Your Site Is Hacked.
Here's The Next Fifteen Minutes.
Breathe. You’re in the right place. The first thing that happens is not a quote, not a sales call, and not a form that says someone will be in touch. It’s a holding page — and inside about fifteen minutes, anyone who visits your site sees a clean page with your name on it instead of whatever is sitting there now. That step is free. Always free. No card, no obligation.
What The Holding Page Is.
And What It Isn't.
People get nervous here, so let’s be exact. It’s a divert. That’s the whole thing.
WHAT IT IS
✓ A clean holding page served to anyone arriving at your address, instead of the compromised site
✓ Your logo, your colours, your words, and a contact form that reaches you
✓ Your SSL still working, your address unchanged, your email untouched
✓ Up in about fifteen minutes, and off again on one instruction
WHAT IT ISN’T
✗ A change to your website — the files, the database and the hosting are exactly as we found them
✗ A deletion of anything, ever
✗ A lock-in — it costs nothing to put up and nothing to take down
✗ A fix. It stops the bleeding. It doesn’t pretend to be the repair.
✅ Temporary. Reversible. Yours to switch off.
One instruction, both directions, no charge either way. That’s why we can offer it free without asking a single question about budget.
Maya Picks Up.
Any Hour.
Maya is not a general chatbot bolted onto a website. She does one job:
She knows the rescue process — she can get the holding page moving straight away, without putting you in a queue to explain yourself twice
She remembers — start a chat then ring, and she already knows who you are and what you’ve told her. You don’t begin again
She escalates rather than guessing — anything she can’t sort goes up to her superior, a more capable model with more room to think. Most things end there, in the same conversation
A person is still the last step — if it still needs one after that, it gets one
Any hour — Sunday 2am, Christmas night, long weekend. We don’t run a graveyard shift and we don’t say “first thing Monday”
You called because it’s now. That’s the whole reason she exists.
✅ She escalates instead of stalling.
Anything Maya can’t sort goes up a tier, not into a queue. Most things end there, in the same conversation. If it still needs a person after that, it gets one.
We Won't Tell You How It Works
The people reading this page include the people we’re keeping out. Publish the mechanism, publish the bypass. So we don’t.
You don’t need the recipe. You need the result: the bleeding stops, it stays stopped, and full access to fix the site stays open. The divert locks out nobody except the attacker.
Want your own developer to fix it? Go ahead — genuinely. If you’ve got someone you trust, use them. We hand the keys back when their work is done. No charge for the divert going up, none for it coming down, and you keep the notification template.
One limit, and it isn’t a punishment — it’s structural: you can’t use our scanner to mark their homework. Two scans per twelve weeks, the same rule that stops the free scan becoming somebody’s free penetration-testing harness.
Who’s actually on the other end? Web developer. Computer science graduate. Grad dip in multimedia. Programmer. AI specialist by passion and by where the last few years went.
When a site gets hit, the question isn’t “who can patch this”. It’s who can read the attacker’s code, work out what they actually got, contain it, and write a notification that doesn’t end up as exhibit A.
I could break in. I choose to knock. Same hands on the keyboard. Different rules.
⚠️ Holding the keys is the proof. We don’t ask you for a title deed.
If you can get into the hosting, the two-factor code came to you — and it wouldn’t have if you weren’t meant to have it. Credentials plus a callback on a number that stacks up is verification, not a formality. We’re not going to stall a panicking owner while their site serves malware. What we won’t do is divert a domain for somebody who has neither.
The Next Fifteen Minutes,
Step By Step
Nobody panics about a thing they can see coming — so here is the whole thing, in order.
Five steps. About fifteen minutes. That’s the gap between your first message and the moment your visitors stop landing on a hacked site.
Steps one to four are the free part, and they are what stops the bleeding. Step five is us looking at what actually happened — a separate conversation, and not one you have to have tonight.
1 · You Get Us.
Not A Ticket Number.
Chat is fastest. Phone works the same. Either way you get a real intake, not a queue and not an automated reply promising someone will be in touch.
Maya answers, any hour. Sunday 2am, Christmas night, long weekend — that part has to move regardless of the clock, so it does.
And if she hits something she can’t sort, she escalates rather than stalling: up to her superior first, a more capable model with more room to think. Most things end there. If it still needs a person after that, it gets one.
2 · We Take
Four Things.
Your web address. Your business name. Your name. A number to call you back on.
Thirty seconds. That’s the whole intake.
We don’t ask for a password in a chat window, we don’t ask you to read one aloud to whoever picked up, and we don’t want one sitting in an email inbox forever. Any password stays typed by you, at your keyboard.
3 · We Confirm
You’re You.
Here’s the part nobody says out loud: being hacked doesn’t take your keys away.
You can still get into your hosting. The two-factor code still lands on your phone — not theirs. If the account weren’t yours, it wouldn’t. That is the proof. No title deed, no company extract, no form countersigned by your accountant at nine o’clock at night.
So it’s short. You call us, we agree a code word, and you agree to our terms — the ones that say we never ask for, look at, or keep your password. Then you give us the access the job actually needs and nothing wider, you read us the one-time code, and the divert goes up.
Your password stays typed by you, at your keyboard. The one-time code is single-use and dead the moment it’s used — which is exactly why a code is safe to say out loud and a password never is.
It’s five minutes of care, and it’s what stops the same trick being run on you next month by someone pretending to be us.
4 · The Divert
Goes Up.
Your visitors now land on a clean holding page instead of the compromised site. Your logo, your colours, your message, and a contact form that reaches you.
Your SSL keeps working, so the padlock stays and browsers don’t start warning people. Your address still resolves. Search engines see a temporary hold, not a dead site.
This is the free part, and it’s where the bleeding stops.
5 · Then, And Only Then,
We Look.
Only now does anyone start asking what happened. You are not bleeding while that conversation happens, and that changes what kind of conversation it can be.
The bleeding-stop runs around the clock. The forensics and the fix run in business hours — reading an attacker’s code and tracing how far they reached is careful work, and careful work at 3am is how people miss things.
You’re not bleeding any more. You’re waiting safely. Those are very different states, and only one of them is expensive.
Why It's Free
And Why It'll Stay Free
Because a hacked Australian website is not just your problem. A compromised site is rarely the target — it’s the infection centre, a trusted address the attacker now owns, sitting there serving your customers.
So the mums shopping on their lunch break get a drive-by. The tradie who clicked your quote link picks up a credential stealer. Your suppliers get an email from a domain they trust. Every hour it stays live, that spreads.
What you’re actually buying is a shorter list.
Faster divert → fewer visitors exposed → fewer people you’re legally obliged to notify → less regulatory exposure → less litigation surface. The holding page isn’t operational tidiness. It’s active mitigation of a statutory obligation, and it starts the moment you call.
Every hour the compromised site keeps serving is another row on the affected-persons list — another letter you’ll be writing under duress with a solicitor’s clock running. Cut the live time, cut the list, cut the exposure.
And if a notification has to go out, you’re not staring at a blank page. We hand you a template, drafted in line with NDB due-diligence framing, ready for your solicitor before it sends. Framed from diligence, not negligence — “Our security partner contained the incident within fifteen minutes. Here’s exactly what we recommend you do.” That reads very differently to a regulator than silence does. It comes with the free part.
✅ The fix is separate. Optional. Decided after you can think straight.
The bleeding stops either way. That line doesn’t move.
What's Free, And What Isn't.
The Whole List.
No asterisks, and no upsell buried three clicks down. Here is the whole list:
The holding page — up in about fifteen minutes, free, always. No card.
A contact form — goes straight to you, so a customer who needed you today still reaches you
Your SSL and address — untouched. The padlock stays, browsers stay quiet
The notification template — drafted for you, if you need to tell people
Taking it down again — whenever you say, no charge either way
And the paid half, quoted before we touch anything:
Finding how they got in — and clearing whatever they left behind
Closing the hole — so it doesn’t happen the same way twice
A fortnight of watching — intensified scanning to confirm nothing survived
A written record — what was found, what changed, and when
Putting the site back — theme, layout and pages, scoped after the assessment so you know the number first
On your data: we recover whatever exists, wherever it exists — backups, host snapshots, CDN cache, Wayback, an old staging copy someone forgot about. But we are not a time machine. If the last clean snapshot is three weeks old, three weeks of writing may not come back.
✅ You are not required to buy anything to get the bleeding stopped.
And we are not going to pretend otherwise to move you up a ladder. Take the free half and walk away if that is what tonight needs to be.
The Cleaner Who's Gone By Friday:
Can't Tell Clean From Quiet
A skilled compromise doesn’t sit in one file you can delete. It’s resident. It lives there.
Backdoors that reinstall themselves. A dormant cron job that rewrites the payload three days later. Code whose entire job is to bring the infection back once the cleaner has packed up and invoiced.
That’s not a rare, exotic case. That’s the design. Their whole game is coming back after you stop looking.
So a scan that comes back green on the afternoon of the fix proves almost nothing. Green means “recognised nothing today”. It doesn’t mean nothing’s there.
A Fortnight That Survived:
That's Your Clean Bill
So we don’t call a hacked site clean the day we fix it. We turn the testing tempo up instead.
Intensified scanning across the following fortnight, watching for exactly one thing: did something we couldn’t see survive, and try to bring itself back?
Nothing stirs in two weeks? That’s your clean bill — earned across fourteen days, not claimed on day one.
Something wakes up? It just showed us where it was hiding. We go back in, close it, and the clock restarts. Free.
And when the fortnight comes back clear, the elevated watch settles straight into Overwatch, so the watching never actually stops.
In A Nutshell
- A holding page goes up in about fifteen minutes. Free. Always. No card.
- It’s a divert — visitors land on a clean page instead of the compromised one.
- It does not change your site, your host, your emails or your DNS beyond that divert.
- Fewer people exposed means a shorter notification list, and less legal grief later.
- Notification template included. Free.
- The fix is separate and optional. Us, your guy, anyone. The bleeding’s stopped either way.
- Any paid work is scoped and quoted before we touch anything.
Everyone starts the same way. Call or start a chat, and the divert goes up. Nothing else has to be decided tonight.
The bleeding stops first. Everything else comes after that.
You are not bleeding any more. You are waiting safely. Those are very different states, and only one of them is expensive.
Stop The Bleeding First.
Decide The Rest After.
The holding page is free and it goes up in about fifteen minutes. No card, no quote, no obligation — and no requirement to buy the fix from us once the bleeding has stopped.