Skip to content

Your site cleaned up, locked down, and taken off Google's warning list.

Your site cleaned up, locked down and taken off Google's warning list. This is emergency work and it is the point at which most people ring us for the first time.

From £400, price agreed upfront, no hidden extras.

From £400 From this price, final scope agreed before we start.

Thu5Thu12
Start today
live by Thu 12 Nov
Timescale
around 1 week

Everything included, nothing hidden.

Malware Cleanup and Hardening

5 things included, from our Hosting & Infrastructure work

Malware removed and files restored to a known-good stateincluded
Backdoors found and closedincluded
Login and firewall hardeningincluded
Blacklist removal and Google reconsideration where neededincluded
A plain explanation of how it got inincluded
Your priceFrom £400

We remove the malware and restore files to a known-good state, find and close the backdoors, harden your logins and firewall, handle blacklist removal and Google reconsideration where it is needed, and give you a plain explanation of how it got in.

The backdoors are the part that matters most and the part most cleanups skip: remove the visible infection without closing the way in, and the site is reinfected within days.

Scope varies enormously, which is why this is priced from rather than fixed. Reinfection, multiple backdoors and blacklisting all change the size of the job.

The honest thing to say afterwards is that this should not happen twice: maintenance covers cleanup at no charge if it does, so the sensible move once you are clean is to make sure somebody is applying the updates that would have prevented it.

Who this is for

Your site has been hacked, or Google is showing a warning next to it, or your host has taken it offline. You may have found out from a customer, which is the usual way. You need it dealt with now, and afterwards you want to know how it happened rather than just being told it is fixed.

When something else fits better

If your site has not been compromised and you want to know whether it is vulnerable, the Website MOT checks security and scans for malware as part of a wider health check for far less. If you are already on a maintenance plan with us and get hit, this is covered rather than something you buy, subject to the cover starting after your first thirty days and pirated plugins and themes being excluded.

Step by step.

Scan and identifyNeeds you

We need your hosting access first. Then we find the infection and how far it spread, and tell you the size of the job before we start.

Remove malware

Malware is removed and the backdoors found and closed, because a cleanup that leaves the way in open is reinfected within days.

Restore integrity

Files go back to a known-good state, and we explain in plain language how the infection got in.

Harden

We harden your logins and firewall. Keeping WordPress, plugins and theme updated afterwards is what stops a repeat.

Blacklist removal

Where the site has been blacklisted, we handle removal and Google reconsideration so the warning comes off.

Then it's yours. Live, documented, and supported whenever you want to take it further.
Typical timescale
Around 1 week, once we have what we need from you. Start today and you could be live by Thursday 12 November.
★★★★★

"I first used Whitfield IT back in 2010 when a web design company made an absolute mess of our website. Alex quickly stepped in, resolved the issues, and had us back online within days."

J
Jason McAuley
Managing Director, Konexit Fleet Ltd · Google review, August 2026

Common questions

This is treated as emergency work because that is what it is. Tell us what you are seeing and what access you have, and we will tell you straight away what is involved. The clean-up itself typically takes a few days depending on how far it spread.
Because the jobs vary enormously. One infection caught early is straightforward. A site reinfected repeatedly, with several backdoors and a Google blacklisting to clear, is a much bigger piece of work. We tell you which one you have got before we start.
Almost every hacked site we see got in through out-of-date WordPress, a plugin or a theme, months after a fix existed. Keeping those updated is what prevents it, which is what maintenance does. Once you are clean, that is the cheapest insurance available.
Yes, in plain language, as part of the job. Knowing the route in is what stops it happening again, and it is often something specific and fixable rather than bad luck. We would rather you understood it than simply trusted that it is gone.

How we make money: we charge for work, and that is all. Your ad spend, your software subscriptions and anything else bought on your behalf go on your own accounts at cost, with nothing added by us. Our prices are published and they are the same for everyone. Read how we work and how we make money →

Talk to us about hosting.

Straight answer, no obligation. Tell us what you need and we will tell you what it takes. Or ring 01244 565 666.