The count above comes from our register and updates when a claim is confirmed. When all 50 are claimed, the standard prices at the bottom of this page apply.
What the hack is doing to your business
Someone broke into your WordPress site and moved in. The intruder is not after your site itself; they are renting out your good name. While it sits there, this is what it can do:
- Send your visitors to spam. Injected pages and links point to online casinos, betting sites, and pill shops, using your domain to look real.
- Hide from you. Many hacks show the spam only to search engines and to visitors arriving from search. You see your normal site. Your customers see the trap.
- Trigger Google warnings. Google can flag a hacked site with a warning that visitors read before they ever reach you, and hacked pages can drag your real pages down in search results.
- Get your domain listed. Public blocklists can add a hacked domain, which can also start hurting your email.
- Come back. Most hacks leave a hidden back door. Deleting the visible spam without closing the way in buys you days, not safety.
Every week it sits there, it spends trust you took years to earn. The fix is not panic, and it is not a mystery price. It is a procedure, and it starts with proof.
Step one is free: the evidence check
Before any talk of cleaning, we look at your site the way your visitors and Google see it, and we write down exactly what we find in plain words: the injected pages and links, the warnings, the listings. That evidence report is free, and it is yours to keep whatever you decide.
If you want the deeper look, the full audit is C$75. It goes inside the site once you give access, and the full C$75 is credited toward your cleanup if you go ahead. If the evidence shows your site is not hacked, the report says that too, and you owe nothing.
What we do, step by step
- You pay, protected. The flat price is paid in full before work begins. If we cannot clean your site, that payment is refunded in full, automatically. That refund, and the 90 day guarantee in the terms below, stand behind the job.
- Backup first. A full backup of your site as it stands, before anything is touched. Nothing is deleted until the safety copy exists.
- We clean. The malware, the spam pages and links, the fake accounts, and the hidden back doors all come out.
- We close the way in. The door they used, usually an outdated plugin, a weak password, or exposed files, gets shut. A cleanup that skips this step is a countdown to the next hack.
- We harden the site. Updates, settings, and protections put right, so the same trick does not work twice.
- We file the removal requests. If your domain landed on a public blocklist or carries a Google warning, we submit the reviews that get it cleared.
- You get the proof report. What was found, what was removed, what was closed, in plain words, with a clean backup of your site. It is the written record of the work you paid for.
The Founders Fifty terms
Cleanup, flat
- Paid in full before work begins
- If we cannot clean it, refunded in full, automatically
- No hourly billing and no surprise charges: the price you see is the price you pay
- 90 day guarantee: hacked again within 90 days and we clean it again free
- Protection locked at CA$399 a year for life: monitoring, updates, backups, and free re-cleans (the standard bundle is CA$999 a year)
- Your spot is numbered and recorded in our register: spot 7 of 50, for example, printed on your proof report
Standard cleanup price after the 50: CA$399
Straight talk, before you decide
We are new to cleanup work, and this page will not pretend otherwise. Our cleanup procedure has been run end to end in a full rehearsal: a test WordPress site was infected with 19 planted attack artifacts, and every one of them was found, removed, and verified gone. The full rehearsal record is kept, mistakes and all, and we will share it on request.
What we have not done yet is clean a paying customer's site. That is exactly why the Founders Fifty exists, and why its terms are built the way they are: you pay in full before we start, and if we cannot clean your site, that payment is refunded in full, automatically. The guarantee runs 90 days. You risk nothing on a job we cannot finish.
A big or complex site, such as a large WooCommerce store, is quoted flat in writing before any work starts. The quote is the price. There is no hourly meter and no surprise bill, and if you say no to the quote, you owe nothing.
Why the price is lower
This special price is an exchange, and here is our side of it, in the open. After your rescue, we ask for two things: a short review of the work, and your permission to publish your rescue as an anonymized case file, so the next owner can see what a cleanup actually looks like. Your business is named in a case file only if you say yes in writing. Nothing about your site, your customers, or your business is ever shared beyond that.
After the Founders Fifty
When the register reaches 50 claimed, these standard prices apply to everyone:
- Cleanup: CA$399 flat for one WordPress site
- Cleanup plus 12 months of protection: CA$999 a year
- Emergency start: CA$599 flat
The free evidence check stays free either way.
Once it is clean, keep it that way: Website Protection is the sister service that fixes the flaws that let the hackers in and watches for the next one. Founders keep it at CA$399 a year for life.
You come out of it knowing your site the way you know your own premises: what is inside it, what was taken out, and what to watch from here. That stays yours.
Questions owners ask
What access do you need?
WordPress admin access, plus hosting or file access. We tell you exactly what we need before we start. Passwords move only through the secure route we set up with you, never by plain email, and when the job is done we walk you through changing every password we touched.
Will my site go down during the cleanup?
In most cases your site stays up while we work. If a short maintenance window is the safer route, we agree the time with you first. There are no surprises in the middle of your business day.
How long does a cleanup take?
Most standard sites are verified clean within 24 to 48 hours of access. You judge the job by the proof report, not by the clock.
What if my site is a big store?
A large WooCommerce store or a complex site is quoted flat in writing before any work. The quote is the final price. If you decline it, you owe nothing. One honest boundary: if a hack reached payment card data, that is a bank and legal matter, not a cleanup. If we see signs of it, we tell you at once and stop, so you can bring in the right people.
What if you cannot clean it?
Then your payment is refunded in full, automatically. You keep the evidence report, the backup, and a plain written note of what we found and what a rebuild would involve. A rebuild is quoted flat, in writing, and only if you ask for one.
What does the 90 day guarantee cover?
If your site is hacked again within 90 days of your cleanup, we clean it again at no charge. On the protection plan, re-cleans are free for as long as the plan runs, at the locked CA$399 a year.
Is French service available?
Yes. The check, the cleanup, and your proof report are available in English and in French. Service en français disponible.
How do I get the special price?
Ask for the free evidence check below. If one of the 50 spots is still open when you accept the cleanup, the CA$299 price and the locked CA$399 protection rate are yours, and both are recorded on your proof report.
Start with the evidence. It is free, it is in plain words, and it is yours to keep.
Get the free evidence checkIn the form, choose "I think my site may already be compromised" and describe what you are seeing. We reply within 1 business day. Prefer email? Write to support@kollaztoolz.com.