What the audit covers
- Versions: EE version against the official support table, PHP version against the patched releases.
- Add-ons: each one's version, whether it's maintained, and known problems.
- Configuration: debug output, file upload rules, control-panel access, member settings, and
system/and install folders. - Accounts: super admins and old member groups with more access than they need.
- Server: HTTPS, security headers, file permissions, backups and where they're stored.
You get a plain-English report: what we found, how serious each item is, and how to fix it.
If your site has been hacked
Signs include redirects to other sites, spam pages in Google, new admin accounts, or a warning from your host. We:
- Take a forensic copy before changing anything.
- Find the entry point: an old add-on, a weak password or an outdated version.
- Remove malicious files and database entries, and reset credentials.
- Close the hole by updating, patching or replacing what let them in.
- Ask Google to review the site if it was flagged.
If the site is down right now, go to emergency support.
How it works
- 1
Access
Read-only control-panel access plus server or FTP details.
- 2
Review
Versions, add-ons, configuration, accounts and server checked.
- 3
Report
Findings ranked by risk, with the fix for each.
- 4
Fix (optional)
We make the fixes for a fixed price, or your team does.