A fixed £200 to clean a compromised WordPress site, close the hole that let the attacker in, and get you out of Google’s blacklist. If I can’t fix it, you don’t pay.
What the £200 covers
- Contain: a full forensic copy of files and database is taken before anything is changed
- Find: core files checked against official checksums, themes and plugins scanned for injected code, and the database searched for backdoors in
wp_options, injected admin users and re-infecting scheduled tasks - Clean: core replaced from source, compromised themes and plugins reinstalled fresh, injected content removed
- Rotate: every credential changed: WordPress users, database password, FTP and SFTP, and the security salts, which logs out every existing session
- Close the door: the actual entry point identified and fixed, then file permissions hardened and dashboard file editing disabled
- Reinstate: submitted for review through Google Search Console and blacklist removal requested
- Report: a plain-English write-up of what was found, how it got in, and what to do next
Most sites are clean and back online the same working day. This price covers a single WordPress site; a network of sites, or a site that needs rebuilding instead of cleaning, is quoted separately and always agreed before any chargeable work.
Want to stop it happening again? A care plan keeps things patched and watched, and the Commerce plan includes malware removal at no extra cost.