Hacked WordPress site? Cleaned up, then made harder to break into.
If your WordPress site is redirecting visitors, showing pages you didn't write, or flagged by Google, I find what was changed, remove it, close the way in where I can find it, and get the site back in order.
Urgent? Call 0404 003 240 · jarek@layerops.tech
- Clean-up
- From $690; a fixed quote after a free 15-minute assessment
- Hardening check
- $390, flat
- I need
- Your hosting and WordPress admin access, and your written authorisation
AI and WordPress security in 62 seconds
Read the transcript
Is your website one plugin update away from a problem?
Australia's cyber agency says AI is helping attackers work faster and at scale, including more convincing phishing emails.
On WordPress, the most heavily attacked flaws were first exploited about five hours after they went public.
So the basics matter more than ever: updates, strong logins, backups, and properly set-up email.
Start free. Our WordPress vulnerabilities page is updated weekly.
Want it checked? The hardening check covers updates, logins and backups. A$390, flat.
Already hacked? Book a free 15-minute assessment. Clean-up is from A$690, on a fixed quote.
Website form sending through Microsoft 365 with just a password? That changes in December. The email sending fix is A$490.
No one can promise a site can't be hacked. But a patched site is much harder to break into.
LayerOps. Check it free, then fix it for a fixed price.
Sources: ASD's ACSC Annual Cyber Threat Report 2024–25, pp.10 and 34; Patchstack, State of WordPress Security in 2026. Scenes and voice are AI-generated; the vulnerabilities page shown is a real capture (Wordfence data as of 23 Oct 2026).
Hacked site clean-up, from $690
The price depends on how badly the site is compromised and on what access and backups your host has. After a free 15-minute assessment you get a fixed quote in writing, before any work starts. A very badly compromised site can cost more to clean than to rebuild; if so, I'll quote a rebuild instead and say why.
- (01)
Copy first
A full copy of the site as it is, so nothing is lost and there is a record of what was found. - (02)
Find and remove
Changed or added files, injected code, unknown admin accounts and spam pages found and removed. WordPress core, plugins and themes replaced with clean copies from their official sources. - (03)
Lock the doors
Passwords and security keys reset, unused plugins and themes removed, and everything updated. - (04)
Google
If Google has flagged the site, I check the Security issues report in Search Console and request a review once it's clean. - (05)
A short report
What was found, what was done, the likely way in where it can be found, and what to change so it doesn't happen the same way again.
WordPress hardening check, $390
For a site that hasn't been hacked and you'd like to keep it that way. A flat price.
- Updates and known vulnerabilities. WordPress, plugins and themes checked against published vulnerabilities, like the ones counted on our monthly WordPress vulnerabilities page.
- Plugins and themes. Which ones are unused, abandoned or no longer updated.
- Accounts and logins. Who has admin access, whether two-factor sign-in is on, and how the login page is protected.
- Backups. Whether backups exist, where they're kept, and whether one can actually be restored.
- Hosting basics. PHP version, file permissions and security headers.
- A written fix list. Ranked by risk, in plain English. Fix it yourself, have your developer do it, or ask me for a fixed quote.
Questions
What do you need from me?
Access to your hosting account and your WordPress admin, and your written authorisation to work on the site. I only work on sites where the owner, or someone the owner authorises in writing, asks me to.
Can you make sure it never happens again?
No one can promise that a site can't be compromised again. A clean, updated site with fewer plugins, strong logins and working backups is much harder to break into and much quicker to recover.
What about after?
Keeping WordPress patched is ongoing work. Website management is $99 a month. If you'd rather have less to patch at all, see why static sites on Cloudflare have less to patch. The basics that keep a site safe, and why AI makes them matter more: AI and website security. Running PHP 8.2 or older? See the PHP upgrade.
Who does the work?
Me, Jarek Piotrowski. 0404 003 240 · jarek@layerops.tech
No GST charged. See all prices.
Site hacked? Start with a free 15-minute assessment.
Clean-up from $690 on a fixed quote; the hardening check is $390. Book a call, or leave your number and I'll call you.
Or call 0404 003 240 jarek@layerops.tech. I reply within one business day.