Your site is hacked.
We clean it, or you don't pay.
Malware removed, backdoors closed, and your site cleared from the browser blocklists that are turning your visitors away. One fixed fee, whatever we find.
What you're probably seeing
-
A red warning instead of your site
Chrome, Safari and Firefox all pull from the same blocklists. Once you're on one, most of your traffic never reaches you.
-
Your homepage replaced
A defacement page, someone else's message, or a blank white screen where your business used to be.
-
Redirects to somewhere else
Often only on mobile, or only for visitors arriving from Google — which is why it can run for weeks before anyone tells you.
-
Your host has pulled the plug
Suspended for sending spam or consuming resources. The hosting company wants it cleaned before they'll switch you back on.
How we get it back
Four stages, in this order. Cleaning before containing just gives them a second go.
-
01
Contain
Take a forensic copy, end every active session, and rotate every credential — hosting, SFTP, database, and CMS admin. Nothing gets cleaned while someone still has the keys.
-
02
Clean
Compare core, plugin and theme files against known-good releases. Remove injected payloads, web shells and scheduled-task persistence. Strip malicious rules from
.htaccessand config files. -
03
Harden
Patch the way in. Remove abandoned plugins and admin accounts you didn't create, correct file permissions, and put a login lockout in place.
-
04
Delist
Submit for review with Google Safe Browsing and the major blocklists, then confirm the warning is actually gone for real visitors.
One price. Whatever we find.
£199 + VAT
£238.80 including VAT at 20%. Per site, one payment, no hourly rates and nothing added later.
- Full malware and backdoor removal
- Blocklist and Safe Browsing delisting
- Entry point patched and site hardened
- A written summary of what we found and what we changed
- We start within 24 hours. Most sites are clean within 48.
Before you buy
What do you need from me?
Access to your hosting control panel or SFTP, and an admin login for your CMS. We send a short checklist the moment you've paid, so you're not guessing at what to dig out.
Which platforms do you work on?
WordPress, Joomla, Drupal, Magento, and hand-built PHP or static sites. If you're on something unusual, email us before paying and we'll tell you honestly whether we can help.
How long does it take?
We start within 24 hours of payment, and most sites are clean within 48. Delisting is the slow part and sits with Google rather than us — reviews usually clear in one to three days once we've submitted.
Could it happen again?
Reinfection almost always means the original entry point is still open, which is exactly what the hardening stage is for. If the same infection comes back, tell us — we'd rather finish the job than leave it half done.
What isn't included?
Rebuilding a site where there's no backup and the content is genuinely gone, ongoing monitoring or maintenance, and design or development work beyond fixing what the attack broke. If your site falls into the first case, that's a refund, not an invoice.
Every hour it stays up, it costs you.
Fixed fee, refunded in full if we can't fix it.
Fix my site — £199 + VAT £238.80 including VAT · pay by card