Pricing

Every price. Every SLA. In hours, in writing, before you pay.

Q: Why don't you offer refunds?

Because we publish everything a refund policy would hedge against: our prices, our SLAs in hours, our process, and the evidence standard we deliver to. You know exactly what you're engaging before you pay — and then we get it done.

Q: Why are you more expensive than the $199 cleanup services?

Those services run automated scanners and ticket queues; wherever they miss the entry point, the hack returns. You are paying for a senior engineer end-to-end, root-cause closure, and evidence you can hand your board or insurer. A repeat incident costs far more than the difference.

Q: Is the price really fixed?

Yes. Standard and Priority are flat for a single website regardless of how bad the infection turns out to be. Multi-server, multi-site and card-data incidents are scoped as Enterprise, in writing, before we start.

Q: What payment methods do you accept?

Card via Stripe at intake for Rescue engagements. Enterprise and Aftercare can run on invoice.

Q: Do you charge in my currency?

mywebsitehasbeenhacked.com charges in USD worldwide. Australian customers can use mywebsitehasbeenhacked.com.au, which prices and charges in AUD with Australian tax invoices.

Go and ask the market leaders what a cleanup costs and when they'll respond — you'll get a chat widget. Here is our entire price list.

Emergency response

Rescue engagements — one-time, fixed

Standard Rescue

$2,950 USD

Senior engineer responds < 1 hour, 24×7
Verified clean < 24 hours
Single website, any platform
Root cause found and closed
Evidence-grade proof pack

fixed price — complexity never changes it

Opening soon

Priority Rescue

$5,950 USD

Response < 15 minutes, 24×7
Engineer live on the incident < 2 hours
Verified clean < 12 hours
Front of the queue + direct engineer line
Everything in Standard

fixed price — complexity never changes it

Enterprise Incident

from $15,000 USD

Multi-server / multi-site estates
E-commerce & card-data incidents
Custom application forensics
Scoped and quoted in writing first

scoped individually, response < 15 min

Aftermath services

When the incident is bigger than the website

Data Leak Response

$4,950 USD · or $3,950 with any Rescue

Evidence-based exposure scoping
Dark-web & paste-site checks + 30-day watch
NDB / GDPR / US state clock mapping
Customer notification kit + rotation runbook

guidance, not legal advice — built to hand to your lawyer

Damage Control

$3,450 USD · or $2,450 with any Rescue

Google "site may be hacked" warning removal
Safe Browsing, AV & email blocklist delisting
Spam-SEO cleanup and de-indexing
Ranking recovery plan + customer comms kit

tracked to removal, documented throughout

Ongoing protection

Aftercare — monthly

Watch

$395 USD/mo

Daily malware & integrity scans
Blocklist & uptime monitoring
Immediate alerting

monthly · cancel with 30 days' notice

Shield

$795 USD/mo

Everything in Watch
Tuned web application firewall
Weekly patching + tested offsite backups

monthly · cancel with 30 days' notice

Guard

$1,495 USD/mo

Everything in Shield
Monthly senior review, in writing
Priority 24×7 line, front of queue

monthly · cancel with 30 days' notice

The terms, plainly

No refunds. Here's why that's a fair deal.

Everything a refund policy would protect you from, we publish up front: the exact price, the response SLA in hours, the process step by step, and the evidence standard we hand over. You are never buying a mystery. Engagements are fixed-price and non-refundable.

Who we're not for

If your budget is under $3,000, the volume cleanup market (Sucuri, SiteLock and similar) is the right tier for you — genuinely. If you're a regulated enterprise with a suspected nation-state incident, you need a DFIR firm, and we'll say so on the first call.

What the market charges

Volume cleanup subscriptions run $200–$500/year with ticket queues and no published SLAs. Enterprise DFIR runs $500–$1,500 per hour. We sit deliberately between: senior-only response at a fixed, published price.

Pricing questions

Why don't you offer refunds?

Because we publish everything a refund policy would hedge against: our prices, our SLAs in hours, our process, and the evidence standard we deliver to. You know exactly what you're engaging before you pay — and then we get it done.

Why are you more expensive than the $199 cleanup services?

Those services run automated scanners and ticket queues; wherever they miss the entry point, the hack returns. You are paying for a senior engineer end-to-end, root-cause closure, and evidence you can hand your board or insurer. A repeat incident costs far more than the difference.

Is the price really fixed?

Yes. Standard and Priority are flat for a single website regardless of how bad the infection turns out to be. Multi-server, multi-site and card-data incidents are scoped as Enterprise, in writing, before we start.

What payment methods do you accept?

Card via Stripe at intake for Rescue engagements. Enterprise and Aftercare can run on invoice.

Do you charge in my currency?

mywebsitehasbeenhacked.com charges in USD worldwide. Australian customers can use mywebsitehasbeenhacked.com.au, which prices and charges in AUD with Australian tax invoices.

Start my rescue