Your WordPress site got hacked. We'll clean it up
We remove the malware, shut out whoever got in and move the clean site to Hostney. $299 for one site, with the first year of hosting included. If we can't fix it, you get every cent back.
No renewal trap
Renews at the regular price
99.99%
Uptime, last 12 mo
Daily
Backups kept up to 30 days
210+
Tasks Ellie handles
In their words
What people say about hosting with us
“As a non-technical user who has had to stand up many web pages for projects [...] I was very pleasantly surprised with Hostney. The AI assistant Ellie was a tremendous help.”
“Hostney has been a great experience from the start. Anytime something comes up they're on it fast, no waiting around or getting bounced between support reps.”
“Amazing service! Company went above and beyond to help us get set up and functioning.”
“I host multiple websites with Hostney and the ease of management is what does it for me.”
“Hostney feels like the future. The entire process of setting up hosting was seamless, painless and quick.”
“Excellent, reliable service at reasonable prices.”
What you get
The cleanup, the move and a year of hosting
A person does this work and checks the result before you see it.
We find what changed
We compare WordPress, your plugins and your themes with the official copies from WordPress.org, and run the whole site through our malware scanners.
We take it out
Changed files are replaced with clean copies where those exist. Hidden scripts, spam pages and backdoors come out of the files and the database.
We shut out whoever got in
Accounts you didn't create are removed, every administrator gets a new password, and WordPress's secret keys are replaced, which signs everyone out.
We update what was out of date
WordPress, plugins and themes go to their current versions where one exists. If we can see how they got in, we tell you.
We move it to Hostney
You see the clean site on a preview address. Then we move it into your new Hostney account and stay with you through the DNS switch.
You get a year of hosting
A year of our Startup plan, with the firewall, bot protection, malware scanning and daily backups that come with it.
How it works
What happens after you send the form
You pay first, and if we can't fix it you get every cent back.
Hacked site rescue
For one WordPress site
Paid up front, refunded in full if we can't fix it
What's included:
The cleanup
- Malware removed from the files and the database
- Files checked against the official copies
- New passwords and secret keys
The move
- Your site moved to Hostney
- Help with the DNS switch
The first year
- A year of our Startup plan
- Firewall, bot protection and malware scanning
- Daily backups
Several sites? Tell us how many in the form and we'll quote them together.
If your site needs more room than Startup has, you pay only the difference.
How it goes
From your form to a clean site
You send the form
What you're seeing and what access you have. Within one business day we reply with a payment link. Please don't put passwords in the form.
You pay and give us access
You accept the terms when you pay, and then share your logins through a secure link we send you.
We clean it in our own environment
We copy the site over to us and work on the copy, so your current host stays as it is.
You get our answer
Either you see the clean site on a preview address, or we tell you why we can't fix it and refund every cent.
It goes live
We move the clean site into your new Hostney account, and your visitors move over when you say so.
Why you pay first:
A hack can't be judged from the outside. A site that looks fine can hide backdoors, and one that looks ruined can come down to a single file.
Before you decide
What we can't promise
A cleanup has limits, and you should hear them before you start.
WordPress only
This covers one standard WordPress site. We don't support Multisite on Hostney. On another platform? Ask first and we'll tell you if we can help.
The site moves to Hostney
We clean sites on our own platform and look after them there. We don't clean a site and leave it at its current host.
Paid plugins need your help
Paid plugins and themes have no public copy to compare against. We'll need the files or your license to reinstall them, or we'll agree on what to remove.
Abandoned plugins and themes
If the way in was a plugin or theme nobody maintains any more, and your site can't run without it on current WordPress and PHP, a cleanup won't last. It has to be replaced first, and that work isn't part of the rescue. If that's your site, we tell you why and refund you.
We can't bring back what's gone
We work only with the files and data we receive, and we don't recreate anything that's missing. If customer data was taken, we tell you what we can see. What you owe your customers is a question for you and your lawyer.
We don't deal with Google
Spam pages can stay in search results for weeks after they're gone, and a browser warning lifts only after Google reviews the site. You ask for that review yourself in Google Search Console.
The terms
How payment and refunds work
You accept these when you pay.
You pay first
$299 for one WordPress site, due before we start. A hack can't be judged from the outside, and checking it is most of the work.
If we can't fix it, you get every cent back
No strings attached. We tell you why, refund the full amount and delete our copy of your site.
You can cancel until you've given us access
Once we have your logins we've started, and you can't cancel. From then on, the refund above is the only one.
Once the site is clean, the payment is final
Clean means the malware we found is gone, your files match the official copies where those exist, and our scans come back clear. If our cleanup broke something, tell us within 30 days and we'll fix it from the data we received. We don't recreate anything that's missing.
The work stays with us until it is finished
We work in our own environment. You see the result on a preview address, and the site moves into your Hostney account when it is done.
The site has to be yours to hand over
You confirm that you own the site or that its owner has agreed. We don't take sites that hold health records or card data.
Start your rescue
Tell us what's happening
We reply within one business day with a payment link. Sending this doesn't commit you to anything.
While you wait
Three things to do now
These help whether or not you end up working with us.
Write down what you see
Take screenshots of what visitors get, any accounts you don't recognize and any message from your host. Please don't delete anything yet.
Change your passwords
WordPress administrators, your hosting account, FTP and the database. The guide below shows how to change the database password without breaking the site.
Take the site offline
A maintenance page stops visitors from landing on whatever the hack is serving. Your host can help, and the guide shows how.
Hacked site rescue
Send us the details
We'll reply within one business day. If we can't fix your site, you get every cent back.
Questions