Every hacked file on your site, found in minutes.
Connect your Joomla or WordPress site to mySites.guru, run one free audit, and see every hacked file, rogue admin and backdoor on one screen. Then clean it, today, without FTP.
One free audit of one site · no card · about 2 minutes to connect
Any Joomla since 1.5, every WordPress. Since 2012, 90,000+ sites protected.
How to use mySites.guru to fix a hacked site
Step 1: Audit: every file, read.
Connect in about 2 minutes. mySites.guru reads every file in the webspace against roughly 1,500 hand-written hack patterns and hash-matches it against files already confirmed malicious. The Hacked files list is 100% certain; Suspect content is the pattern matches for you to read.
Step 2: Clean: the exact lines, in the browser.
Open a flagged file and the matched lines are highlighted. Edit, download or delete it there, with no FTP. Revert a changed core file from a diff, restore a missing one, bulk delete rogue .htaccess files, remove the malicious cron jobs and stop the processes still running code you just deleted.
Deleting files and reverting core files need a subscription or the free first month.
Step 3: Close the back doors in one click.
Joomla: rogue JCE editor profiles and their files, rogue Super Admin accounts, the Helix3 and Helix Ultimate template hacks, SP Page Builder rogue assets and malicious Scheduled Tasks. WordPress: malicious WP-Cron events, suspect wp_options rows, rogue and hidden administrators, impostor and must-use plugins.
Step 4: Monitor every site you run.
Put every Joomla and WordPress site you look after on one dashboard. mySites.guru alerts you the moment a file changes or an admin logs in, audits every site on a schedule, checks uptime every 5 minutes and warns you when an installed extension has a known vulnerability. The next hack gets caught in minutes, not when a customer emails you.
Monitor all your sitesFirst 30 days free with code FIRSTMONTHFREE.
Then keep it clean.
After the clean: revoke every Joomla API token or WordPress Application Password, log everyone out and update every site in one run. One subscription covers the clean-up tools and the monitoring for every site you add.
Two ways out, both today.
Clean it yourself
The free audit shows every flagged file and account. Deleting files and reverting core files need a subscription or trial: £19.99 a month for unlimited sites, or £5 a month for one site. First 30 days free with code FIRSTMONTHFREE, cancel any time, no price rises since 2012.
- Delete, edit or download any flagged file
- One click removes a rogue Super Admin or JCE rogue profile
- Revert changed core files, restore missing ones
- Then log everyone out and update every site in one run
Hand it to Phil
£120, one fixed fee per incident, usually resolved the same day. Phil screens the site before anyone commits, so you are not charged in the very rare case it cannot be fixed. A month of mySites.guru is included if you do not already subscribe.
- Goes straight to Phil, who built the tools
- Cleaned, patched and locked down, usually the same day
- Old Joomla sites welcome
Three people who arrived here hacked.
I initially signed up to the subscription service due to a hacked Joomla website. The tools provided are excellent and these allowed me to locate all hacked files and carry out a successful repair myself.
Read more reviews
My joomla-site was hacked by 2 hackers that got in through an older version of JCE. Thanks to Phil my site was completely cleaned, updated and working again in less than 24 hours. Thx
Read more reviews
Thank you so much for your fantastic tool. Without it, I would never have noticed the installation of the backdoor plugins so quickly, and the cleanup work is so much more efficient. Best regards. Doris
Read more reviewsMost hacked sites are reinfected within 24 hours without a proper clean.
Find every file now. One free audit of one site, no card, about 2 minutes to connect. Then watch every site you own from one screen.
14 years of this. 90,000+ sites protected, 1,000,000+ audits completed.