The Rescue Log

WordPress security,
without the panic.

Calm, practical guides from the rescue front line — what hacks actually look like, what to do in the first 24 hours, and how to make sure it never happens again.

A glowing shield and padlock protecting a website
Emergency Guide

WordPress Site Hacked? Your First 24 Hours Decide Everything

Your homepage is defaced, Google is showing casino spam under your name, or your host just emailed you a warning. Here's the exact order of operations — what to do, what not to touch, and when to call for help.

October 12, 2026·9 min read·By Peter
Read the guide →
In the works

7 signs your WordPress site is hacked (that owners always miss)

The quiet symptoms — a slow admin panel, strange users, mystery pages — that show up weeks before the visible damage.

In the works

Why your site got hacked — and why it wasn't personal

Attackers don't know your business. Bots scan millions of sites for the same old holes. Here's how the economics of hacking actually work.

In the works

The 30-minute monthly security routine for site owners

Updates, backups, user audits and the three settings that stop most attacks — a routine any owner can run.

Reading this because your site is hacked right now?

Skip the reading. Send me your website address and I'll tell you exactly what's wrong — free, in writing, no obligation.

Request a free site check