Cleanup when something goes wrong, investigation when you need to know what happened, hardening and monitoring so it does not happen again.
Hacked, redirecting or blacklisted site. Manual cleanup of files and database, with a written report.
€220 · excl. VATCleaned elsewhere and reinfected. We find what the cleanup missed, in cron, database, server, accounts, credentials, and close the door. Cleanup included.
from €590 · excl. VATWhat happened, since when, from where. Timeline, indicators, cleanup and a report for management or your host.
from €790 · excl. VATA defined list of measures, applied and verified one by one, with a verification report.
€300 · excl. VATWeekly checks, updates with backup, monthly report and cleanup included. Three plans, no minimum term.
from €35 / month · excl. VATMalware across accounts, unknown processes, spam from your IP. Cleanup, hardening and server antivirus. cPanel, Plesk, DirectAdmin.
from €390 · excl. VATThe same order on every job, whether it is a small WordPress site or a server with dozens of accounts. At every step you know what is happening to your site, and nothing is deleted without a copy.
Through the contact form, with the site address. We reply by email.
Fixed where the list says fixed. "From" prices become an exact figure before we start.
Manual work on files, database and server. Second pass and external check.
What was found, where, what was removed, and what is left for you to decide.
Three monthly plans per site: Monitoring from €35, Protection €75 with updates and one cleanup a year, Response €150 with unlimited cleanups and a 4 business hour response. No minimum term. Prices exclude VAT 24%.
Technical write-ups from real incidents, without client names.
An attacker logged in to wp-admin with a real password, installed a web terminal and hid a four-function JS loader in an active plugin. How it works, how to find it.
Read Article
CVE-2026-123158 dissected: why OpenSSH on Alpine/musl accepts any 257-1024 byte password for '*' accounts, a lab demo video, read-only checks and the fix.
Read Article
A WordPress backdoor in wp_options that runs only RSA-signed commands, pulls its C2 list from other hacked sites and hides in wp-admin. How it works and how to find it.
Read ArticleKKAA Solutions is a specialised cybersecurity and website malware remediation company based in Athens, Greece. We work only on malware in websites and web servers: cleanup, investigation, hardening and monitoring. We do not build sites, sell hosting or resell security products, so when we tell you what we found and what is needed, there is no other motive behind the recommendation.
We work with site owners, online shops, agencies and hosting providers in Greece and worldwide, in English and Greek.
Partner rates per incident, monthly retainer, reports under your own brand and a direct channel to the analyst.
Verified client feedback — submitted through our client portal after case completion.
Dealing with a hacked website? Get help now, or see the published prices first.
Send us the site address and what you see. We reply by email with the service that fits and the price, before anything starts.
