Services About Contact Free Audit →
Hosting & Infrastructure

Your site cleaned up, locked down, and taken off Google warning list.

Your site cleaned up, locked down and taken off Google's warning list. This is emergency work and it is the point at which most people ring us for the first time.

From £400 Price agreed upfront No hidden extras
SPECIFICATION — MALWARE CLEANUP AND HARDENING Hosting & Infrastructure
What you get

Everything included, nothing hidden.

WHAT YOU GET — INCLUDED Hosting & Infrastructure
Malware removed and files restored to a known-good state
Backdoors found and closed
Login and firewall hardening
Blacklist removal and Google reconsideration where needed
A plain explanation of how it got in
SCOPE5 deliverables included
The detail

We remove the malware and restore files to a known-good state, find and close the backdoors, harden your logins and firewall, handle blacklist removal and Google reconsideration where it is needed, and give you a plain explanation of how it got in. The backdoors are the part that matters most and the part most cleanups skip: remove the visible infection without closing the way in, and the site is reinfected within days.

Scope varies enormously, which is why this is priced from rather than fixed. Reinfection, multiple backdoors and blacklisting all change the size of the job. The honest thing to say afterwards is that this should not happen twice: maintenance covers cleanup at no charge if it does, so the sensible move once you are clean is to make sure somebody is applying the updates that would have prevented it.

Who this is for

Your site has been hacked, or Google is showing a warning next to it, or your host has taken it offline. You may have found out from a customer, which is the usual way. You need it dealt with now, and afterwards you want to know how it happened rather than just being told it is fixed.

When this is not the right answer

If your site has not been compromised and you want to know whether it is vulnerable, the Website MOT checks security and scans for malware as part of a wider health check for far less. If you are already on a maintenance plan with us and get hit, this is covered rather than something you buy, subject to the cover starting after your first thirty days and pirated plugins and themes being excluded.

How it works

Step by step.

01
Scan and identify
02
Remove malware
03
Restore integrity
04
Harden
05
Blacklist removal
Typical timescale
Around 1 week, once we have what we need from you.

Common questions

This is treated as emergency work because that is what it is. Tell us what you are seeing and what access you have, and we will tell you straight away what is involved. The clean-up itself typically takes a few days depending on how far it spread.
Because the jobs vary enormously. One infection caught early is straightforward. A site reinfected repeatedly, with several backdoors and a Google blacklisting to clear, is a much bigger piece of work. We tell you which one you have got before we start.
Almost every hacked site we see got in through out-of-date WordPress, a plugin or a theme, months after a fix existed. Keeping those updated is what prevents it, which is what maintenance does. Once you are clean, that is the cheapest insurance available.
Yes, in plain language, as part of the job. Knowing the route in is what stops it happening again, and it is often something specific and fixable rather than bad luck. We would rather you understood it than simply trusted that it is gone.

How we make money

We charge for work, and that is all. Your ad spend, your software subscriptions and anything else bought on your behalf go on your own accounts at cost, with nothing added by us.

Our prices are published and they are the same for everyone.

Read how we work and how we make money →

Talk to us about hosting.

Straight answer, no obligation. Tell us what you need and we will tell you what it takes.