SVC/EME
Hacked site cleanup
Triage, malware and backdoor removal, fixing the entry point and an incident report, with 7 days of follow-up.
- Price
- from BRL 900
- Timeline
- 24–72h
Malware removal · WordPress · Brazil
Is your WordPress site hacked? I clean it and bring it back online.
Malware, backdoor and Google spam removal, with a report of what happened and 7 days of follow-up. You know the scope and the price before you pay.
External triage, no password. Cleanup is quoted separately. On WhatsApp, just send the domain and the symptom.
Agency? See the white-label partnership
- Timeline
- 24–72h
- Price
- from BRL 900
- Response
- same business day
The person cleaning your site is the person doing the research: an independent researcher with CVEs reported in WordPress plugins, no outsourced support.
Quick triage
Does your site show any of these signs?
- Redirects to another site or shows strange ads
- Spam (pills, casino, Japanese text) shows up on Google
- The browser warns “dangerous site” or “deceptive site”
- Admin users, plugins or files you did not create
- Suddenly down, throwing 500 errors or very slow
More than one? Send me the site link.
Send the link on WhatsAppHow it works
From first message to a clean site in 3 steps.
- 01
You send me the link
On WhatsApp, with what is going on. No form and no bot.
- 02
I confirm and quote
I check the problem, define the scope and give you the price before starting. If it's not a fit, I'll say so.
- 03
I clean, harden and deliver
I remove the malware and backdoors, close the hole and hand over a report with 7 days of follow-up.
Services
Clean it now. Prevent it next time.
Scope, timeline and deliverable in writing before we start. No generic package.
SVC/MAN
Monthly maintenance
Updates with backups, monitoring, malware scans and fast response, so the site doesn't get hacked again.
- Price
- from BRL 150/month
- Timeline
- ongoing
Blog
Guides for WordPress owners
Step-by-step help to spot, understand and fix security problems on your site.
7 min read
How to remove malware from WordPress, step by step
A practical WordPress malware cleanup guide covering backups, core files, plugins, database checks, hidden access and validation with WP-CLI.
- Guides
- Malware
- Incident response
7 min read
My WordPress site was hacked: what to do right now
Found malware, strange redirects or a warning on your WordPress site? Here's what to preserve, how to contain the damage and what to do next.
- Guides
- Malware
- Incident response
6 min read
Japanese keyword spam on WordPress: how to remove it
Seeing Japanese search results for pages you never created? Learn how to check WordPress for SEO spam, remove the infection and recover in Google.
- Google spam
- Malware
Why me
The person who cleans your site also finds plugin flaws.
Two public advisories I reported. Understanding how a plugin gets exploited helps find where the attacker got in and close the door.
CVE-2026-103912 (opens in a new tab)
CVSS 4.7 JetFormBuilder · Reflected DOM XSS
- Affected
- <= 3.6.6
- Fixed
- 3.6.6.1
- Advisory
- Wordfence
- Credit
- Zenith-sec
CVE-2026-62061 (opens in a new tab)
CVSS 5.3 ProfileGrid · IDOR (CWE-639)
- Affected
- <= 6.0.0.2
- Fixed
- 6.0.0.3
- Advisory
- Patchstack
- Credit
- Zenith
Next step
A hacked site doesn't fix itself.
Start with the free diagnosis. Send me the site link. I tell you what is visible from the outside and whether it makes sense to go further.