Cleanup when something goes wrong, investigation when you need to know what happened, hardening and monitoring so it does not happen again.
Hacked, redirecting or blacklisted site. Manual cleanup of files and database, with a written report.
€220 · excl. VATCleaned elsewhere and reinfected. We find what the cleanup missed, in cron, database, server, accounts, credentials, and close the door. Cleanup included.
from €590 · excl. VATWhat happened, since when, from where. Timeline, indicators, cleanup and a report for management or your host.
from €790 · excl. VATA defined list of measures, applied and verified one by one, with a verification report.
€300 · excl. VATWeekly checks, updates with backup, monthly report and cleanup included. Three plans, no minimum term.
from €35 / month · excl. VATMalware across accounts, unknown processes, spam from your IP. Cleanup, hardening and server antivirus. cPanel, Plesk, DirectAdmin.
from €390 · excl. VATThe same order on every job, whether it is a small WordPress site or a server with dozens of accounts. At every step you know what is happening to your site, and nothing is deleted without a copy.
Through the contact form, with the site address. We reply by email.
Fixed where the list says fixed. "From" prices become an exact figure before we start.
Manual work on files, database and server. Second pass and external check.
What was found, where, what was removed, and what is left for you to decide.
Three monthly plans per site: Monitoring from €35, Protection €75 with updates and one cleanup a year, Response €150 with unlimited cleanups and a 4 business hour response. No minimum term. Prices exclude VAT 24%.
Technical write-ups from real incidents, without client names.
A Node.js loader hidden in package.json and in Tailwind, PostCSS and ESLint configs after 1,000 spaces. It finds its C2 in an Ethereum transaction. Detection and cleanup.
Read Article
WP-CLI said the cron events were deleted. Three seconds later they were back. How a mismatched md5 key makes WordPress cron events undeletable, and the safe fix.
Read Article
263 spam posts published with a stolen admin password, 147 hiding a fake CAPTCHA that pulls its payload from an Ethereum contract. Full dissection and read-only checks.
Read ArticleKKAA Solutions is a specialised cybersecurity and website malware remediation company based in Athens, Greece. We work only on malware in websites and web servers: cleanup, investigation, hardening and monitoring. We do not build sites, sell hosting or resell security products, so when we tell you what we found and what is needed, there is no other motive behind the recommendation.
We work with site owners, online shops, agencies and hosting providers in Greece and worldwide, in English and Greek.
Partner rates per incident, monthly retainer, reports under your own brand and a direct channel to the analyst.
Verified client feedback — submitted through our client portal after case completion.
Dealing with a hacked website? Get help now, or see the published prices first.
Send us the site address and what you see. We reply by email with the service that fits and the price, before anything starts.
