# WebIntacta (English) > WebIntacta is the website security service of Jose Soriano, a PrestaShop and WordPress developer in Ibi (Alicante, Spain), for small businesses and online stores worldwide, fully remote: a free external scan, a PDF security report made with a read-only connector (no FTP), hacked website cleanup with a 90-day guarantee and maintenance with no lock-in. Platforms: WordPress, WooCommerce and PrestaShop (every service); Joomla, Drupal and Magento (report and cleanup); Shopify and custom sites (scan and review with a quote). Published prices: free scan, report from €129, WordPress cleanup €219 and store cleanup €349, maintenance from €35/month (excluding VAT; US-dollar prices outside the EU). One person runs it, since 2026. Support in English by email and chat (no phone calls). Every page has a Markdown version: request the URL with `Accept: text/markdown` or prefix the path with /md (for example https://webintacta.com/md/en/pricing). The full content is in https://webintacta.com/llms-full.txt. Spanish summary: https://webintacta.com/llms.txt. ## Key facts - Name: WebIntacta (webintacta.com) - What it is: A website security service run by one person: scans, security reports, hacked website cleanup and technical maintenance. It is not a plugin or an agency. - Who: Jose Soriano, a full-stack developer specialized in PrestaShop, WordPress and WooCommerce, who has passed the official PrestaShop course and exam. He does the scans, the cleanups and the maintenance himself. - Where: Ibi (Alicante), Spain. Works remotely. - Since: WebIntacta has operated since 2026; Jose has been building online stores and modules since 2023. - Area: Worldwide, remotely: Spain and Latin America in Spanish, any country in English. - Languages: Spanish and English. In English, support is by email and chat (no phone calls). - Platforms: WordPress, WooCommerce and PrestaShop (1.6 to 9): every service. Joomla, Drupal and Magento: report and cleanup. Shopify and custom sites: scan and review with a quote. - Prices: Free external scan. Security report: €129 for a website, €169 for a store. Cleanup: €219 WordPress, €349 PrestaShop or WooCommerce. Maintenance: €35/month or €69/month, no lock-in. In euros, excluding VAT; outside the EU, in US dollars (WordPress cleanup $219). - Guarantee: 90 days on cleanups: if the site gets reinfected, it is cleaned again at no cost. - Response times: No response times are guaranteed: priority (an add-on to the cleanup or to maintenance) means your case goes ahead of other work. - What it does not do: Penetration tests, website design, SEO or marketing campaigns. - Contact: Support form and chat at webintacta.com/soporte?lang=en, or by email. - Connector: read-only PrestaShop module (1.6 to 9) and WordPress plugin; it does not read customers, orders, payments or passwords and only answers signed requests. Joomla (3.10 to 6), Drupal (9 to 11) and Magento 2.4 have their own read-only connector. - The report is fully deducted if a cleanup or maintenance is ordered within 30 days. - Maintenance with no lock-in; annual payment of 10 months for 12. The cleanup included in the plans applies from the third month. - VAT: Prices are published without VAT: Spanish VAT (21%) is added for customers in Spain, EU businesses with a valid VAT number are invoiced under the reverse-charge rule, and customers outside the EU are normally invoiced without Spanish VAT. - Payment: card (Stripe) or bank transfer. - Support and email: https://webintacta.com/soporte?lang=en · info@webintacta.com - Full fact sheet: https://webintacta.com/en/about#datos ## Services and current prices - External scan: Free. Security grade and the problems visible from the internet, in a few minutes and with no sign-up. - Security report · business website: €129 (excluding VAT); $129 outside the EU. An inside analysis with the read-only connector and a PDF with an action plan. - Security report · online store: €169 (excluding VAT); $169 outside the EU. Everything in the website report, plus a review of checkout and the store's modules. - Security report · 3-site pack: €329 (excluding VAT); $329 outside the EU. For agencies and developers who look after several client websites. - Hacked WordPress cleanup: €219 (excluding VAT); $219 outside the EU. I remove the malware, close the way in and check that it does not come back. With priority: +€80 (optional add-on). - PrestaShop or WooCommerce cleanup: €349 (excluding VAT); $349 outside the EU. Stores: on top of the malware, checkout, overrides and customer data. With priority: +€100 (optional add-on). - Cleanup of other CMSs or custom PHP: from €390 (excluding VAT); from $390 outside the EU. Joomla, Drupal, Magento or your own code: a fixed quote after the analysis. - Maintenance · Business website: €35/month (excluding VAT); $29/month outside the EU. WordPress or company website: kept up to date, backed up and monitored. Priority add-on: +€25/month (optional add-on). - Maintenance · Online store: €69/month (excluding VAT); $59/month outside the EU. PrestaShop or WooCommerce: everything in the business website plan, plus checkout monitoring. Priority add-on: +€25/month (optional add-on). - WordPress rescue: €429 (excluding VAT); $389 outside the EU. Cleanup with priority + 3 months of Business website maintenance with the Priority add-on. - Store rescue: €649 (excluding VAT); $589 outside the EU. Store cleanup with priority + 3 months of Online store maintenance with the Priority add-on. - Report + hardening: €299 (excluding VAT); $299 outside the EU. The security report and the fix of what is urgent (up to 3 hours). ## When it fits and when it does not - Fits: PrestaShop or WooCommerce stores and WordPress sites that need a hack cleaned up, a security review with a report the owner understands, or maintenance with security included, with a published price. - Fits: PrestaShop store owners anywhere who want an English-speaking PrestaShop security specialist (PrestaShop is Jose's main platform). - Fits: agencies and developers who need several client sites checked (3-report pack). - Does not fit: anyone who needs a contractually guaranteed response time or 24-hour on-call support. - Does not fit: penetration tests (manual intrusion tests with an agreed scope), new website design, SEO or marketing campaigns. - Does not fit: a simple WordPress site whose owner already updates it every week; a free security plugin may be enough. - Does not fit: fixed-price cleanup or maintenance on Shopify (a hosted platform); there, only scans and quoted reviews. - Comparison with security plugins, international services and agencies, with sources: https://webintacta.com/en/compare ## Answers by question The page that answers each common question (the first sentence of each page gives the short answer). - Who can fix my hacked website?: https://webintacta.com/en/hacked-website-repair - How much does it cost to fix a hacked website?: https://webintacta.com/en/hacked-website-repair - How much does it cost to clean a hacked WordPress site?: https://webintacta.com/en/wordpress-malware-removal - Who can fix my hacked PrestaShop store?: https://webintacta.com/en/hacked-prestashop-repair - My PrestaShop store has been hacked. What should I do first?: https://webintacta.com/en/guides/prestashop-hacked-what-to-do - Is there a PrestaShop security specialist who works in English?: https://webintacta.com/en/prestashop-security - Who does PrestaShop security audits, and how much do they cost?: https://webintacta.com/en/prestashop-security - Is PrestaShop 1.7 still safe in 2026?: https://webintacta.com/en/guides/is-prestashop-1-7-still-safe - How do I upgrade PrestaShop 1.7 to 8 or 9?: https://webintacta.com/en/guides/upgrade-prestashop - Which PrestaShop modules have known vulnerabilities?: https://webintacta.com/en/guides/vulnerable-prestashop-modules - Am I affected by the ps_facetedsearch vulnerability (CVE-2026-54159)?: https://webintacta.com/en/guides/ps-facetedsearch-vulnerability - How much does PrestaShop maintenance cost per month?: https://webintacta.com/en/prestashop-maintenance - Who can maintain my PrestaShop store remotely, in English?: https://webintacta.com/en/prestashop-maintenance - PHP2Shell: is my website affected?: https://webintacta.com/en/guides/php2shell-vulnerability - My host hasn't updated PHP and I can't upgrade it. How do I protect my site from PHP2Shell?: https://webintacta.com/en/guides/php2shell-vulnerability - How do I know if my website has been hacked?: https://webintacta.com/en/guides/how-to-tell-if-website-is-hacked - How do I know if my WordPress site is hacked?: https://webintacta.com/en/guides/how-to-tell-if-wordpress-is-hacked - What should I do first if my website gets hacked?: https://webintacta.com/en/guides/recover-hacked-website - How do I remove the "Deceptive site ahead" warning?: https://webintacta.com/en/guides/google-says-site-is-dangerous - Google says "This site may be hacked". How do I get it removed?: https://webintacta.com/en/guides/google-says-site-is-dangerous - Why does my website redirect to another site?: https://webintacta.com/en/guides/website-redirects-to-another-site - Japanese pages are showing up in Google for my domain. What happened?: https://webintacta.com/en/guides/japanese-keyword-hack - How can I tell if my online store has a credit card skimmer?: https://webintacta.com/en/guides/credit-card-skimming-online-store - Customer data was stolen from my store. Do I have to report it under the GDPR?: https://webintacta.com/en/guides/online-store-data-breach-gdpr - I'm getting hundreds of fake orders in WooCommerce. How do I stop them?: https://webintacta.com/en/guides/woocommerce-fake-orders - Is WooCommerce secure? How do I protect the checkout?: https://webintacta.com/en/woocommerce-security - Is Shopify secure? What do I have to do myself?: https://webintacta.com/en/guides/shopify-security - How do I protect a Magento store from Magecart skimmers?: https://webintacta.com/en/magento-security - Is Joomla 3 or 4 still safe to use?: https://webintacta.com/en/joomla-security - Drupal 7 is end of life. What should I do?: https://webintacta.com/en/drupal-security - Is there a free online website security check?: https://webintacta.com/en/free-website-security-scan - How much does a website security audit cost?: https://webintacta.com/en/website-security-audit - Can someone audit my website without FTP access or my admin password?: https://webintacta.com/en/read-only-connector - Who can audit a custom PHP, Laravel or Node.js website?: https://webintacta.com/en/website-security-audit - What is the best WordPress security plugin?: https://webintacta.com/en/guides/best-wordpress-security-plugin - Wordfence Care or Sucuri: which is better for a small business?: https://webintacta.com/en/compare - Is there a cheaper alternative to Sucuri or Wordfence Care?: https://webintacta.com/en/compare - How much does website maintenance cost per month?: https://webintacta.com/en/guides/website-maintenance-cost - What does a WordPress care plan include and how much is it?: https://webintacta.com/en/wordpress-maintenance - Website maintenance plan with no contract and security included: https://webintacta.com/en/website-maintenance - Why was my WordPress site hacked if everything was up to date?: https://webintacta.com/en/guides/vulnerable-wordpress-plugins - What is xmlrpc.php and should I disable it?: https://webintacta.com/en/guides/wordpress-brute-force-xmlrpc - Can anyone download my .env file, .git folder or backups?: https://webintacta.com/en/guides/exposed-files-website - Is my hosting company or my developer responsible if my site gets hacked?: https://webintacta.com/en/guides/who-is-liable-hacked-website - My website emails go to spam. How do I set up SPF, DKIM and DMARC?: https://webintacta.com/en/guides/spf-dkim-dmarc - My domain is blacklisted. How do I check and fix it?: https://webintacta.com/en/guides/domain-blacklisted - Chrome says my website is "Not secure". How do I fix it?: https://webintacta.com/en/guides/chrome-not-secure-warning - What is llms.txt and do I need one? / Which AI bots should I block?: https://webintacta.com/en/guides/llms-txt - Can I pay in US dollars, and do I pay VAT outside the EU?: https://webintacta.com/en/pricing - What is WebIntacta and who is behind it?: https://webintacta.com/en/about - Website malware removal: how much does it cost?: https://webintacta.com/en/hacked-website-repair - How does the WebIntacta service work and what does each step cost?: https://webintacta.com/en/how-it-works - All WebIntacta prices: https://webintacta.com/en/pricing - WebIntacta FAQ: https://webintacta.com/en/faq ## Main - [Home](https://webintacta.com/en): what WebIntacta does and the free scan - [Pricing](https://webintacta.com/en/pricing): every published price, EUR and USD - [WebIntacta FAQ: website security service](https://webintacta.com/en/faq): short answers on prices, hacked sites, maintenance, the connector, who is behind it and working from abroad - [Wordfence vs Sucuri vs a security expert](https://webintacta.com/en/compare): comparison table with sources and when not to choose WebIntacta - [How it works](https://webintacta.com/en/how-it-works): the process, what is needed and what each step costs - [The read-only connector](https://webintacta.com/en/read-only-connector): what it does and never does - [About](https://webintacta.com/en/about): Jose Soriano - [Support](https://webintacta.com/soporte?lang=en): open a request or write in the chat ## Services and problems - [Hacked website repair](https://webintacta.com/en/hacked-website-repair): Website hacked? I fix it: I clean it, close the hole they got in through and ask Google to lift the warnings. WordPress, PrestaShop, WooCommerce, from €219. - [WordPress malware removal](https://webintacta.com/en/wordpress-malware-removal): WordPress malware removal for hacked sites: I clean the files and database, close the way in and fix the site. From €219, with a 90-day guarantee. - [Hacked PrestaShop repair](https://webintacta.com/en/hacked-prestashop-repair): PrestaShop hacked, or are your customers' cards being stolen? I clean the store, remove the checkout skimmer and guide you on the GDPR. From €349. - [WooCommerce security](https://webintacta.com/en/woocommerce-security): WooCommerce security: I audit plugins, checkout and users, stop card testing (fake orders) and monitor the store. Online store plan, €69/month. - [WordPress security](https://webintacta.com/en/wordpress-security): WordPress security without the hype: what security plugins do and don't, backups that work, updates and monitoring. Start with a free external scan. - [PrestaShop security](https://webintacta.com/en/prestashop-security): PrestaShop 1.7, 8 and 9 security audit: vulnerable modules, core file integrity, employees and checkout scripts. Read-only connector, no FTP. PDF report €169. - [WordPress maintenance](https://webintacta.com/en/wordpress-maintenance): WordPress maintenance plan: a monthly WP-CLI checklist, abandoned plugins, PHP version and Elementor or WPML licenses, security included. €35/month. - [PrestaShop maintenance](https://webintacta.com/en/prestashop-maintenance): PrestaShop maintenance and support: I update modules with a backup first, watch file integrity and test the checkout every month. €69/month, no contract. - [Free scan](https://webintacta.com/en/free-website-security-scan): Check your website's security online for free: vulnerable versions, exposed files, HTTPS, headers and blacklists. A grade from 0 to 100, no sign-up. - [Security audit](https://webintacta.com/en/website-security-audit): Website security audit for WordPress and PrestaShop with a read-only connector, no FTP needed: plugins, integrity and users. PDF report from €129. - [AI agent readiness](https://webintacta.com/en/ai-agent-ready-website): Free check of whether your website is ready for AI agents like ChatGPT: robots.txt, which AI bots to block and which not, llms.txt and structured data. - [Website maintenance](https://webintacta.com/en/website-maintenance): Monthly website maintenance plans: what each one costs, what it includes and how it compares with the market. Security included, from €35/month. - [Joomla security](https://webintacta.com/en/joomla-security): Joomla 3, 4, 5 and 6 security: core, extensions, Super Users and forgotten backups, reviewed with a read-only plugin. Report from €129, plus cleanup. - [Drupal security](https://webintacta.com/en/drupal-security): Drupal 9, 10 and 11 security (and end-of-life Drupal 7): core, contrib modules with advisories, files and backups, via a read-only module. Report from €129. - [Magento security](https://webintacta.com/en/magento-security): Magento 2 and Adobe Commerce security: patches, checkout skimmers and vulnerable modules, reviewed with a read-only module. Report from €169. ## Guides - [How to tell if your WordPress site is hacked](https://webintacta.com/en/guides/how-to-tell-if-wordpress-is-hacked): Ten signs your WordPress site is hacked, why the owner almost never sees them and how to check each one, with WP-CLI commands if you use the command line. - [My website redirects to another site: what's going on](https://webintacta.com/en/guides/website-redirects-to-another-site): Why your website redirects visitors to spam or gambling sites but never you, how to reproduce it with curl and where to look: .htaccess, database, JavaScript. - [How to remove Google's “dangerous site” warning, step by step](https://webintacta.com/en/guides/google-says-site-is-dangerous): “This site may be hacked”, “Deceptive site ahead” or a malware warning: what each Google warning means and how to remove it in Search Console, step by step. - [PrestaShop store hacked: what to do in the first hour](https://webintacta.com/en/guides/prestashop-hacked-what-to-do): What to do if your PrestaShop store is hacked: stop the skimmer, commands to find modified files, check ps_configuration and hooks, real CVEs and the GDPR. - [My website was hacked: how to recover it step by step](https://webintacta.com/en/guides/recover-hacked-website): My website was hacked, what do I do? The first hour, what to save before cleaning, passwords, backups, the Google review and when to get help. - [How to tell if your website is hacked or has malware](https://webintacta.com/en/guides/how-to-tell-if-website-is-hacked): How to tell if your website is hacked or has malware, whatever the CMS: signs for visitors, in Google and in email, plus free checks you can run today. - [Upgrading PrestaShop (1.7 → 8 → 9) without breaking the store](https://webintacta.com/en/guides/upgrade-prestashop): How to upgrade PrestaShop from 1.7 to 8 and from 8 to 9: PHP per version, modules and overrides, Update Assistant or manual, staging and a rollback plan. - [Wordfence, Sucuri or Solid Security: which to choose (and when it isn't enough)](https://webintacta.com/en/guides/best-wordpress-security-plugin): Wordfence vs Sucuri, Solid Security (Kadence Security), MalCare and Jetpack: what each does free and paid, which to choose and what none of them does. - [Vulnerable PrestaShop modules: known CVEs and fixed versions](https://webintacta.com/en/guides/vulnerable-prestashop-modules): List of vulnerable PrestaShop modules: CVEs, affected and fixed versions, core security advisories and a step-by-step security audit of your own store. - [Credit card skimmer on your website: how to detect it](https://webintacta.com/en/guides/credit-card-skimming-online-store): How credit card skimmers work on WooCommerce and PrestaShop checkouts, where they hide, why owners miss them and what to do if you suspect one. - [Data breach in your online store: what to do in 72 hours](https://webintacta.com/en/guides/online-store-data-breach-gdpr): Customer data stolen from your online store? When to notify under GDPR Articles 33 and 34, what to tell customers and the technical report you need. - [How much does website maintenance cost in 2026?](https://webintacta.com/en/guides/website-maintenance-cost): How much website maintenance costs in 2026: typical monthly ranges for small business sites and stores, WordPress pricing, what raises the fee and what to ask. - [llms.txt: what it is, what it's for and how to check yours](https://webintacta.com/en/guides/llms-txt): What llms.txt is, how it differs from robots.txt, how to write it on WordPress, PrestaShop or Shopify, and which AI bots to block in robots.txt or let in. - [HTTP security headers: what they are and how to check them](https://webintacta.com/en/guides/http-security-headers): What HSTS, Content Security Policy, X-Frame-Options, nosniff, Referrer-Policy and Permissions-Policy do, how to add them and run a security headers check. - [How to back up WordPress (and restore it)](https://webintacta.com/en/guides/wordpress-backup): How to back up WordPress with a plugin, from your hosting or with WP-CLI, where to store it, how to restore it and what to do if your backups are infected. - [Website says “Not secure” in Chrome: causes and how to fix it](https://webintacta.com/en/guides/chrome-not-secure-warning): Why Chrome says your website is not secure (no HTTPS, expired certificate, mixed content) and how to check and fix it on WordPress and PrestaShop. - [My domain is blacklisted: how to get it removed](https://webintacta.com/en/guides/domain-blacklisted): How to check if your domain is blacklisted (Google Safe Browsing, Spamhaus and others), why it happens, how to request removal and how to protect your email. - [WooCommerce fake orders: how to stop card testing attacks](https://webintacta.com/en/guides/woocommerce-fake-orders): How to spot a card testing attack on WooCommerce, what it risks with Stripe or your bank, and how to stop it: rate limiting, CAPTCHA and payment settings. - [Japanese keyword hack on WordPress: how to remove it from Google](https://webintacta.com/en/guides/japanese-keyword-hack): How to spot the Japanese keyword hack on WordPress, clean it from your site and from Google with Search Console (removals, sitemap, review) and keep it away. - [SPF, DKIM and DMARC: how to set them up, step by step](https://webintacta.com/en/guides/spf-dkim-dmarc): What SPF, DKIM and DMARC do, how to check yours, how to set them up step by step, and how to go from p=none to p=reject without losing legitimate email. - [Shopify security: what Shopify doesn't protect for you](https://webintacta.com/en/guides/shopify-security): Shopify store security: staff accounts and 2FA, apps and their permissions, theme code, third-party scripts and pixels. What to check and how to do it. - [My website was hacked: is the web host, the agency or me responsible?](https://webintacta.com/en/guides/who-is-liable-hacked-website): Who is responsible when your website or store is hacked: you, your web host or your agency. What the GDPR says, what to check in contracts and what to ask. - [Is it safe to stay on PrestaShop 1.7 in 2026?](https://webintacta.com/en/guides/is-prestashop-1-7-still-safe): PrestaShop 1.7 in 2026: since when it gets no patches, which published flaws affect it, the PHP 7.4 problem and what to do if your store is still on 1.7. - [PHP2Shell (CVE-2026-109618 and CVE-2026-109619): what it is and how to tell if your website is affected](https://webintacta.com/en/guides/php2shell-vulnerability): PHP2Shell (CVE-2026-109618 and CVE-2026-109619): affected versions, how to check yours and what to do if you can't update PHP on an older website. - [Vulnerable WordPress plugins: how to check yours for security flaws](https://webintacta.com/en/guides/vulnerable-wordpress-plugins): How to check your WordPress plugins and themes for published vulnerabilities, why an updated site still gets hacked, and what to do with a plugin with no fix. - [WordPress brute-force attacks: wp-login.php, xmlrpc.php and how to stop them](https://webintacta.com/en/guides/wordpress-brute-force-xmlrpc): What brute-force attacks on wp-login.php and xmlrpc.php are, how to spot them in your logs, when to disable XML-RPC and how to protect logins with 2FA. - [Exposed files on your website: .env, .git, backups and logs](https://webintacta.com/en/guides/exposed-files-website): Which files on your website anyone can download (.env, .git, .sql backups, debug.log or PrestaShop var/logs), how to check for them and how to block them. - [ps_facetedsearch (CVE-2026-54159): how to tell if your PrestaShop store is affected](https://webintacta.com/en/guides/ps-facetedsearch-vulnerability): CVE-2026-54159 in ps_facetedsearch, PrestaShop's faceted search filters: affected versions, how to check yours, what to update to, and what to do on 1.7. ## Tool - [Free scan](https://webintacta.com/en/scan): open with ?url=
to prefill the site; the scan starts with a click from the user. Only your own sites or with permission. ## Optional - [Full content in one file](https://webintacta.com/llms-full.txt) - [Legal notice](https://webintacta.com/en/legal-notice), [Privacy](https://webintacta.com/en/privacy), [Cookies](https://webintacta.com/en/cookies), [Terms](https://webintacta.com/en/terms) (translations; the Spanish versions prevail)