

Yes. Fill in the start-a-rescue form — only your website address and a phone number are required, the rest is tick-boxes — and we'll call you back. It's the right door if you can't talk right now, or it's the middle of the night and it can wait until morning. If the site is down and losing you money, the phone is faster: we answer 24/7.

Your hosting login — the account you pay for hosting with, whether that's VentraIP, Crazy Domains, GoDaddy or your web designer — and your website login if you have one. Don't know where the site is hosted? Give us the domain and we'll work it out. If a designer or IT company manages it, we can deal with them directly. Never send passwords through a form or email; we set up secure access together on the call.

Emergency Website Rescue starts from $1,500 + GST. Talking to us costs nothing. Diagnosis is a $295 + GST fee paid before we log in, and it comes off the rescue in full if you go ahead. You approve a fixed quote before any repair starts, and complex compromises and e-commerce sites are quoted on scope.

No — that's a Minor Outage Fix, from $495 + GST. A white screen after an update, an expired SSL certificate, a plugin that took the site down: broken, but not hacked. The process is the same as a rescue — diagnosis first, then a fixed quote you approve before any work starts. And if the diagnosis shows you have been compromised after all, we'll tell you straight and quote it as a rescue instead.

Because finding the problem is the hard part. Working out how they got in, and how far it spread, is most of the skill in a rescue — the cleanup is the straightforward bit afterwards. The $295 + GST diagnostic covers that work, comes off the rescue in full if you proceed, and if you decide not to, the written findings are still yours to take elsewhere.

Yes, and there is no after-hours surcharge for it — the price is the price at 3am and at 3pm. The phone is answered by the person who will do the work, not a message service. If what you are describing can safely wait until morning, we will tell you that rather than start the clock, and it often can.

Yes — most rescues are sites someone else built. We work with WordPress and most PHP sites, and we'll tell you straight if yours is something we can't help with.

Not from the cleanup. We take a full copy of the site and database before we change anything, then clean in place rather than wiping and starting over — so your pages, orders, customers and media stay where they are. The exception is when the attacker has already deleted or encrypted things. Then it's a recovery job, and we'll tell you what can be brought back before you approve anything.

Yes — WordPress is the bulk of what we rescue. We clean the malware out of core, themes and plugins, remove any accounts the attacker added, rotate every password and key, and close the hole they came through. That last part is usually an out-of-date plugin.

The warning stays until Google is satisfied the site is clean, so the malware has to go first — removing the warning without fixing the cause just gets you flagged again. We clean the site, submit it for review, and follow the review through until the warning is lifted.

Yes. Email recovery is its own emergency service: broken mailboxes, DNS and deliverability problems, mail bouncing or landing in spam, or a mailbox that has simply vanished.

Yes, that's a routine rescue. The suspension lifts once the malware is gone and the host has re-scanned. We clean the whole hosting account rather than the one site — infections spread across every domain sharing a login — then deal with the host on your behalf until the account is switched back on.

Sometimes, if the infection is shallow and you have a backup from before the attack. What people miss is the entry point: restoring a backup over the same unpatched plugin gets you reinfected, often within hours. If you have already restored once and it came back, the backdoor is still on the server.

Usually, and the longer it sits the worse it gets. Google demotes or de-indexes pages serving malware or spam, and a Safe Browsing warning stops almost every click before it lands. Rankings normally recover over a few weeks once the site is clean and the warning is lifted — provided the spam pages are actually removed and not just hidden from visitors.

Not if the way in gets closed. Nearly every reinfection we see is a site where the malware was removed but the out-of-date plugin, reused admin password or leftover backdoor that allowed it was left alone. Finding and closing that hole is part of every rescue, and you get a plain-English report saying what it was.

Yes — we have been rescuing Perth websites since 2006 and the phone is answered in WST by the person who will do the work, not a call centre. Nearly every rescue runs remotely because that is the fastest way to get you back online, but we cover the whole Perth metro area and can come to you when sitting down together is the better option.