Active WordPress incident? Initial assessment within 4 hours. (Mon–Fri 8am–8pm, Sat 9am–2pm (CET/CEST))

Request a free initial assessmentWhatsApp
WP Notdienst
Menu
DERequest a free initial assessment

Guarantee

Guarantee Terms

Concept draft — legal review required

These terms are a concept draft and must be reviewed by legal counsel before publication and before use in binding contract documents. TODO(legal).

If the same website is infected with malware again within 6 months of documented sign-off, we will clean it again within the originally agreed scope at no additional labor cost — provided the conditions below have been met. This guarantee is aremediation guarantee, not a promise that a repeat compromise is impossible.

Conditions

  1. The guarantee begins on the date of documented customer sign-off for the cleanup.
  2. It applies to the same WordPress installation and the same domain the cleanup was performed for.
  3. The minimum security measures marked as mandatory at the time of engagement were implemented and remain active.
  4. Critical security updates for WordPress core, plugins, and themes are not deliberately deferred by the customer.
  5. No nulled, cracked, or otherwise untrustworthy plugins, themes, or packages are installed.
  6. Any plugins, themes, or custom code added after the cleanup must come from traceable, reputable sources.
  7. Credentials and secrets (passwords, API keys, salts) are rotated as recommended in the closing report.
  8. The customer notifies us promptly when new suspicious signs appear, instead of attempting fixes independently or waiting.
  9. The guarantee covers renewed remediation work within the originally agreed scope. It does not automatically cover data reconstruction, third-party fees (e.g. hosting, third-party plugins), or a full server rebuild.
  10. Compromises originating from external systems (e.g. email account, registrar, hosting control panel, or the customer’s own devices) are handled separately and are outside the scope of this guarantee.
  11. DDoS attacks, social engineering incidents, and incidents on systems unrelated to the website are excluded from the guarantee.

Guiding principle

These conditions must not make the guarantee effectively worthless. That is why a minimum level of hardening is already built into the fixed-price scope — the obligations above are meant to secure fair, realistic prerequisites, not to create a pretext for blanket denial.

For the full scope of services, see Pricing and the guarantee overview.