Emergency website support: Website down? Let’s find out why.

When a site is down or hacked, I first close off access and preserve its state for diagnosis, then restore or clean the site and find how the problem got in. With a typical break-in the site is back within a few hours, provided a working backup exists.

Incidents I handle

  • A website or store no longer loads or shows a server error
  • The site is infected, redirects to unknown pages or Google flags it as dangerous
  • An update broke a critical function
  • A form, checkout or admin panel stopped working

The first hours

  • Confirm what happened: symptoms, timing and available accounts
  • Close access and change passwords so the attacker cannot come back
  • Copy the current, broken state — needed to establish what the attacker did
  • Contact the host: is there a backup from before the incident, and from which day

Repair and after

If a backup from the last 24–48 hours exists, restoring it is the fastest route, but changes made after it are lost — that is a business decision we make together. Without a backup I clean the files and database by hand, which takes longer.

Once the site is back I check the critical path (form, checkout, login), request a review in Google if the site was flagged, and describe how the break-in happened. I cannot promise recovery of data that does not exist in a usable backup.

What shapes the price

For orientation, using the ranges from my article on website technical support: restoring a backup 0–1000 PLN, cleaning files and the database 1000–3000 PLN, rotating passwords, keys and certificates a few hundred złoty — a typical break-in usually lands at 1500–4500 PLN. I give an exact figure after diagnosis.

Incident type, access to hosting and code, backup condition and how far the infection spread all affect the figure. Sometimes diagnosis shows a rebuild is safer than a local patch — if so, I say so before we start.

Frequently asked questions

Do you guarantee an immediate response?
Not without an active agreement defining response time. For one-off incidents I confirm availability first.
What access will you need?
Usually hosting, domain, site administration, repository and relevant external services. Exact access follows the symptoms. Do not send passwords through the form — we will agree a safe way.
What can I do myself before getting in touch?
Change the hosting panel password and ask your host which backups exist and from which days. I describe the full sequence in the article on what to do when your website is hacked.
Can you maintain the site after recovery?
Yes. Once the service is stable, I can propose cleanup and ongoing maintenance scope.

Describe the incident and its impact

Include the site address, symptoms, when they began, and whether hosting and backups are accessible. Do not send passwords through the form.

Go to contact