Website security
Website security check and hacked website cleanup
Company websites are rarely chosen by a hacker. They are found by scripts that try thousands of websites an hour and get in where a door is open. We check yours from the outside and tell you what we find.
Website securityWhat we check
HTTPS
Whether the website loads only over HTTPS and whether the HTTP address redirects to it.
HSTS
The Strict-Transport-Security header, which tells the browser never to use the unencrypted address again.
Security headers
Content-Security-Policy, X-Frame-Options, X-Content-Type-Options and Referrer-Policy.
Automated technical check from the outside; it does not replace a penetration test.
Signs that a website has been hacked
- Pages or links to casinos or pharmacies that you did not publish
- Strange redirects, often only on mobile or only from Google
- New files in the website folders that nobody added
- A warning in Google Search Console or in the browser
If the website has been hacked
- We look for the foreign code in the files and in the database
- We remove it and close the way it came in: outdated versions, exposed admin users, logins without limits
- We update, change the passwords and check the website again from the outside
- If Google shows a warning, we help you request a review in Search Console
Price for the fixes: offer after the free report.
From our audits
A WordPress website had been hacked for months without the owner knowing. To the owner the site looked normal: the foreign code only shows if you look for it.
Frequently asked questions
How do I know if my website has been hacked?
Look for pages or links you did not publish, strange redirects on mobile, new files in the website folders or a warning in Google Search Console. A check of the files and the database confirms it.
Is a security plugin enough?
A firewall or a login limit helps, but it does not replace updates and backups. Heavy security plugins can slow the website down; a simple one, configured correctly, is enough.
Do you need access?
Not for the report: it is done from the outside. To clean a hacked website we need access to the hosting and to the website administration.
ServicesOther checks
Cookie compliance check
Which cookies and trackers start before consent, the cookie banner and Google Consent Mode v2.
Learn more →Accessibility audit (WCAG 2.1 AA)
Automated WCAG 2.1 A/AA test: images, forms, buttons, contrast and page language. Useful for the EAA.
Learn more →Website monitoring
Weekly check: downtime, SSL certificate, foreign code, forms, broken links. Email alert and a monthly report.
Learn more →Would you like the full report for your website?
Send us the address. The report is free and without obligation.
Write to office@georgica.ro or simply reply to our message.