The short version: a fixed £495 to clean a hacked WordPress site, close the hole, reset every password, update everything and ask Google to review it. Most sites are back within two working days. 30 days of monitoring included. No care plan needed.
Signs your site has been hacked
Redirecting to spam
Visitors, or just visitors from Google, get sent to pharmacy, casino or adult sites.
Strange pages in Google
Search results for your business show pages in other languages or products you've never sold.
A browser warning
Chrome or Safari shows a red 'deceptive site' warning before your site loads.
Your host has suspended it
A message from your hosting company about malware, or the site simply switched off.
New admin users
Accounts in WordPress that nobody in your business created.
Emails bouncing or flagged
Your domain has started sending spam, so your real emails land in junk.
What to do right now
Don't delete the site and don't pay anyone who emails you offering to fix it. Change your WordPress, hosting and email passwords, tell your host, and check Google Search Console for a security warning. Our guide to the first hour after a WordPress hack covers each step.
What the £495 covers
- We clean it.Malicious files, injected code and spam pages removed, and the database checked.
- We close the way in.The plugin, theme or password that let them in is found and fixed.
- We reset and update.Every password and key changed, WordPress, themes and plugins brought up to date.
- We ask Google to review.A review request through Search Console so warnings come off as soon as possible.
- We watch it for 30 days.Monitoring included, so if anything comes back we catch it quickly.
Other fixed-price WordPress fixes
| Fix | Price | Notes |
|---|---|---|
| Hacked site clean-up | £495 | Includes 30 days of monitoring |
| Locked out recovery | £350 | Getting your domain, hosting and logins back in your name |
| Speed fix | £695 | A slow WordPress site made quick again |
| Health check | £295 | A written report on the whole site. Free if you join a care plan within 30 days |
WooCommerce shops and membership sites are quoted separately. No VAT on top. All prices on the pricing page.
The honest bit
A clean-up fixes today's problem. If the site was hacked because nobody was updating it, it'll happen again unless someone does. You don't have to use us for that, but someone should. Here's how to tell if your site is actually being looked after.
Common questions
How quickly can you fix it?
Most sites are back to normal within two working days. If we look and it's a bigger job than it seemed, we tell you before doing anything else.
Will the Google warning go away?
Once the site is clean we ask Google to review it through Search Console. The warning comes off when Google has checked, which is on Google's timetable rather than ours, but it's usually quick once the site is genuinely clean.
How did it get hacked?
Almost always an out-of-date plugin or theme, an abandoned plugin nobody removed, or a weak or reused password. We find the way in and close it, so it doesn't happen again next month.
Do I need a care plan afterwards?
No. The clean-up is a one-off, fixed-price job and includes 30 days of monitoring. If you'd like it looked after from then on, the care plans start at £95 a month.
What if the site can't be saved?
Occasionally a site is so out of date that cleaning it is throwing good money after bad. If that's the case we'll say so, and quote a rebuild instead. You won't be charged for a clean-up we don't think is worth doing.
Site hacked right now?
Email or call and we'll take a look the same working day.
Email [email protected]Call 07737 548 072