Service
Website broken, slow or compromised? Start with a diagnosis
Guessing at a broken site is expensive. We run a structured diagnostic first, tell you what is actually wrong and what it will take to fix, then repair it in priority order.
- Fixed-price diagnostic before any repair work is quoted
- Root causes identified, not just symptoms suppressed
- Prioritised repair plan you can act on with anyone
- Prevention put in place so it does not recur
What happens when you take on a broken website?
First a diagnostic, charged as a fixed piece of work. We take a full backup, examine the code, hosting, database, error logs and recent changes, and identify the root cause rather than the symptom. You receive a written report listing what is wrong, how serious each item is, and what fixing each one involves. Then you decide what to repair — with us or with anyone else. The report is yours either way.
- A backup is taken before anything is touched
- The report names root causes and ranks them by severity
- You are never obliged to have us do the repair work
What we fix
Situations we are called into
-
The site is down or showing a critical error
A white screen, a fatal error, a database connection failure, or a site that loads for some visitors and not others.
-
It has been hacked or is serving malware
Injected spam, redirects to another site, browser warnings, or the host has suspended the account.
-
It has become unusably slow
Pages taking many seconds, an admin area that crawls, or a store that slows down under normal traffic.
-
Forms stopped arriving
Often for weeks before anyone notices, and often caused by a mail configuration change rather than the form itself.
-
An update broke something
A WordPress, plugin or PHP update applied without staging, and now a critical part of the site does not work.
-
Payments or checkout are failing
Orders not completing, duplicate charges, or a gateway integration that stopped working after a provider change.
Method
How a rescue engagement runs
-
01
Stabilise
Full backup taken. If the site is down or actively serving malware, we get it to a safe state before investigating.
You receive: A safe backup and a stabilised site
-
02
Diagnose
Code, hosting, database, logs, recent changes and dependencies examined systematically rather than by trial and error.
You receive: Written diagnostic report
-
03
Prioritise
Findings ranked by severity and business impact, each with an estimate. Some items will be optional; we will say which.
You receive: Prioritised repair plan and quote
-
04
Repair
Fixes applied on staging first where the site allows it, verified, then deployed.
You receive: Working site and a record of changes
-
05
Prevent
The conditions that allowed the failure addressed: staging, backups, update process, monitoring, permissions.
You receive: Preventive measures in place
-
06
Hand back
A written account of what was wrong, what was changed and what we recommend next.
You receive: Closing report
After a compromise
Cleaning a hacked site is only half the job
Removing injected code restores the site. It does not close the door that was used, which is why so many cleaned sites are reinfected within weeks. The route in is usually an outdated plugin, a reused password, an over-privileged account or a shared hosting neighbour.
So a cleanup engagement includes finding the entry point where the evidence permits, rotating credentials, reviewing user accounts and permissions, patching what was exploitable, and putting monitoring in place. We will also be honest about what cannot be determined after the fact — logs are often already rotated by the time we are called.
- Injected code removed and file integrity restored
- Entry point identified where the available logs allow it
- Credentials rotated and user accounts reviewed
- Patching, hardening and monitoring put in place
Severity
How we rank what we find
The diagnostic report uses these categories, so you can make a spending decision rather than being handed an undifferentiated list.
| Severity | What it means | Typical response |
|---|---|---|
| Critical | The site is down, insecure, or losing orders and enquiries right now. | Fix immediately, before anything else. |
| High | Working but degraded: severe slowness, broken key journeys, or a known vulnerability. | Fix in the current engagement. |
| Medium | Real problems that are not yet costing you visibly: technical debt, poor practice, missing safeguards. | Plan into the next phase. |
| Low | Improvements worth making when something else is already being changed. | Batch with future work. |
Questions
Website rescue questions
Why do you charge for a diagnostic?
Can you fix a site that another developer built?
How quickly can you look at an urgent problem?
Will you tell us if the site should be rebuilt instead?
What access do you need?
Related services
Often paired with this
-
Website maintenance
The arrangement that stops the same failure happening a third time.
Website maintenance -
Website redesign
When the diagnostic concludes that repair is not the economic option.
Website redesign -
Laravel & PHP development
For custom PHP systems rather than content-managed websites.
Laravel & PHP
Website down, slow or compromised?
Tell us what is happening, what changed recently and what platform it runs on. We will tell you what a diagnostic would involve.