WordPress hack / malware scan

Probes a live WordPress site from the outside for active compromise indicators: backdoor files, exposed configs, JS injection, hidden iframes, spam injection, cloaking, version disclosure. Returns a containment + cleanup + prevention playbook.

Remote-only scan via HTTP probes — we can't read PHP files on your server. For deep file inspection install Wordfence or Sucuri on the WordPress side. This catches what's visible externally (which is usually how Google notices first).