Where creative ideas grow · Building and maintaining websites since 2018, from Rajshahi, Bangladeshinfo@mahatosoft.com
Security

Hacked site recovery & security setup

Malware and injected scripts removed, backdoors closed, credentials rotated, blacklist removal requested — then firewall, backup and update rules put in place so it does not recur.

$120 – $650

Price range

1–3 days

Typical delivery

Unlimited

Revisions in scope

yourbrand.com — security scanclean

Scanned

4,812 files

Removed

17 threats

Locked

Firewall on

backdoor found: /wp-content/uploads/.x.php

salts rotated · 2FA enforced · blacklist cleared

Filing Google review request

Pricing

Choose a package

Fixed price, fixed scope, and unlimited revisions within it. Not sure which fits? Send the brief and we will tell you honestly — including when the cheaper tier is enough.

Go to checkout

Silver

Clean-up

$120

  • Malware scan and removal
  • Rogue admin account removal
  • Delivery within 1 day
  • Password and salt rotation
  • Basic hardening
Choose Silver
Most chosen

Gold

Clean-up & hardening

$320

  • Everything in Silver
  • Backdoor hunt across all files
  • Firewall and login protection
  • Two-factor authentication setup
  • Offsite backup schedule
  • Delivery within 2 days
  • Written incident report
Order Gold

Platinum

Full recovery

$650

  • Everything in Gold
  • Database-level clean and repair
  • Google blacklist removal filed and tracked
  • Server and hosting review
  • Delivery within 3 days
  • 30 days of monitoring
  • One month of care plan included
Choose Platinum

Fixed price, written first

The scope and the number are agreed before anything starts. No surprise invoices.

Unlimited revisions in scope

We keep going until it matches what we agreed, at no extra cost.

Money-back challenge

If we cannot deliver what was agreed, you get your money back. Policy since 2018.

You own everything

Files, credentials and code are yours on final payment, with a handover document.

How we approach it

Malware removed, backdoors closed, and the door locked so it does not happen twice.

A cleaned site that keeps its original weakness gets reinfected within weeks. So recovery here is two jobs: remove what is there, then close what let it in.

We work from a copy first, so your live site is never left half-cleaned. You get an incident report naming the entry point, the files that were modified and the dates involved — which matters if you have to tell customers anything.

Where Google has flagged the domain, we file the review request and monitor it until the warning clears.

What every package includes

Full malware and injected-script scan
Backdoor and rogue admin account removal
Credential, salt and API key rotation
Google blacklist review request
Firewall and login protection setup
Two-factor authentication for admins
Offsite backup schedule
Written incident report

Common questions

Usually yes, from backups or from the server files directly. Message us on WhatsApp with “emergency” rather than using the form; those jump the queue at any hour.

Free 15-minute consultation

Let’s scope your project properly.

Tell us what you need built or fixed. You get an approach, a timeline and a fixed price — usually within a few hours.

Start a projectEmergency support