Urgent: My New SaaS Website Shows Suspicious Activity, How Do I Approach Malware Removal?

Hey everyone,

I just launched my first SaaS application and I'm super excited about it, but lately, I've noticed some really strange behavior on the website. Things like occasional slow loading, weird redirects for some users, and even a few suspicious-looking emails originating from my domain that I didn't send. It's really putting a damper on my launch.

I'm a complete beginner when it comes to website security, and I'm really worried this might be malware. I've tried searching online, but the information is overwhelming, and I'm scared of making things worse if I try to fix it myself without proper guidance. I don't even know how to confirm if it's actually malware or just a bug. I'm trying to learn about proper website protection, but it's a lot to take in at once.

Could anyone offer some advice? Specifically, I'm wondering:

• What are the absolute first diagnostic steps I should take to confirm if my site has malware?
• If it is indeed malware, what's the safest and most effective way to proceed with malware removal for a complete beginner, without potentially breaking my entire site?
• What immediate, beginner-friendly proactive measures can I implement right now to prevent future attacks and keep my new SaaS secure?