Tahweel Sanitary: rebuilt clean, in a week, after two break-ins
A Saudi sanitary ware company whose site was compromised twice in one month. We rebuilt it on a clean install and it has been quiet since.
- 2
- break-ins in one month
- 1 week
- from break-in to live again
- 0
- break-ins since
What happened
Broken into twice in one month
The site was broken into twice in August 2026. The first time through a known hole in a form plugin, the second time with a rogue administrator account and web shells left behind. Cleaning a site in that state is guesswork: you can never prove you got everything. So we did not clean it.
- Client
- Tahweel Sanitary
- Sector
- Sanitary and plumbing products
- Market
- Saudi Arabia
- Languages
- Arabic and English
- Services
- Build, Protect
- Status
- Live, on a support plan
What we did
What we did instead of cleaning it
Five decisions, in plain terms.
We did not clean it. We rebuilt it.
A site broken into twice can never be proved clean — you are always guessing you found everything. So we started again on a fresh server and carried across only content we had inspected ourselves.
The catalogue back in both languages
Arabic and English products rebuilt exactly where customers expect to find them.
Locked down on day one
Security headers, a closed-off admin area, and brand new credentials for every single account — including the ones nobody remembered existed.
Watched continuously, updated carefully
Constant scanning, updates tested before they go live, and backups kept off the server where an attacker cannot reach them.
We checked everyone else the same week
The same way in was closed on every other site we look after, before anybody else went looking for it.
Where it stands
Quiet ever since
The choice was weeks cleaning a site nobody could certify, or one week rebuilding one we could stand behind. We rebuilt.
Back online in days, nothing lost
The content came across intact. The compromise did not.
Clean on every scan since
No reinfection, no rogue accounts, no surprises.
That door is shut everywhere
The fix was applied across the whole estate, not just the site that got hit.
Where to go next
Tell us what you want to build.
A website, a mobile app, a CRM or an ERP: tell us what you have in mind and we'll come back with a plan, a timeline and a price. Thirty minutes is enough to tell whether we're the right team.