Security Issues

Security issues are a category of problems Google flags when a site has been hacked, spreads malware, or tries to deceive visitors, reported in the Security Issues section of Search Console.

Google scans the web for signs that a site is harmful to users. When it finds them, it groups the findings into types such as hacked content, where an attacker has injected spam or malicious code into your pages; malware and unwanted software, where the site distributes harmful downloads; and social engineering, which covers phishing pages and deceptive content designed to trick people into revealing information or installing software. The Security Issues report names the affected pages and the problem type.

The consequences are severe and immediate. Affected pages can be removed from results or shown with a warning label, and browsers may display a full-page interstitial warning that blocks visitors before they reach the site. Traffic can drop sharply overnight. Unlike a manual action for spammy tactics, a security issue usually means your site has been compromised by a third party, so the fix is part cleanup and part hardening.

Resolving a security issue means finding and removing the malicious content, closing the vulnerability that let it in, often an outdated plugin, weak password, or unpatched software, and then requesting a review through Search Console. Google reinspects the site and lifts the warning once the problem is gone. Keeping software updated, using strong access controls, and monitoring the report are the practical defenses, since the faster you catch a compromise the smaller the search and trust damage.

Related: SSL Certificate, Search Console API