Your hacked WordPress site, safe again within 24 hours.
We remove the malware, close the way the attackers got in, and ask Google to lift its warning. You pay a fixed $199, get a written report on what happened, and a free re-cleanup if the hack comes back within 30 days.
Three details, then payment. You share access only after paying.
Hands-on 8:00–22:00 Brazil time (UTC−3), every day.
Sounds like your site?
Any of these means someone else can change your site. It usually gets worse: more spam pages, more redirects, then a suspended account or a blocklisted domain.
Until we start, don’t delete files or reinstall plugins.
Those files show how the attackers got in. Without them, the same hole stays open and the hack comes back.
Not sure? Check your site for free. It takes about 20 seconds and needs no password.
- Google or the browser warns visitors that the site may be hacked or dangerous
- Visitors get sent to spam, pharmacy or scam sites, often only on phones or from Google
- Japanese or pharma spam pages show up under your domain in Google
- Your host suspended the account for malware
- You can’t log in to wp-admin, or there are admin users you didn’t create
- Emails from your domain bounce or land in spam
- Google Ads disapproved your ads for malicious software
- Strange files, pop-ups or pages you didn’t make
How a cleanup works
Standard cases start within 2 hours during our hours and are done within 24 hours of getting working access. Complex cases take up to 48 hours.
You follow every step in your case page, and every update also comes by email.
- 1
Order in a minute
Your site, your email and your name. No long form and no passwords.
- 2
Pay the fixed price
$199 by card or with PayPal, on Stripe’s or PayPal’s secure page. We can start as soon as it’s paid.
- 3
Share access in your case page
Through a form that encrypts the details in your browser. Best is a temporary SFTP or SSH user that you delete afterwards.
- 4
We back up first
A full copy of your files and database goes off your server before we change anything.
- 5
Diagnosis and written plan
We find what was changed and how they got in. You get the plan in writing, and we confirm whether the case is standard or complex before any cleanup.
- 6
Cleanup and hardening
Malware, backdoors and rogue admin users removed. WordPress core, plugins and themes checked against official copies. Then we lock the site down.
- 7
Verification and report
A second scan, Google Safe Browsing and blocklist checks, and review requests where needed. Your written report arrives and the guarantee starts.
Prices
In US dollars, fixed before you start. They don’t change with demand, and there’s no yearly contract.
Standard cleanup
$199
One site. Starts within 2 hours during our hours.
Done within 24 hours
Complex cleanup
$349
For several sites in one hosting account, an infected server, a deeply infected database, more than 5,000 changed files, or a partial rebuild from a clean copy. You pay $199 first, and the $150 difference only if the diagnosis shows the case is complex. We tell you in writing before cleanup starts.
Done within 48 hours
Priority
+$150
We start right away, even outside our hours. Offered only when someone is free to start now.
Done within 4 hoursNot available right now
Monitoring after the cleanup
$29a month
Hourly checks, instant alerts, a weekly report, monthly security updates, and free re-cleanup while you’re subscribed. Offered when your cleanup is delivered; the first month is included.
or $290 a year
Agencies and developers
$149a case
Same work as standard, with reports under your brand or no brand, and a place near the front of the queue. Write to us.
From 3 cases a month
Every cleanup includes
- A full backup before anything is touched
- Cleanup of files and database
- Backdoors and suspicious users removed
- Hardening after the cleanup
- Google warning and blocklist removal requests
- A written report: what we found and how they got in
- 30-day guarantee
The 30-day guarantee, in full
If the hack comes back within 30 days of delivery, through the same hole or any hole our hardening should have closed, we clean the same site again for free.
It doesn’t cover:
- a password that is shared or leaked after delivery,
- a pirated (“nulled”) plugin or theme installed again,
- undoing the updates we applied.
Your passwords stay sealed
You share access only after paying, in your own case page. Never by email, chat or the order form.
Your browser seals it
The details are encrypted on your device, with a key only our team holds, before they’re sent.
The website can’t open it
It stores the sealed copy and nothing else. The key that opens it is kept offline, not on any server.
Deleted 7 days after your case closes
Even better: create a temporary user for us and delete it when we’re done.
Rules we work by
- We back up your files and database, off your server, before we change anything.
- Every file we delete is recorded and listed in your report.
- We never change your passwords or keys without telling you in writing.
- We never install paid plugins or services in your name without asking.
- We delete your access details 7 days after your case closes.
What we don’t do
- Recover deleted data without a backup
- If data was deleted and no backup from before the hack exists, we can’t bring it back.
- Clean sites with illegal or pirated content
- Including sites that sell or share pirated plugins and themes.
- Phone or video calls
- Everything is in writing, so every finding and decision is on record and easy to share with your developer or host.
- Promise when Google lifts a warning
- We file the review request and follow it until the warning is gone. Google decides the timing; it’s usually 24 to 72 hours.
- Start before payment
- However urgent it is. Paying first is what lets us start right away.
- Sites that aren’t WordPress
- We only work on WordPress, including WooCommerce stores.
Who does the work
SiteSafeAgain is a small team in Florianópolis, Brazil, with years of hands-on work running and securing WordPress and WooCommerce servers. A person you can write to is responsible for your case from start to finish.
We work in writing only. Every finding, decision and change is on record, so you can go back to it and share it with your developer or your host.
Our hours, 8:00–22:00 Brazil time (UTC−3), cover the whole US business day and the European evening.
Questions
How fast will my site be clean?
Standard cases start within 2 hours during our hours and are done within 24 hours of receiving working access. Complex cases take up to 48 hours. If you order outside our hours, we start at 8:00 Brazil time (11:00 UTC).
What if my case turns out to be complex?
A case is complex when there are several sites in one hosting account, the server itself is infected, the database is deeply infected, more than 5,000 files were changed, or part of the site has to be rebuilt from a clean copy. We tell you in writing after the diagnosis and before any cleanup, with the reason. The difference is $150. We never run over time without telling you.
What do you need from me?
After payment: access to your hosting (control panel, SFTP or SSH) and, if you can, WordPress admin. A temporary user that you delete when we’re done is best. If we need anything else, we ask in writing.
Can you remove the Google warning?
We clean the site, then request a review from Google and the blocklists and follow up until the warning is gone. If the request has to come from your Google Search Console account, we tell you exactly what to click. Google decides the timing; it’s usually 24 to 72 hours after the request.
What if the hack comes back?
Within 30 days of delivery, we clean the same site again for free if the attackers come back through the same hole or any hole our hardening should have closed. After that, monitoring keeps the free re-cleanup going for as long as you’re subscribed.
Do you work on WooCommerce stores?
Yes. Tell us in the form so we can plan the cleanup around your orders and checkout.
How do I pay?
By card, on Stripe’s secure payment page, or with your PayPal account. Either way the payment goes through at once, so we can start right away, and we never see your card details. If we can’t clean the site for a reason outside our control, you get a full refund and a report on what we found.
The sooner we start, the less there is to clean.
We start within 2 hours during our hands-on hours, 8:00–22:00 Brazil time (UTC−3), every day.