Has your WordPress site been hacked?
I clean it and close every door the attackers used, so it doesn’t happen again. And if your site is so outdated that nobody dares to update it, I bring it up to date without losing content.
Full cleanup fromUSD 130
Free diagnosis within one business day.
Get your free diagnosisI’m Diego Antonio Del Greco. Since 2023 I’ve recovered and secured more than 25 WordPress sites in production.
Your Company
https://yourcompany.com › services
Online casino | No deposit bonus | Free slots
This site may be hacked.
激安 ブランド コピー 財布 通販… Play now and cash out instantly.
Does any of this sound familiar?
If your site was hacked
- Visitors end up on a casino or pharmacy page instead of yours.
- Google shows “This site may be hacked” under your site.
- Chrome warns that the site is dangerous, or someone told you it has a virus.
- Your hosting provider found malware or suspended your account.
- Pages or text nobody wrote are showing up, sometimes in Japanese.
- The site is down or shows a blank page.
- You already cleaned it and it came back a few days later.
If your site is outdated
- WordPress, plugins or PHP haven’t been updated in years.
- The dashboard is full of update notices nobody dares to touch.
- You’re afraid to update because “everything breaks”.
- Your hosting provider is asking you to upgrade PHP.
- Whoever built the site is gone and nobody knows how it’s put together.
Either way, I start the same: a free diagnosis and the final price before I touch anything. Tell me what’s happening with your site.
How I work
I follow the same order on every site so nothing gets left out.
Free diagnosis
I review the site and tell you what’s wrong, how the attackers may have got in and what it costs to fix. Before I start, you get the final price and timeline.
Backup and cleanup
Before touching anything, I make a full copy of the files and database. Then I remove the malware: the infected files and the injected code.
Closing every way back in
I track down every way the attacker could come back: fake plugins, files that load on their own, hidden administrators and compromised passwords. Then I apply my own 9-point hardening protocol.
Updates in the right order
I update WordPress, plugins and PHP in an order that keeps the site from breaking, and check that everything works after each step.
Blocklist removal and guarantee
I request a review from Google and notify your hosting provider so the warnings come down. The work comes with a 30-day guarantee. If you want, I can keep looking after the site with monthly maintenance.
Full cleanup
fromUSD 130
The diagnosis is free. I confirm the final price after reviewing the site and before starting.
Get your free diagnosisIncludes
- Diagnosis
- Malware removal
- Closing every way back in
- Hardening with my 9-point protocol
- Removal from Google and hosting blocklists
- 30-day guarantee
It can cost more if
- The site got reinfected and has several backdoors.
- WordPress, plugins or PHP also need updating from very old versions.
Not included
Monthly maintenance after the rescue, which is optional and billed separately.
The site that kept getting reinfected
A site kept getting infected again after being cleaned. I went through the whole server, including the files that looked clean, and found four different ways the attacker could get back in.
- your server
- wp-content
- pluginsA
- mu-pluginsB
- database
- wp_usersC
- credentialsD
- A
Fake plugins. Malicious code dressed up as a plugin.
- B
Files in mu-plugins. WordPress always loads them and they can’t be disabled from the dashboard.
- C
Hidden administrators. Users with full permissions that don’t show up in the user list.
- D
Compromised credentials. With a stolen password, the attacker can walk back in even if the site is clean.
Close only one and any of the other three brings the malware back. That’s why I close all four before calling a site recovered.
I’ve also found backdoors hidden inside images in the /uploads folder: files that look like photos but contain code.
Who does the work
I’m Diego Antonio Del Greco, a developer based in Bahía Blanca, Argentina, and I work remotely. Since 2023 I’ve been recovering and securing WordPress sites in production, and I’ve cleaned and hardened more than 25 of them.
A web agency hands me the security of its corporate clients, which include industrial and port companies. I also work directly with clients such as a professional association.
Monthly maintenance
After the cleanup, I can keep looking after your site so no new threat shows up. WordPress and plugins release security updates all the time, and a site nobody updates becomes exposed again.
It’s optional and billed separately.
Ask me about maintenanceUpdates in the right order
WordPress, plugins and PHP kept up to date, with a backup before each change and a check afterwards.
Security review
I review the site every month to catch anything odd early.
Someone who already knows your site
If something breaks, you don’t start from scratch with someone new.
For agencies
When one of your clients shows up with a hacked site, hand it over to me. I do the same work under your brand.
Get in touch to set it upWhite label
Your client talks to you, and I stay out of sight.
Response times in writing
You know when I’ll respond, so you can commit to your client.
The same service
Diagnosis, cleanup, closing every way back in, hardening and guarantee, just like a direct job.
I already work this way
Today a web agency hands me the security of its corporate clients’ sites.
Questions
Will I lose content?
No. Before touching anything I make a full copy of the files and database. I only remove the malicious code, and your pages and images stay as they were.
How long does it take?
You get the diagnosis within one business day. The cleanup depends on what I find, so you get the timeline together with the price, before I start.
Do you need my passwords?
Yes, I need access to your hosting and to the WordPress dashboard. Send them through a private channel. When I’m done, you change them, because compromised credentials are one of the ways attackers get back in.
Why can it cost more than USD 130?
USD 130 is the floor for a full cleanup. A reinfection with several backdoors takes more work, and so does a site that also needs updating from very old versions of WordPress, plugins or PHP. The diagnosis is free, so you know the final price before you decide.
Is the work guaranteed?
Yes, for 30 days. And if you want someone to keep looking after the site afterwards, I offer monthly maintenance.
Do you work remotely?
Yes. I’m based in Bahía Blanca, Argentina, and work with sites anywhere.
Tell me what’s happening with your site
The diagnosis is free and you’ll have it within one business day.
Send it by WhatsApp or by email, whichever suits you.