Process
How we clean up your WordPress site, step by step
We review your request within 4 hours during our service hours and reply through your chosen contact channel. If access is required, we agree a secure handover method with you. Cleanup starts only after we have confirmed the scope and price in writing and you have approved the work.
What happens after you contact us
Before commissioning the work, you know what information we need, what the cleanup covers, and what it will cost.
- 01You send us the site URL, your contact details, and a short description of the problem.
- 02You immediately receive a reference number and guidance on preserving available evidence.
- 03We review your information and respond personally within 4 hours with an initial assessment.
- 04If access is needed, we agree a secure handover method with you.
- 05We confirm the scope, fixed price, and expected timeframe.
- 06Once you approve the work, we preserve the initial state and begin the cleanup.
- 07At handover, you receive the cleaned site, a report, and specific recommendations for ongoing operation.
Cleanup
What happens during the cleanup
Preserve the initial state
Threat identifiedWe create a backup, preserve available logs, and limit immediate impact.
Remove malicious code
Cleanup in progressWe remove malware, close persistence paths, and replace modified components from trusted sources.
Assess cause and scope
Impact containedWe review accounts, database records, scheduled tasks, and available logs for further traces and possible data-exfiltration indicators.
Test and hand over
VerifiedWe harden the installation, test key functions, and document findings, changes, and remaining limitations.
How to hand over credentials securely
We only need credentials after the initial assessment and confirm the handover method separately. The first-contact form, plain email, and WhatsApp are not suitable for this:
- Wait until we have confirmed the handover method before sending credentials
- Share only the access required for the agreed work
- Do not use plain email, WhatsApp, or the inquiry form for credential handover
- Change passwords, keys, and tokens again after the work is complete
Site affected? We assess it for free.
More on scope and price
Frequently asked questions about the process
How long does the whole cleanup take?
It depends on the scope of the incident. After the personal initial assessment, we give you a realistic timeframe before you commission the work — not only afterward.
What does "initial assessment within four hours" mean?
We review your information within four hours during our service hours and reply through your chosen contact channel. The four-hour window applies to the initial assessment, not the completed cleanup.
Do I need to send passwords or access in the first step?
No. The first-contact form and WhatsApp are only for the site URL and a description of the symptoms. If access is required later, we confirm the secure handover method separately.
What happens if I don't approve the fixed-price quote?
The initial assessment is non-binding. Billable cleanup work only starts once you explicitly approve the fixed price or a separate quote.