← Cloudflare Fundamentals / fundamentals / security
Recovering from a hacked site
If your website has been hacked recently, review the recommended steps below to recover a hacked website and prevent future hacks.
Recovering from an attack
To recover from an attack, reach out to your hosting provider to request:
- Details about the hack, including how they believe the site was hacked.
- That your hosting provider remove any malicious content placed on your website.
Once the hack has been resolved, you should resolve site warnings in Google Webmaster Tools ↗ and resubmit your site for Google's review.
Preventing and mitigating the risks of a future hack
To prevent the risk of a hacked site:
- Activate Cloudflare's WAF managed rules so they can challenge or block known malicious behavior.
- If you use a Content Management System (CMS), make sure you have the most recent version installed (CMS platforms push out updates to address known vulnerabilities).
- If you use plugins, make sure they are updated.
- If you have an admin login page, protect it with Cloudflare's Rate limiting rules or a Cloudflare Access policy.
- Use a backup service so you can avoid losing valid content.