Security investigation
Review reported symptoms, suspicious redirects, unexpected admin accounts, changed files and available hosting or application logs.
Website, software & mobile app security
Website, software & app security & malware removal.
From hacked websites and infected WordPress installs to vulnerable software and mobile apps, I investigate security issues, help remove malicious code, fix weaknesses and strengthen digital products.
Scope is confirmed after an initial review. Cleanup outcomes depend on the infection, available access and backups; no absolute security guarantee is implied.
Start with evidence
What needs attention?
- Unexpected redirects, pop-ups or injected spam
- Malware, phishing or security warnings
- Exposed API endpoints or weak authentication
- Vulnerable dependencies or outdated components
- Mobile app security flaws or unsafe data handling
- A compromised product that needs safe recovery
The service
Websites, software and mobile apps — secured at the source.
Security work should be evidence-led, not a promise based on a quick scan. The scope is tailored to your website, software, mobile app, hosting or deployment setup and the symptoms you can demonstrate.
Malware cleanup support
Identify and remove confirmed malicious code where access and evidence allow, then check for related files, reinfection paths and persistence.
Security hardening
Review outdated components, risky permissions, exposed secrets, authentication, admin access and practical configuration improvements.
Recovery and prevention
Help restore from a known-good backup when appropriate, patch the entry point and set out sensible follow-up monitoring.
Vulnerability and code review
Review application code, APIs, authentication, dependencies, plugins, mobile app flows or deployment concerns and prioritise fixes by risk and evidence.
Software and API security
Review access controls, input handling, secrets exposure, API permissions and dependency risks in custom software and connected services.
Mobile app security
Assess agreed iOS and Android app risks, including authentication flows, sensitive-data handling, insecure storage and communication with backend APIs.
Post-cleanup checks
Recheck the original symptoms, important pages, redirects and security signals, and document what was changed and what remains uncertain.
A clear process
From first report to follow-up.
01 / STEP
Triage
Describe the symptoms, affected URLs, recent changes and any hosting alerts.
02 / STEP
Investigate
Review the relevant files, configuration, logs and access available; agree the scope before changes.
03 / STEP
Remediate
Clean confirmed malicious changes, patch the likely entry point and restore carefully where appropriate.
04 / STEP
Verify & advise
Recheck the reported symptoms and share the actions taken, limitations and next steps.
Common questions
Security, explained clearly.
No scare tactics and no blanket guarantees. The aim is to understand the risk and make the next safe step clear.
Can you help with malware on a website or software?+
I can investigate and provide remediation support for websites and software where access, backups and evidence allow. The exact scope depends on the infection, architecture and available access; no blanket guarantee is made before assessment.
Can you review custom software or mobile apps?+
Yes. Depending on scope, a review can cover application logic, APIs, authentication, permissions, dependencies, storage of sensitive data and release configuration. Testing is agreed in advance and only performed with authorisation.
Will malware removal guarantee the site cannot be hacked again?+
No responsible security service can guarantee that. Remediation reduces identified risks, but ongoing updates, secure credentials, backups, monitoring and secure development practices remain important.
What should I do if my website is actively compromised?+
Contact your hosting provider promptly, preserve relevant alerts and logs, and avoid deleting evidence or restoring over the only backup. If payment or customer data may be affected, follow your incident-response and legal obligations.
Need help securing a digital product?
Start with what you have observed.
Share the product type, affected URL or app, warning and symptoms. Do not send passwords, production secrets or customer data in the enquiry form.
Security enquiry
Tell me what’s happening.
Use this dedicated form to describe a website, software or mobile app security concern. The details go through the site’s existing enquiry pipeline and branded email templates, so the enquiry arrives with the right service context.
Please don’t include passwords, API keys, production secrets or personal/customer data. Affected URLs, warning text and a summary of symptoms are enough to start.