It happens more than anyone admits: the freelancer stops answering, the agency folds, the one person who knew how the site worked takes another job. No handoff, no docs, and a website that’s now your problem. Breathe — this is recoverable, and the first 48 hours have a known order of operations.
Hour zero: don’t panic, and don’t click anything drastic
The site is probably fine right now. The risk isn’t today; it’s the renewal that lapses next month or the update nobody applies. You have time to do this right.
First: the domain (the thing you truly cannot lose)
Find out where the domain is registered — look yourself up at a WHOIS lookup site. Then answer one question: do you control the account at that registrar? If the domain is registered under the developer’s account, this is your top priority — everything else about a website can be rebuilt, but a domain that expires under someone else’s unreachable account can be genuinely lost. Check the expiration date, and if it’s within 90 days, treat this as urgent.
Second: hosting
Find the hosting company (your billing records usually know, even when nobody else does — search your email for the invoice). Confirm you can log in, that billing is in your name, and note when it renews. If the hosting was billed through the developer, contact the host with proof of domain ownership and ask about transferring the account.
Third: the CMS
Can anyone in your organization log into the website’s admin? If yes: check the user list and remove or downgrade accounts you can’t identify. If no: don’t try password-reset roulette yet — note it for the rescue assessment, because guessing wrong on a locked-down site can trigger lockouts.
Fourth: backups — the rumor check
Ask yourself: when did anyone last see a backup? Not “the host does backups” — an actual file, restored, working. If the answer is never, that’s the single most important thing a rescue fixes first, because every other risk gets smaller once a proven backup exists. Around here we say a backup is a rumor until you restore it.
Fifth: write down what you know
One page: domain registrar, host, CMS and version if known, who used to have access, what changed recently, what prompted the developer’s exit. Whoever helps you next — us or anyone competent — starts two days faster with that page in hand.
When it’s time to call someone
If you got through the list with control of the domain, a working login, and a restorable backup: you’re in decent shape, and a monthly maintenance plan may be all you need. If you hit a wall on any of the five — locked out, unknown host, no backups, domain in someone else’s name — that’s what a rescue is for: a $1,500 flat assessment that maps exactly what you have and what it takes to make it boring again. We support sites we didn’t build. Whoever built them.
Dead North is a Minneapolis web studio that picks up sites other people put down — how a rescue runs, prices included.