Tahweel Sanitary: rebuilt clean, in a week, after two break-ins
A Saudi sanitary ware company whose site was compromised twice in one month. We rebuilt it on a clean install and it has been quiet since.
What happened
A bilingual product site, rebuilt clean after an attack
The site was broken into twice in August 2026. The first time through a known hole in a form plugin, the second time with a rogue administrator account and web shells left behind. Cleaning a site in that state is guesswork: you can never prove you got everything. So we did not clean it.
What we did
- Built a fresh WordPress install on a clean server, with nothing carried over except content we inspected
- Rebuilt the bilingual product catalogue, Arabic and English
- Hardened the new install: security headers, locked-down admin, new credentials for everyone
- Put it on our support plan: continuous scanning, tested updates, off-server backups
- Checked every other site we run for the same entry route the same week
Where it stands
- Rebuilt and live in days, with no data lost
- Clean on every scan since
- The same entry route is now closed on every site we look after
Client quote goes here, once approved. We collect them through the feedback form we send after every project.
- Client
- Tahweel Sanitary
- Sector
- Sanitary ware
- Market
- Saudi Arabia
- Languages
- Arabic and English
- Services
- Build · Protect
- Status
- Rebuilt 2026, on a support plan
Tell us what's slowing your business down.
Thirty minutes is enough to tell whether we're the right team. If we're not, we'll say so and point you to someone who is.