Keep the CMS and plug-ins patched and watch for injected pages and links

Hacked content, placed on a site without permission through security vulnerabilities, is one of the spam types on Google's list; cleaning it up is hard and prevention is key. If it leads to a manual action, Google's help says most reconsideration reviews take several days or weeks; said at Search Central Live, removal takes one to two weeks on average, and for some sites the action stays because the owners never actually clean up.

Automate CMS, theme and plug-in updates, remove unused plug-ins and accounts, require two-factor login for editors, and alert on new URLs, outbound links or sitemap entries that no editor created. After a clean-up, file the reconsideration request only once every injected page and link is gone.

Regensbot proposes a verdict with the evidence; a person on your team confirms it.

The evidence comes from a crawl of your site. Where content needs judging, Claude proposes the verdict as an assistant judge and never fails a page on its own.

The crawl is polite: sitemap first, one request per second per host. A problem it finds is definite, and “none found” passes only on a complete crawl.

How verdicts workWhat you connect