Frequently asked questions about WebIntacta

It is the website security service of Jose Soriano, a PrestaShop and WordPress developer in Ibi (Alicante, Spain). It offers a free external scan, a security report in PDF, hacked website cleanup with a 90-day guarantee and maintenance with no lock-in, for small businesses and online stores worldwide, remotely. How each step fits together, in how it works.

A WordPress site, €219; a PrestaShop or WooCommerce store, €349; other CMSs or custom PHP, from €390 with a fixed quote after the analysis. With priority over other work, +€80 on WordPress and +€100 on a store. Prices excluding VAT; outside the EU, the WordPress cleanup is $219. Details in hacked website repair.

Yes, and there is nothing to sign up for. It checks from the outside what anyone can see of your website (versions with published vulnerabilities, exposed files, HTTPS, headers, domain email and blacklists) and gives a score from 0 to 100. It installs nothing and does not try passwords. Try it with the free website security scan.

The scan looks at the website from the outside; the report checks it from the inside with a read-only connector: core integrity file by file, malware, plugins or modules with known vulnerabilities, users and configuration, with a PDF that we then go through together by email or chat. It costs €129 for a website and €169 for a store, and it is deducted if you order a cleanup or maintenance within 30 days. More in website security audit.

The external scan is free. The inside security report costs €129 for a business website, €169 for an online store and €329 for the 3-site pack for agencies; with the fix of the urgent findings included (up to 3 hours), €299. Prices excluding VAT. What it checks, in website security audit.

No: they are published in euros, excluding VAT. Customers outside the EU can pay the published US-dollar price, normally invoiced without Spanish VAT. They are all on the pricing page.

Priority is an add-on to the cleanup (+€80 on WordPress, +€100 on a store) or, with the Priority add-on, to maintenance: your case jumps ahead of the rest of my work, not a guaranteed deadline. I work alone and I do not promise response times I cannot keep. The conditions are on the pricing page.

No. A pentest is a manual penetration test with a scope agreed in writing, a different kind of job; I also do not design websites, do SEO or run marketing campaigns. My job is to keep the website you already have updated, clean and monitored. I explain it on the about page.

The most common signs are redirects to other sites (often only on mobile or when coming from Google), the "This site may be hacked" notice or Chrome's red warning screen, spam pages under your domain in Google, and emails that stop arriving. A lot of malware hides from a logged-in administrator. Step by step in how to tell if your website is hacked.

Do not delete files blindly: they show how the attackers got in. Make a copy of the website as it is, change the hosting password from a clean computer and write down what you have seen. The full order is in recover a hacked website.

WebIntacta does it remotely, wherever you are: I remove the malware from files and database, delete the access the attacker left behind and close the way in. It costs €219, excluding VAT ($219 outside the EU), with a 90-day guarantee. Details in WordPress malware removal.

Yes; PrestaShop is the platform I work with most. In a store I check the checkout first (skimmers that copy card details), then overrides, modules and database, with guidance on breach notification if data was affected. It costs €349, excluding VAT. More in hacked PrestaShop repair.

For 90 days, if the website gets reinfected, I clean it again at no cost. When I finish you get a report of what was there, how they got in and what I changed. Conditions in the terms.

Yes: after the cleanup I request the review in Google Search Console; it is included in the cleanup. Delisting from other external blacklists costs €75 extra. How long Google takes and how to request it, in Google says my site is dangerous.

In the EU, toward your customers and the data protection authority (the AEPD in Spain, or your country's supervisory authority), the one responsible is you, as the owner of the website and the data. The hosting provider answers for its server, not for the WordPress or PrestaShop you install, and the agency for whatever the contract said (without a maintenance plan, it is generally not liable for vulnerabilities published later). I explain it in is the hosting or the agency to blame?.

There are two plans: Business website, €35/month, and Online store, €69/month, excluding VAT. The Priority add-on (+€25/month) can be added to either. Compared with the market, in how much website maintenance costs.

Supervised updates with a backup first, a daily backup stored off your server, a weekly security scan, an alert if the website goes down and a monthly PDF report. The Online store plan adds a daily scan, file-integrity monitoring with the connector, a monthly test purchase and one hour of technical work. Details in website maintenance.

No. You can cancel whenever you like, effective at the end of the paid month; with annual payment you pay 10 months and get 12. Conditions in website maintenance.

Yes, with the Online store plan (€69/month): modules updated with a backup first, a review before updating, file integrity monitored and a test purchase every month. I do it myself, and I work with PrestaShop every day. More in PrestaShop maintenance.

No: PrestaShop 1.7 has received no patches since June 10, 2025 (the release of PrestaShop 9.0.0), it runs at best on PHP 7.4, which has had no patches since 2022, and core vulnerabilities published since then have no fix for 1.7. The recommended path is to move to 8.2 and then to 9; in the meantime, keep modules up to date and monitor the files. Dates and sources in is PrestaShop 1.7 still safe?.

No, from the third month after signing up: the Business website plan includes one cleanup a year and the Online store plan includes the cleanup if it gets infected. The three-month period stops people from signing up on the day of the hack and cancelling the next. Details on the pricing page.

Because a review does not need it, and a server password is the last thing you want to hand out. For the report I use a read-only connector that you install from the WordPress or PrestaShop admin panel; only for a cleanup do I ask for the access needed, agreed with you, and it is changed when I finish. More in the read-only connector.

Versions, the fingerprint of each file to compare it with the original, the security configuration and the admin accounts. It does not read customers, orders, payments or passwords, it cannot change anything and it only answers requests signed from my panel. I explain it in the read-only connector.

PrestaShop 1.6, 1.7, 8 and 9, and WordPress with or without WooCommerce, from PHP 5.6 to 8.3. Joomla (3.10 to 6), Drupal (9 to 11) and Magento 2.4 have their own read-only connector; Shopify uses a read-only app, and for everything else there is a temporary agent that expires after 72 hours. Details in the read-only connector.

In my panel, only to prepare your report and, if you have a maintenance plan, to compare with earlier scans. The details are in the privacy policy.

Jose Soriano, a full-stack developer specializing in PrestaShop, WordPress and WooCommerce, who works from Ibi (Alicante, Spain). He is the PrestaShop developer of a PrestaShop Partner agency and has passed the official PrestaShop course and exam. More on the about page.

One person: I do the scan, the report, the cleanup and the maintenance myself. That is why I do not promise response times, and with Priority (an add-on to the cleanup or to maintenance) your case goes ahead of other work. I tell the story on the about page.

In Ibi (Alicante), Spain, working remotely for customers worldwide. WebIntacta has been running since 2026; I have been building online stores and modules since 2023. Contact and owner details are on the about page and in the legal notice.

A plugin watches from inside WordPress, but it does not update anything for you or tell you how they got in; an international cleanup service usually works by subscription. WebIntacta covers PrestaShop as thoroughly as WordPress, publishes its prices, keeps you with the same person from start to finish and delivers a report the owner can understand. The full comparison, with sources, in WebIntacta vs plugins and agencies.

Yes, worldwide and remotely. Prices are published in euros, and customers outside the EU can pay the published US-dollar prices: cleaning up a WordPress site costs $219 and the Business website maintenance plan is $29/month. Everything is on the pricing page.

English and Spanish, always with the same person. In English, support is by email and chat only; I do not take phone calls in English. Everything stays in writing in the ticket, so you can check back on it at any time.

By card through a Stripe payment link, or by bank transfer. Prices are published without VAT: Spanish VAT (21%) is added for customers in Spain, EU businesses with a valid VAT number are invoiced under the reverse-charge rule, and customers outside the EU are normally invoiced without Spanish VAT. The prices are on the pricing page.

I work on Spanish time (CET/CEST). Since everything goes by email or chat and stays in writing in the ticket, you can write whenever suits you and I pick it up during my working hours.