Free tool
Website malware check: is my site hacked?
To check a website for malware, start with Google Search Console's Security Issues report, then look for unknown admin users, recently changed files and redirects that only appear on mobile. Run a free external scan to find exposed files and weak settings that let attackers in.
- ISO 27001 compliant
- SOC 2 Type 2 compliant
- Preferred Cloudflare Partner
- 24/7 follow-the-sun support
Seven things to check today
- Google Search Console: the Security Issues and Manual Actions reports.
- Search for site:yourdomain.com and look for pages you did not create, often in other languages or about pharmacy or gambling.
- Open the site on a phone from a Google result. Some infections only redirect mobile visitors who arrive from search.
- CMS users: remove admin accounts you do not recognise.
- Files changed recently, especially in uploads, theme and plugin folders.
- Outbound mail volume and your host's resource graphs for sudden spikes.
- An external security scan for exposed files, old software banners and missing protections.
If you find malware
Take a backup for evidence, then restore from a known clean backup or clean the files. Update the CMS, plugins and themes, rotate every password and API key, and request a review in Search Console once the site is clean.
How Vigilbase helps
Vigilbase runs security operations and website protection for businesses that would rather not build a security team.
Vigilbase Shield
Managed Cloudflare WAF, DDoS and bot protection, configured and watched by our team.
Learn moreIncident response
Help to contain, clean up and recover when something has already gone wrong.
Learn moreVigilbase OS
AI investigates every alert and brings you only verified threats, with the fix ready to approve.
Learn moreFrequently asked questions
How did my website get malware?
Usually through an outdated plugin or theme, a reused or stolen admin password, or a file left exposed on the server.
Will Google remove a hacked-site warning?
Yes, after you clean the site and request a review in Search Console. Reviews usually take a few days.
Can Vigilbase help after a compromise?
Yes. Vigilbase offers incident response and a managed web application firewall to keep attackers out afterwards.
More free tools and guides
Security handled, around the clock
Vigilbase is ISO 27001 and SOC 2 Type 2 compliant and a Preferred Cloudflare Partner, with follow-the-sun support from teams in Kenya, South Africa, the UAE and Portugal.