Basic
For a blog, a portfolio or a small business site.
$159/year
Save $70Sucuri Basic Platform: $229
- 1 website
- Full check every 12 hours
- Cleanup starts within 12 hours during our hours
- Unlimited cleanups
The Sucuri alternative
Everything Sucuri’s plans include. 30% less.
Unlimited malware cleanups, a firewall with CDN and DDoS protection, full checks every 12 hours or faster, blocklist removal, and your money back within 30 days if no cleanup was needed. Basic is $159 a year instead of $229.
24 h
cleanup, start to report
30%
less than Sucuri
30 days
full refund on a plan if no cleanup was needed
0
calls needed: all in writing
Hands-on 8:00–22:00 Brazil time (UTC−3), every day.
Protection plans
Sucuri’s plans, line by line. 30% less.
One price for the year: we watch the site, block attacks before they reach it, and clean it as often as needed. If it’s hacked when you sign up, the cleanup is included.
Recommended
Pro
For sites that bring in customers every day.
$237/year
Save $102Sucuri Pro Platform: $339
- 1 website
- Full check every 6 hours
- Cleanup starts within 6 hours during our hours
- Unlimited cleanups
Business
For online stores and sites that can’t be down.
$384/year
Save $165Sucuri Business Platform: $549
- 1 website
- Full check every 30 minutes
- Cleanup starts within 2 hours during our hours
- Unlimited cleanups
Multi-site
For agencies, freelancers and owners of several sites.
$699/year
Save $300Sucuri Junior Dev: $999.98
- 5 websites
- Full check every 6 hours
- Cleanup starts within 6 hours during our hours
- Unlimited cleanups
Every plan includes
- Unlimited malware cleanups and hack repairs
- Firewall (WAF), CDN and DDoS protection, set up and managed by us on Cloudflare
- Blocklist monitoring, and removal requests to Google and the others
- HTTPS certificate set up and watched
- Hardening after every cleanup
- A written report after every cleanup
- A copy of every file we change, kept before we change it
30-day money-back guarantee
Changed your mind? A full refund within 30 days of paying, if we haven’t cleaned a site under the plan yet. After a cleanup, we keep $199 and refund the rest. Paid once a year, with no automatic renewal: we remind you before it ends, and you decide.
Compared with Sucuri
Their published prices and times next to ours. Same protection, a lower price, and a person who answers in writing.
| Plan | SiteSafeAgain | Sucuri | You save |
|---|---|---|---|
| Basic1 site, checked every 12 hours | $159/yrCleanup starts within 12 h during our hours | $229/yrBasic Platform, first response 30 h | $7030% less |
| Pro1 site, checked every 6 hours | $237/yrCleanup starts within 6 h during our hours | $339/yrPro Platform, first response 12 h | $10230% less |
| Business1 site, checked every 30 minutes | $384/yrCleanup starts within 2 h during our hours | $549/yrBusiness Platform, first response 6 h | $16530% less |
| Multi-site5 sites, checked every 6 hours | $699/yrCleanup starts within 6 h during our hours | $999.98/yrJunior Dev, first response 12 h | $30030% less |
| In every plan | SiteSafeAgain | Sucuri |
|---|---|---|
| Malware cleanups | Unlimited | Unlimited |
| Web application firewall (WAF) | Yes, on Cloudflare, set up by us | Yes |
| CDN and DDoS protection | Yes, on Cloudflare | Yes |
| HTTPS certificate | Set up and watched | Supported |
| Blocklist monitoring and removal | Yes | Yes |
| Report after a cleanup | Written, with how they got in | Post-cleanup report |
| Money-back guarantee | 30 days, in full if no cleanup was needed | 30 days |
Sucuri prices and figures are the yearly Website Security Platform plans as listed on sucuri.net on November 2, 2026 (“first response” is Sucuri’s first ticket response time). Sucuri is a trademark of its owner; SiteSafeAgain isn’t affiliated with it. Our firewall, CDN and DDoS protection run on Cloudflare, set up and managed by us on your own Cloudflare account. Cleanup start times count during our hands-on hours.
One-time cleanup
Hacked right now?
Any of these means someone else can change your site. It usually gets worse: more spam pages, more redirects, then a suspended account or a blocklisted domain.
Until we start, don’t delete files or reinstall plugins.
Those files show how the attackers got in. Without them, the same hole stays open and the hack comes back.
Not sure? Check your site for free. It takes about 20 seconds and needs no password.
- Google or the browser warns visitors that the site may be hacked or dangerous
- Visitors get sent to spam, pharmacy or scam sites, often only on phones or from Google
- Japanese or pharma spam pages show up under your domain in Google
- Your host suspended the account for malware
- You can’t log in to wp-admin, or there are admin users you didn’t create
- Emails from your domain bounce or land in spam
- Google Ads disapproved your ads for malicious software
- Strange files, pop-ups or pages you didn’t make
Standard cleanup
$199
One site. Starts within 2 hours during our hours. Report and 30-day guarantee.
Done within 24 hours
Complex cleanup
$349
For several sites in one hosting account, an infected server, a deeply infected database, more than 5,000 changed files, or a partial rebuild. You pay $199 first, and the $150 difference only if the diagnosis shows the case is complex.
Done within 48 hours
Priority
+$150
We start right away, even outside our hours. Offered only when someone is free to start now.
Done within 4 hoursNot available right now
Agencies and developers
$149a case
Same work as standard, with reports under your brand or no brand. Write to us, or see the Multi-site plan.
From 3 cases a month
Every cleanup includes
- A full backup before anything is touched
- Cleanup of files and database
- Backdoors and suspicious users removed
- Hardening after the cleanup
- Google warning and blocklist removal requests
- A written report: what we found and how they got in
- 30-day guarantee
Or get a plan from $159/yr: the cleanup is included.
How it works
How a cleanup works
Standard cases start within 2 hours during our hours and are done within 24 hours of getting working access. Complex cases take up to 48 hours.
You follow every step in your case page, and every update also comes by email.
- 1
Order in a minute
Your site, your email and your name. No long form and no passwords.
- 2
Pay the fixed price
By card or with PayPal, on Stripe’s or PayPal’s secure page. We can start as soon as it’s paid.
- 3
Share access in your case page
Through a form that encrypts the details in your browser. Best is a temporary SFTP or SSH user that you delete afterwards.
- 4
We back up first
A full copy of your files and database goes off your server before we change anything.
- 5
Diagnosis and written plan
We find what was changed and how they got in. You get the plan in writing, and we confirm whether the case is standard or complex before any cleanup.
- 6
Cleanup and hardening
Malware, backdoors and rogue admin users removed. WordPress core, plugins and themes checked against official copies. Then we lock the site down.
- 7
Verification and report
A second scan, Google Safe Browsing and blocklist checks, and review requests where needed. Your written report arrives and the guarantee starts.
Two guarantees, in full
On a plan: your money back
Within 30 days of paying, ask and we refund the plan in full if we haven’t cleaned a site under it yet. If we have, we keep the price of a one-time cleanup ($199) and refund the rest, so a Basic plan isn’t refunded after a cleanup.
On a cleanup: a free re-cleanup
If the hack comes back within 30 days of delivery, through the same hole or any hole our hardening should have closed, we clean the same site again for free.
The cleanup guarantee doesn’t cover:
- a password that is shared or leaked after we finish,
- a pirated (“nulled”) plugin or theme installed again,
- undoing the updates and hardening we applied,
- a new vulnerability in a plugin, theme or service added after we finish.
On a plan these are cleaned too: every cleanup of the plan’s sites is included.
New: apps built with AI
Built it with Lovable, Bolt or Cursor? Make sure it’s safe to launch.
AI tools build fast and leave doors open: tables anyone can read, keys in the browser, payments that can be skipped. We test your app and its Supabase or Firebase backend, and send a written report with the fix for every hole.
App security audit$349
Written report within 72 hours. Nothing changed in your app.
- Supabase Row Level Security on every table and storage bucket
- Secret keys and API keys shipped to the browser
- Payments and webhooks that can be skipped or faked
- Sign-up, login and password-reset holes
Your access, sealed
Your passwords stay sealed
You share access only after paying, in your own case page. Never by email, chat or the order form.
Your browser seals it
The details are encrypted on your device, with a key only our team holds, before they’re sent.
The website can’t open it
It stores the sealed copy and nothing else. The key that opens it is kept offline, not on any server.
Deleted 7 days after your case closes
Even better: create a temporary user for us and delete it when we’re done.
On record
Rules we work by
- We back up your files and database, off your server, before we change anything.
- Every file we delete is recorded and listed in your report.
- We never change your passwords or keys without telling you in writing.
- We never install paid plugins or services in your name without asking.
- We delete your access details 7 days after your case closes.
Plain limits
What we don’t do
- Fix computers, phones or accounts
- We work on websites and web apps only, never on personal devices, email accounts or social media.
- Recover deleted data without a backup
- If data was deleted and no backup from before the hack exists, we can’t bring it back.
- Clean sites with illegal or pirated content
- Including sites that sell or share pirated plugins and themes.
- Phone or video calls
- Everything is in writing, so every finding and decision is on record and easy to share with your developer or host.
- Promise when Google lifts a warning
- We file the review request and follow it until the warning is gone. Google decides the timing; it’s usually 24 to 72 hours.
- Clean sites that aren’t WordPress
- Cleanups and plans are for WordPress, including WooCommerce stores. Apps built with AI tools have their own audit.
The team
Who does the work
SiteSafeAgain is a small team in Florianópolis, Brazil, with years of hands-on work running and securing WordPress and WooCommerce servers, and the web apps built on top of them. A person you can write to is responsible for your site from start to finish.
We work in writing only. Every finding, decision and change is on record, so you can go back to it and share it with your developer or your host.
Our hours, 8:00–22:00 Brazil time (UTC−3), cover the whole US business day and the European evening.
Questions
Questions, answered
Is a plan really the same as Sucuri’s?
Line by line: unlimited cleanups, a web application firewall with CDN and DDoS protection, full checks as often as Sucuri’s matching plan, blocklist monitoring and removal, HTTPS, and money back within 30 days. Our firewall runs on Cloudflare’s network, set up and managed by us on a Cloudflare account in your name, so it stays yours. The differences: we cost 30% less, and our cleanup start times count during our hands-on hours (8:00–22:00 Brazil time (UTC−3)), while Sucuri’s response times run around the clock.
I’m hacked right now. Plan or one-time cleanup?
Both clean the site. Basic ($159) costs less than a one-time cleanup, and every plan keeps protecting the site for a year; a plan’s cleanup starts within its time (12 hours on Basic, 6 on Pro, 2 on Business, counted during our hands-on hours). The one-time cleanup ($199) starts within 2 hours during our hours and is done within 24.
How fast will my site be clean?
Standard cleanups start within 2 hours during our hours and are done within 24 hours of receiving working access. Complex cases take up to 48 hours. If you order outside our hours, we start at 8:00 Brazil time (11:00 UTC).
Do plans renew automatically?
No. You pay once for the year. We remind you before it ends, and you decide whether to renew.
What if my cleanup turns out to be complex?
On a plan, nothing changes: every cleanup is included. On a one-time cleanup, a case is complex when there are several sites in one hosting account, the server itself is infected, the database is deeply infected, more than 5,000 files were changed, or part of the site has to be rebuilt. We tell you in writing after the diagnosis and before any cleanup; the difference is $150.
What do you need from me?
After payment: access to your hosting (control panel, SFTP or SSH) and, if you can, WordPress admin. For a plan’s firewall, access to your domain’s DNS. A temporary user that you delete afterwards is best. If we need anything else, we ask in writing.
Can you remove the Google warning?
We clean the site, then request a review from Google and the blocklists and follow up until the warning is gone. If the request has to come from your Google Search Console account, we tell you exactly what to click. Google decides the timing; it’s usually 24 to 72 hours after the request.
What if the hack comes back?
On a plan, we clean it again, as often as needed, for as long as the plan runs. After a one-time cleanup, we clean the same site again for free within 30 days if the attackers come back through the same hole or any hole our hardening should have closed.
How do I pay?
By card, on Stripe’s secure payment page, or with your PayPal account. Either way the payment goes through at once, so we can start right away, and we never see your card details.
The sooner we start, the less there is to clean.
We start within 2 hours during our hands-on hours, 8:00–22:00 Brazil time (UTC−3), every day. Or let us watch the site all year for $159.