A website emergency is anything that’s stopping customers from reaching you or paying you right now, or putting their data at risk. That means the site is down, hacked, showing a security warning or failing at checkout. For those, get help straight away, even at 2am. Almost everything else can wait for business hours.
Key takeaways
- Down, hacked, a browser security warning, a broken checkout or a suspected data breach are emergencies.
- Slow pages, layout glitches and content changes usually aren’t.
- Check it’s not just your device or connection before you call.
- Save an emergency number now. Our 24/7 line is 0426 833 422.
What counts as a website emergency?
Ask two questions. Is it costing you sales or enquiries right now? Could it expose customer data or spread harm? If the answer to either is yes, treat it as an emergency.
| Situation | Urgency |
|---|---|
| Site down for everyone | Emergency |
| Hacked, redirecting to spam or showing strange content | Emergency |
| “Deceptive site” or “Not secure” warning in browsers | Emergency |
| Checkout or payments failing | Emergency |
| Suspected data breach | Emergency |
| Contact form not sending | Same day |
| Site slow, or one page looks broken | Next business day |
| Content changes, new pages, design tweaks | Can wait |
Security warnings are urgent because they stop most visitors cold. Google Safe Browsing alone protects “over five billion devices every day” (Google Safe Browsing), so a flag on your site reaches almost everyone. An expired SSL certificate does something similar: browsers warn visitors away before the page loads.
Hacks need speed for a different reason. Australia’s cyber agency received over 84,700 cybercrime reports in 2024–25, about one every six minutes (ASD Annual Cyber Threat Report). The longer malware runs, the more it spreads, and the harder the clean-up.
How do I check it’s a real emergency?
- Try another device and connection. Turn off wi-fi on your phone and load the site over mobile data.
- Check your inbox. Look for emails from your host, domain registrar or security plugin. A suspension or expiry notice explains a lot.
- Check the domain hasn’t expired. An expired domain takes the website and email down together.
- Note what you see. Take a screenshot of any error message and note the time.
If it’s down for everyone, our guide to a website down covers the first 30 minutes step by step.
Who should I call at 2am?
That depends on who looks after what. Your host looks after the server. Your web designer may know the site best but often isn’t on call. A care provider looks after the WordPress software, security and backups.
The worst time to find out who answers after hours is during an outage. Ask now, and save the numbers in your phone. Check whether help is 24/7 or business hours only, and whether there’s an extra charge after hours.
For our customers, here’s how it works:
- 24/7 emergency line: 0426 833 422, for down, hacked or broken checkout.
- Personal hosting: email, ticket and chat, Monday to Friday, 9am to 5pm.
- Business hosting: adds phone support, 7 days, 9am to 5pm.
- VPS hosting: 7 days, 8am to 8pm, with a 4-hour response.
Our website support page explains what each level covers.
What should I have ready when I call?
- Your domain name and who your host is.
- What you saw, when it started, and screenshots.
- Anything that changed recently: an update, a new plugin, a hosting change.
- Login access for your hosting and WordPress, or someone who has it.
- Where your latest backup is.
With that ready, most problems are diagnosed faster, and you pay for fixing rather than investigating.
What does emergency website help cost?
It varies by provider and by problem. A one-off fix after hours usually costs more than the same fix covered by a plan. Our article on website repair cost compares pay-per-fix with a monthly plan over a year.
For fixes outside a plan, we offer fast WordPress repairs. If you want guaranteed hours each month as well, a website support retainer may suit you better.
Data breaches carry extra obligations. Businesses covered by the Notifiable Data Breaches scheme must assess a suspected breach within 30 days and notify serious ones “as soon as practicable” (OAIC).
How do I make emergencies rarer?
- Monitor uptime. Get an alert within minutes, not from a customer.
- Keep off-site backups. A recent clean backup turns many emergencies into a short restore.
- Update weekly for security fixes. Most hacks use known plugin flaws.
- Auto-renew SSL and domains. Let’s Encrypt certificates last 90 days and are best renewed every 60 (Let’s Encrypt), so renewal must be automatic and checked.
Our website maintenance plans cover all four, with “hack-free or we fix it free” on every plan.
Frequently asked questions
Is a slow website an emergency?
Usually not, unless it’s so slow that pages time out or checkout fails. A sudden slowdown with no changes can be a sign of a hack or an attack, though, so if it’s dramatic and unexplained, get it checked the same day.
My contact form isn’t sending. Is that urgent?
It’s same-day urgent for most businesses, because every lost enquiry is invisible. Test the form yourself, check your spam folder, and ask your provider to look at email delivery before the end of the day.
Should I call my web designer or my host first?
If the site is completely down, start with your host, because the server or domain may be the cause. If the site loads but looks wrong, is hacked or a feature is broken, call whoever maintains WordPress for you.
What can I do myself while I wait for help?
Don’t delete files or restore backups in a panic. Take screenshots, note the time and any recent changes, and change your WordPress and hosting passwords if you suspect a hack. Then leave the fix to someone who can see the server.
Sources
- Google Safe Browsing, Google
- Annual Cyber Threat Report 2024–25, Australian Signals Directorate, October 2025
- Quick reference guide for responding to data breaches, OAIC
- FAQ, Let’s Encrypt