Redirects, fake CAPTCHA screens, unknown administrator accounts, strange ads, spam pages or a website that suddenly isn’t behaving normally?
Action Analysis provides priority WordPress malware removal and hacked-site recovery for businesses across Australia.
$795
$995
No payment is required to submit your site. We’ll review the issue and confirm the recovery scope before work begins.
A compromised WordPress site doesn’t always look obviously hacked. Malicious code can behave differently depending on how somebody reaches your website.
Google begins showing pages, products or search results that don't belong to your business.
Visitors see advertisements, popups or prompts that aren't part of your website.
Your WooCommerce checkout, login screen or other important pages suddenly behave differently for some customers.
There are Administrator accounts inside WordPress that you or your team didn't create.
Visitors click your website in Google and are taken to another website, advertisement, gambling page or suspicious download.
Customers are suddenly being asked to complete an unfamiliar Cloudflare, browser or “verify you are human” process.
The Australian Cyber Security Centre has documented compromised WordPress websites being used to redirect visitors and display fraudulent verification prompts designed to deliver malware.
A website can appear normal to its owner while presenting completely different content to other visitors.
If customers are reporting something you cannot reproduce yourself, take it seriously.
$795
For a standard single WordPress website.
$995
For WordPress websites running WooCommerce
Includes everything in Standard recovery plus
$TBA
For WordPress websites running WooCommerce
Assessed before a price is confirmed
Send us your website
Tell us what you're seeing and provide your website address.There is no payment required to request an assessment.
We assess the compromise
We determine what access is required and whether the website falls within our standard fixed-price recovery scope.
We Clean & Recover the Site
We work through the compromised WordPress installation, remove malicious components and restore the website to a clean working state.
We Secure and Test It
We update and harden the recovered installation, test the website and provide a short summary of the work completed.
We treat compromised websites as priority work and assess requests as quickly as possible during business hours.
Many standard compromises can be recovered within 24 hours once we have the access required to begin, but recovery time depends on the extent of the compromise, the website and the hosting environment.
We don’t promise an unrealistic recovery deadline before seeing the site.
We will normally require access to the WordPress administration area and the website’s hosting account, control panel or filesystem.
Depending on the compromise, we may also request access to services such as DNS management or Google Search Console.
We’ll tell you exactly what is required after the initial assessment.
Yes.
Some malicious website behaviour is designed to appear only to particular visitors, devices, search-engine traffic or pages.
If a customer is reporting redirects, fake verification screens, unusual adverts or other behaviour that you cannot reproduce, it is worth investigating.
Sometimes.
We look for evidence of the likely entry point as part of the recovery process, but it isn’t always possible to determine exactly how an attacker originally gained access.
Website recovery is not the same as a full digital-forensics or data-breach investigation.
Malware removal alone cannot always establish whether data has been accessed or copied.
If there is evidence suggesting personal information, payment information or other sensitive data may have been exposed, we will tell you. Specialist incident-response, legal or compliance advice may then be appropriate.
No responsible provider can promise that a website will never be compromised.
Our recovery process is designed to remove the current compromise, address identifiable weaknesses and reduce the likelihood of the same issue recurring.
Ongoing monitoring and management options are available after recovery if required.
No.
Action Analysis is Gold Coast based, but WordPress recovery can normally be completed remotely and is available to businesses Australia-wide.
The longer malicious code remains on a business website, the greater the opportunity for it to affect customers, search visibility and the reputation of your website.
Send us the URL and tell us what you’re seeing.
We’ll assess the issue and explain the next step.
