Most sites are clean within [2-3] hours after we get access. Large or heavily infected sites, WooCommerce stores and server-level infections can take longer. In that case we give you a clear time estimate together with the quote, before any work starts. 

Blacklist removal is the only part that does not depend on us. We send the review request to Google the same day the site is clean; Google usually processes it within a few days. 

No. We clean WordPress sites on any hosting: shared hosting, VPS, dedicated servers or managed WordPress. 

If your site runs on RootHosts servers, we can also protect the server itself, with a firewall, DDoS filtering, monitoring and Imunify360 real-time malware protection. Moving to us is optional, never a condition. 

Usually three things: a WordPress administrator account, file access (SFTP, SSH or your hosting control panel such as cPanel, Plesk or DirectAdmin) and database access (phpMyAdmin or database credentials). 

We recommend creating separate, temporary accounts for us instead of sharing your own passwords. You can delete them as soon as the work is done, and we rotate all passwords at the end of the cleanup anyway. 

If you are not sure how to create these accounts, we walk you through it. 

No. Before we change anything, we make a full backup of your files and database. We remove only malicious code, spam pages and rogue users; your posts, pages, products, orders and settings stay as they are. 

Cleaning usually helps your SEO. We remove the spam pages Google indexed, request the blacklist review and, if you give us access to Google Search Console, help you remove the spam URLs from search results. Rankings lost because of the hack usually recover once Google re-crawls the clean site, but the exact timing depends on Google. 

Every cleanup comes with a 7-day re-infection guarantee. If the same infection comes back within 7 days, we clean it again for free. 

With the Clean + Protection plan you are covered for as long as you are subscribed: if the site is ever hacked again, the cleanup is free. 

Because we find and close the entry point, re-infection is rare. Most repeat hacks we see elsewhere happen because only the visible malware was removed, not the backdoor or the hole it came through. 

You approve a fixed price before we start. You pay 50% to start the work and the remaining 50% only when the site is clean and you have checked it. 

We accept [Bank transfer, Revolut, Wise, PayPal, card payments] 

and issue an invoice for every payment. The Clean + Protection plan is billed monthly and you can cancel at any time. 

Both. We scan the site with Imunify360, a professional server-level security suite that detects and cleans known malware automatically. Then our engineers check the files, database and logs by hand, because new and custom backdoors are often not in any scanner database yet. 

Tools find the known infections fast; manual work finds what tools miss and the hole the attacker used. 

Yes. Hacked sites are often used to send spam through hidden mailer scripts or stolen email accounts. We find and remove the scripts, secure the mail accounts, stop the outgoing spam and request removal of your domain and IP from spam blacklists such as Spamhaus. 

We also check SPF, DKIM and DMARC records, so your legitimate emails reach the inbox again. 

Yes. We access your site only for the agreed work, never copy or share your content or customer data, and we can sign an NDA if you need one. After the cleanup all access you gave us can be removed. 

Yes. Most providers re-enable the account temporarily or give file access for the cleanup. We clean the site and give you a cleanup report you can send to your provider to get the account fully restored.