Recovering from a hacked site

If your website has been hacked recently, review the recommended steps below to recover a hacked website and prevent future hacks.

Recovering from an attack

To recover from an attack, reach out to your hosting provider to request:

• Details about the hack, including how they believe the site was hacked.
• That your hosting provider remove any malicious content placed on your website.

Once the hack has been resolved, you should resolve site warnings in Google Webmaster Tools ↗ and resubmit your site for Google's review.

---

Preventing and mitigating the risks of a future hack

To prevent the risk of a hacked site:

• Activate Cloudflare's WAF managed rules so they can challenge or block known malicious behavior.
• If you use a Content Management System (CMS), make sure you have the most recent version installed (CMS platforms push out updates to address known vulnerabilities).
• If you use plugins, make sure they are updated.
• If you have an admin login page, protect it with Cloudflare's Rate limiting rules or a Cloudflare Access policy.
• Use a backup service so you can avoid losing valid content.