Fixed price · five working days · no plan required
Hacked WordPress site? We will clean it, lock it and get it back.
Malware removed, backdoors closed, passwords and keys rotated, blacklists cleared and a report on how it got in.
Included
What the fixed price covers
- Full malware scan and clean of files and database
- Backdoors, rogue admin users and scheduled tasks removed
- All passwords, salts and API keys rotated
- WordPress core, theme and plugins reinstalled from clean copies
- Google and blacklist warnings cleared
- Firewall, login protection and file monitoring switched on
- A written report on how it got in and what to change
Not included
What it does not
- Rebuilding a site that has no clean backup and cannot be recovered (quoted separately)
- Custom code fixes beyond removing what the attacker added
- Hosting that will not give us the access we need (we will move you instead)
- Ongoing monitoring, which is what the Care plan is for
How it works
Four steps, usually inside five working days
Access and backup
You send hosting and WordPress access. We take a full copy before touching anything.
Clean and close
Malware out, backdoors shut, clean copies of core, theme and plugins in.
Harden and verify
Keys rotated, firewall on, blacklists cleared, every page and form checked.
Report and next steps
How it got in, what we changed and what stops it happening again.
Then stop it happening again
Most hacked sites were simply never updated
The report will almost always say the same thing: an old plugin, a weak password, nobody watching. The Care plan is the fix for that. Hosting on Core, updates tested first, a firewall in front and someone checking every day. The rescue fee comes off your first month.
See the Care planCare · £200 a month
- Hosting on Core with a firewall in front
- Updates tested on canary, then applied
- Daily offsite backups, restore tested
- Login protection and file monitoring
- Someone to call the same day
Questions
Before you book
How do I know it is hacked?
Redirects to other sites, a warning in Google, spam pages you did not write, emails bouncing or your host suspending the account. If you are not sure, the £149 health check will tell you and comes off the rescue.
Will I lose anything?
No. We take a full copy first and only remove what the attacker added. Content, orders and users stay.
What do you need from me?
Hosting login, WordPress admin and, if you have one, access to the domain. We send a short checklist when you book.
What if you cannot fix it?
Then you do not pay, and we tell you what the options are, which is usually a rebuild on Core from your clean content.
Next step
Book the rescue
Send the address of the site and what you have seen. We will confirm the price and start the same day where we can.
or email [EMAIL]
