Skip to content
Pricing

Website security prices, published.

No «request a quote» for the usual work. Prices in euros, excluding VAT; customers outside the EU can pay in US dollars. What has no fixed price (custom sites) I quote before starting.

In short

WebIntacta publishes all of its prices. The external scan is free; the security report costs €129 for a website and €169 for a store; cleaning a hacked WordPress site costs €219, and a PrestaShop or WooCommerce store €349, with a 90-day guarantee; and maintenance is €35/month for a website or €69/month for a store, with no lock-in. Prices in euros, excluding VAT; outside the EU, in US dollars (the WordPress cleanup is $219).

Last updated:

Scan and report

First, find out where you stand.

The external scan is free. The report looks inside with the read-only connector and is deducted if you hire me within 30 days.

External scan

Security grade and the problems visible from the internet, in a few minutes and with no sign-up.

Free

No sign-up, no commitment

  • Platform and version (WordPress, PrestaShop, WooCommerce, Shopify…)
  • Visible plugins and modules with published flaws
  • Files that should not be public (backups, .git, configuration files)
  • HTTPS, certificate and security headers
  • Domain email (SPF, DKIM, DMARC) and blocklists
  • AI agent readiness (scored separately)
Recommended

Security report · business website

An inside analysis with the read-only connector and a PDF with an action plan.

€129

excluding VAT$129 outside the EU

  • Core integrity: every file compared with the original of your version
  • Malware, backdoors and PHP where it does not belong
  • Inventory of plugins or modules with versions and known flaws
  • Administrator accounts, configuration and permissions
  • Full PDF with fixes, plus a diagnosis-only version
  • Q&A by email or chat to go through it together
  • Fully credited if you hire a cleanup or maintenance within 30 days.

Security report · online store

Everything in the website report, plus a review of checkout and the store's modules.

€169

excluding VAT$169 outside the EU

  • Everything in the business website report
  • Skimmers: scripts that copy cards at checkout
  • Modified overrides and payment modules
  • Database: scripts injected into content and settings
  • Fully credited if you hire a cleanup or maintenance within 30 days.

Security report · 3-site pack

For agencies and developers who look after several client websites.

€329

excluding VAT$329 outside the EU

  • Three full reports (website or store)
  • PDF addressed to you or your agency

What I check in the report, point by point, is on the website security audit page. For stores, the review starts with the modules: the checklist is on PrestaShop security.

Cleanup

If you have already been hacked.

Fixed price, 90-day guarantee and a report of what was done. With priority (€80 more on WordPress, €100 on a store) your case goes first; it is not a guaranteed deadline.

Hacked WordPress cleanup

I remove the malware, close the way in and check that it does not come back.

€219

excluding VAT$219 outside the EU

  • With priority+€80Your case goes ahead of every other job, weekends too if needed. It is priority, not a guaranteed deadline.+$80 outside the EU
  • Files, database and backdoors
  • Users and scheduled tasks the attacker left behind
  • Update or replacement of the plugin or theme they got in through
  • Password and key rotation (wp-config) together with you
  • Review in Google Search Console and blocklists
  • A report of what was there and what was done
  • 90-day guarantee: if it gets reinfected, I clean it again at no cost.

PrestaShop or WooCommerce cleanup

Stores: on top of the malware, checkout, overrides and customer data.

€349

excluding VAT$349 outside the EU

  • With priority+€100Your case goes ahead of every other job, weekends too if needed. It is priority, not a guaranteed deadline.+$100 outside the EU
  • Everything in the WordPress cleanup
  • Checkout: skimmers and fake payment forms
  • Modified overrides, modules and templates (PrestaShop)
  • Guidance on breach notification (GDPR) if data was affected
  • 90-day guarantee: if it gets reinfected, I clean it again at no cost.

Cleanup of other CMSs or custom PHP

Joomla, Drupal, Magento or your own code: a fixed quote after the analysis.

from €390 excluding VAT

Surcharges

  • Multisite or more than 5 GB of files+€90+$90 outside the EU
  • Delisting from external blocklists (the Google review is already included)+€75+$75 outside the EU

How I work in each case and what you can do in the meantime: hacked WordPress cleanup and hacked PrestaShop cleanup (also valid for WooCommerce, with the checkout reviewed).

Maintenance

Two plans, no lock-in.

Business website or Online store. The Priority add-on goes on top of either one, inside the plan, if you want your issues to go first.

Maintenance · Business website

WordPress or company website: kept up to date, backed up and monitored.

€35/month

excluding VAT$29/month outside the EU

  • + Priority add-on+€25/monthYour issues go to the front of the work queue and, if you get hacked, the cleanup gets priority at no extra cost.+$19/month outside the EU
  • Supervised updates of core, plugins and theme, with a backup first
  • Daily backup stored off your server
  • Weekly security scan
  • Downtime alert (checked every 5 minutes)
  • Monthly PDF report
  • One cleanup a year included if it gets infected (from the 3rd month)
  • No minimum term. Annual payment: 10 months.
Recommended

Maintenance · Online store

PrestaShop or WooCommerce: everything in the business website plan, plus checkout monitoring.

€69/month

excluding VAT$59/month outside the EU

  • + Priority add-on+€25/monthYour issues go to the front of the work queue and, if you get hacked, the cleanup gets priority at no extra cost.+$19/month outside the EU
  • Everything in the Business website plan
  • Daily scan and file integrity monitoring with the connector
  • Module review before updating (on a staging copy when possible)
  • Monthly test purchase
  • 1 hour of technical work a month
  • Cleanup included if it gets infected (from the 3rd month)
  • No minimum term. Annual payment: 10 months.
  • No minimum term: cancel whenever you like, effective at the end of the month already paid.
  • Annual payment: you pay 10 months and get 12.
  • The included cleanup applies from the third month (so nobody signs up the day of the hack and cancels the next).

The two plans compared with the market, on website maintenance. What is specific to each platform: the monthly checklist of WordPress maintenance and the support hour of PrestaShop maintenance.

Packs

For after a scare.

Right after a hack is when keeping it from happening again makes the most sense. The packs combine the cleanup and the first months of maintenance.

WordPress rescue

Cleanup with priority + 3 months of Business website maintenance with the Priority add-on.

€429

excluding VAT$389 outside the EU

  • WordPress cleanup with priority
  • 3 months of Business website maintenance
  • 3 months of the Priority add-on
  • Afterwards it moves to the plan's normal fee; you can cancel it.

Store rescue

Store cleanup with priority + 3 months of Online store maintenance with the Priority add-on.

€649

excluding VAT$589 outside the EU

  • PrestaShop or WooCommerce cleanup with priority
  • 3 months of Online store maintenance
  • 3 months of the Priority add-on
  • Afterwards it moves to the plan's normal fee; you can cancel it.

Report + hardening

The security report and the fix of what is urgent (up to 3 hours).

€299

excluding VAT$299 outside the EU

  • Full security report
  • Fix of the urgent findings, up to 3 hours of work
  • A new scan to confirm it
  • Tienda online: 389 € (389 US$ en Latinoamérica).

About prices and payment

The full conditions are in the terms of service; any other questions, in the FAQ.

Do the prices include VAT?

Prices are published without VAT: Spanish VAT (21%) is added for customers in Spain, EU businesses with a valid VAT number are invoiced under the reverse-charge rule, and customers outside the EU are normally invoiced without Spanish VAT.

Can I pay in US dollars?

Yes. Customers outside the EU can pay the US-dollar price shown under each card; inside the EU, prices are in euros. Your bank may charge its own currency conversion fee.

How do I pay?

By card through a secure payment link (Stripe) or by bank transfer. One-off work is paid when you order it; maintenance, monthly or yearly (10 months).

What if the cleanup does not work?

If the same infection comes back within 90 days, I clean it again at no cost. If a site cannot be cleaned (for example, because the attacker deleted everything and there are no backups), I tell you before charging for work that cannot be done.

Is the report really deducted?

Yes: if you order a cleanup or a maintenance plan within 30 days, the full price of the report is deducted.

Can I cancel maintenance?

Whenever you like, no lock-in: billing stops from the following month. The included cleanup kicks in from the third month.

What is priority?

An add-on to the cleanup (or, with the Priority add-on, to maintenance): your case goes ahead of the rest of the work in my queue, weekends too if needed. It is not a promise of hours: I tell you when I can start before you pay.

Do you offer support in English?

Yes, by email and chat (no phone calls). Every request opens a ticket with its own private link, so everything stays in writing.

Not sure what you need? Start here.

The external scan is free and tells you where to start.

Get the PDF result and 30-day alerts (optional)

Data protection. Controller: Jose Soriano Castro. Purpose: to send you the diagnostic PDF, email you for 30 days if a security flaw affecting your site is published (with a follow-up scan on day 30) and reply in writing to your question; offers only if you tick that box. Legal basis: your consent. Recipients: nobody, unless required by law. You can unsubscribe at any time with the link in every email or by writing to me. Rights: access, rectification, erasure, objection, restriction and portability. Privacy policy.

  • No FTP access
  • Read-only
  • No customer data

Cookie preferences