Emergency website support: Website down? Let’s find out why.
When a site is down or hacked, I first close off access and preserve its state for diagnosis, then restore or clean the site and find how the problem got in. With a typical break-in the site is back within a few hours, provided a working backup exists.
Incidents I handle
- A website or store no longer loads or shows a server error
- The site is infected, redirects to unknown pages or Google flags it as dangerous
- An update broke a critical function
- A form, checkout or admin panel stopped working
The first hours
- Confirm what happened: symptoms, timing and available accounts
- Close access and change passwords so the attacker cannot come back
- Copy the current, broken state — needed to establish what the attacker did
- Contact the host: is there a backup from before the incident, and from which day
Repair and after
If a backup from the last 24–48 hours exists, restoring it is the fastest route, but changes made after it are lost — that is a business decision we make together. Without a backup I clean the files and database by hand, which takes longer.
Once the site is back I check the critical path (form, checkout, login), request a review in Google if the site was flagged, and describe how the break-in happened. I cannot promise recovery of data that does not exist in a usable backup.
What shapes the price
For orientation, using the ranges from my article on website technical support: restoring a backup 0–1000 PLN, cleaning files and the database 1000–3000 PLN, rotating passwords, keys and certificates a few hundred złoty — a typical break-in usually lands at 1500–4500 PLN. I give an exact figure after diagnosis.
Incident type, access to hosting and code, backup condition and how far the infection spread all affect the figure. Sometimes diagnosis shows a rebuild is safer than a local patch — if so, I say so before we start.
Frequently asked questions
Do you guarantee an immediate response?
What access will you need?
What can I do myself before getting in touch?
Can you maintain the site after recovery?
Describe the incident and its impact
Include the site address, symptoms, when they began, and whether hosting and backups are accessible. Do not send passwords through the form.