Website takeover & rescue

Website takeover, when the person who built it is gone.

Lost logins, a developer who stopped answering, or a site nobody has patched in three years. We take these on regularly — and we will tell you honestly whether yours is worth saving.

The situation is more common than you think

Small business websites outlive the people who build them. The freelancer takes a full-time job, the agency drops its smallest accounts, the nephew who set it up in college moves away. The site keeps running, because websites mostly do — right up until the day it needs to change, or the day it breaks.

By then the problem is rarely the website itself. It is that nobody knows where it is hosted, who is being paid for it, or which of four old email addresses controls the domain name.

What we get called about

  • The developer stopped answering. Emails go unanswered, the phone number is dead, or the freelancer moved on years ago. The site still works, but nothing about it can change.
  • Nobody has the logins. The hosting account, the domain registrar, and the admin password left with whoever set them up. This is recoverable more often than people expect, and proving domain ownership is usually the way in.
  • It has not been updated in years. An unpatched content management system with abandoned plugins is the most common way a small business site gets compromised. Often it is already serving spam by the time anyone notices.
  • It broke and nobody can fix it. A white screen after an update, a contact form that silently stopped delivering, or checkout failing on mobile. Someone has to read the code to know which of those it is.
  • You inherited it. New in the role, or the business changed hands, and the website came with it undocumented. First job is finding out what you actually own.
  • The agency wants to start over. Sometimes a rebuild genuinely is the answer. Often it is the only thing the shop you asked knows how to sell. Those are different situations and you deserve to know which one you are in.

What you get told

The audit ends in one of three recommendations — maintain, repair, or replace — with the reasoning behind it. That matters here more than on most work we do, because the shop assessing your site is also the shop that would be paid to rebuild it, and you have no easy way to check whether the verdict was self-serving.

So it is worth saying plainly: we regularly tell people their site is fine. A well-built site on a supported platform that simply has not been patched needs maintenance, not a replacement, and quoting a rebuild for it would be the easier sale and the wrong answer.

How it works

Four steps, before anyone touches anything.

Nothing gets changed on a site we have not read first. The audit is where a takeover either becomes straightforward or turns out to be a different job than it looked like.

  1. 01

    Get access

    Domain, hosting, and site administration, in that order. Where a login is genuinely gone, control of the domain is usually enough to recover the rest.

  2. 02

    Audit

    What it is built on, what version, what is unpatched, whether it has already been compromised, where it is hosted, and where the backups are if there are any.

  3. 03

    Tell you straight

    Maintain, repair, or replace — with the reasoning, not just the verdict. If the site is fine and only needs patching, that is what we will say.

  4. 04

    Take it on

    Backups, patching, monitoring, and a person who answers. Or a rebuild, if that is what the audit actually supported.

Why the domain name comes first

If you control the domain, you are never truly locked out. Hosting can be replaced, a site can be rebuilt from a public copy, and email can be pointed somewhere new — all of it turns on the domain, and none of it is possible without it.

This is also the single most common thing we find registered to the wrong person: a former employee's personal email, or a contractor who bought it in their own name a decade ago. It is worth checking who holds yours today, whether or not you ever call us. If it is not you, that is the first thing to fix.

Once a site is ours to look after, it gets patched, monitored, and backed up automatically, and you reach the person who does the work rather than a ticket queue. Our longest-running client relationships are on the work page, and they are the argument for taking this seriously — sites we have kept running for over a decade.

Common questions

What people ask before they call.

Our web designer disappeared. Can you take over the site?

Yes, and it is one of the more common ways people reach us. What matters is control of the domain name, because that is the piece everything else hangs from. Tell us the web address and we will look at what is publicly visible before you have to find a single password.

We have lost the logins entirely. Is the site recoverable?

Usually. Registrars and hosting companies have account recovery processes for exactly this, and they generally turn on proving you are the business the account belongs to rather than on remembering a password. The harder case is a site registered under a former employee or a contractor in their own name, which is worth starting on sooner rather than later.

Will you tell us to rebuild it?

Only if that is the honest answer. Plenty of sites we look at need patching, a backup routine, and someone to call — not a replacement. A rebuild gets recommended when the platform is unsupported, when it has been compromised deeply enough that a clean start is safer, or when repairing it would cost more than replacing it. You get the reasoning either way.

What does a takeover cost?

It depends on what the audit finds, so there is no honest number to publish here — a site that needs patching and monitoring and a site that has been compromised are different jobs. If it does turn out to be a rebuild, most business sites land between $2,500 and $9,000, the same range published on our quote page. Ongoing maintenance is quoted separately so the two stay comparable.

Can you work with WordPress, or do you only build custom sites?

Both. A large share of the sites we take over are WordPress, and keeping one properly patched and backed up is a perfectly reasonable outcome. We also work in PHP, Node, and older custom codebases that no longer have anyone maintaining them.

Do we have to move hosting to you?

No. We can maintain a site where it already lives if the hosting is sound. We will say so if it is not — slow, oversold, or missing backups are the usual reasons to move, and that is a recommendation rather than a condition.

The site may already be hacked. Do you handle that?

Yes. Say so when you get in touch, because it changes the order things happen in — containment and a clean restore come before anything cosmetic. Bring any hosting suspension notice or malware warning you have received with you.

Start here

Send us the web address.

That is enough to start. We will look at what is publicly visible and tell you what we find before you go hunting for passwords.