Pricing
How much does a WordPress cleanup cost?
Cleanup of one confirmed WordPress installation and one clearly defined incident costs €699including VAT. Before you commission the work, we confirm in writing what is included. Any additional work requires a separate quote and your approval.
Fixed fee
€699 incl. VAT
Cleanup of a confirmed WordPress installation
For one WordPress installation and one clearly defined incident. The price includes baseline hardening, a data-exfiltration indicator review, functional testing, and a final report.
No additional costs without your prior approval.
What's included in the fixed price
These services are included in every fixed-fee job confirmed in advance:
- Baseline snapshot captured before any changes are made
- Controlled containment of the active incident
- File, database, user, and cron review
- Removal of detected malware, web shells, and persistence mechanisms
- Replacement of tampered WordPress core files
- Review and clean replacement of verifiable plugins and themes
- Check of uploads, cache, and backup directories for executable malicious code
- Review of suspicious administrators, sessions, and application passwords
- Rotation — or guidance for rotating — key WordPress secrets
- Indicator-based data-exfiltration review within the available data and logs
- Baseline WordPress and file-permission hardening
- Baseline blocks on PHP execution in unsuitable runtime directories
- Frontend, login, REST, and core functionality testing
- Checksum / integrity verification, where vendor data is available
- Plain-language final report covering findings, actions, limitations, and follow-up tasks
Not included in the fixed fee
These items are not part of the €699 fixed fee. If they apply to your case, you receive a separate quote before commissioning the work.
- Multiple websites or a WordPress multisite network
- A compromised operating system, root account, or entire hosting account
- DDoS mitigation and active, ongoing network-level attacks
- Extensive repair of custom-built plugins or themes
- Recovery of lost business or shop data
- Paid plugin, theme, CDN, or security licenses
- Cleanup of external email, registrar, cloud, or advertising accounts
- Legally admissible forensic reports and chain-of-custody evidence
- Data-protection or legal advice
- Extensive Google Ads, Merchant Center, or Search Console rehabilitation
- Server migrations or infrastructure rebuilds
- Cases where no trustworthy package source is available
Total price for consumers and businesses
What happens next
Frequently asked questions about pricing
How much does the cleanup cost?
Cleanup of one confirmed WordPress installation and one clearly defined incident costs €699 including VAT. Before you commission the work, we confirm in writing what is included. Any additional work requires a separate quote and your approval.
What's included in the fixed price?
Containment, removal of malware and persistence, account and database review, data-exfiltration indicator review, baseline hardening, functional testing, and a final report. The full list is on this page.
What happens if the incident is bigger than the fixed-price scope?
We explain which work falls outside the fixed fee and send you a separate quote. We do not carry out that work without your approval.
Does the fixed price cover multiple websites?
No. The fixed price covers one WordPress installation and one incident that has been confirmed in advance. Multiple websites or a WordPress multisite network are assessed separately.
Not sure whether your case fits the fixed price?
The free initial assessment clarifies that before anything is billed.
Request a free initial assessment