Website recovery

Usually a good deal, though rarely all of it. Many hosts retain snapshots covering recent days or weeks and release them on request. After that we check search engine caches, the Internet Archive and files on the computers of your editors. Structure and copy can often be recovered; orders from the last few days sometimes cannot.

Common symptoms: visitors on smartphones land on unknown sites, Google lists pages you did not publish, your host suspends the account over spam, or browsers display a warning. Occasionally all you notice is organic traffic falling off a cliff.

Rarely. Attackers are often inside for weeks before anyone notices, so yesterday’s copy already contains their backdoor. Restoring without finding the hole means the whole thing repeats within days.

Once the site is clean and a review has been submitted in Search Console, the decision rests with Google and usually comes within a few days. Should Google detect malicious code a second time, the next review takes longer, which is why we never clean just the surface but hunt down every backdoor.

For most companies reporting through incydent.cert.pl is voluntary, but worth doing, especially if your site was used for phishing. Entities covered by the Polish national cybersecurity system act have their own reporting duties, and we help prepare the technical description of the incident.