What a hacked website looks like
Many hacked sites look normal to the owner. Attackers hide spam links in the page, send search engines different content from visitors (cloaking), redirect visitors who arrive from Google, or leave backup and configuration files open to download.
This scanner checks for those signs from the outside, and also flags weaknesses that make a hack easier, such as an expired certificate or missing security headers.
What to do if the scan finds a problem
Do not just delete the visible spam: the attacker usually left a way back in. Restore a clean backup, update every plugin, theme and the platform itself, change all passwords and keys, and look for unknown administrator accounts.
Then ask Google to review the site in Search Console if it was flagged. Continuous monitoring tells you the day something changes instead of weeks later.
Frequently asked questions
Can this scan find every kind of malware?
No. It checks what is visible from outside the server. Malware that sits quietly in a file on the server and has not run yet needs a scan from inside the hosting account.
Will the scan harm my website?
No. It only requests public pages and files, the way a visitor or search engine would.
Does it work for any website platform?
Yes. The checks apply to any public website, whatever it is built with.
Read-only: we request public pages the way a visitor would. Private and internal addresses are blocked, and nothing you enter is stored.
Want this running on every page, every day?
UrKavach monitors security, uptime, speed and SEO for every website you manage.