# WebIntacta FAQ: website security questions > WebIntacta FAQ: how much hacked website cleanup costs, what maintenance includes, the read-only connector, who is behind it and working from abroad. URL: https://webintacta.com/en/faq Language: English (Spanish version: see the hreflang alternate of the HTML page) Last updated: 2026-10-24 **In short:** WebIntacta is the website security service of Jose Soriano, a PrestaShop and WordPress developer in Ibi (Alicante, Spain), for small businesses and online stores worldwide. The external scan is free, cleaning up a hacked WordPress site costs €219 with a 90-day guarantee and maintenance for a business website costs €35/month with no lock-in, excluding VAT. Below are the questions I get most often, each with a link to the page that covers it in depth. ## Services and prices ### What is WebIntacta? It is the website security service of Jose Soriano, a PrestaShop and WordPress developer in Ibi (Alicante, Spain). It offers a free external scan, a security report in PDF, hacked website cleanup with a 90-day guarantee and maintenance with no lock-in, for small businesses and online stores worldwide, remotely. How each step fits together, in [how it works](https://webintacta.com/en/how-it-works). ### How much does hacked website cleanup cost? A WordPress site, €219; a PrestaShop or WooCommerce store, €349; other CMSs or custom PHP, from €390 with a fixed quote after the analysis. With priority over other work, +€80 on WordPress and +€100 on a store. Prices excluding VAT; outside the EU, the WordPress cleanup is $219. Details in [hacked website repair](https://webintacta.com/en/hacked-website-repair). ### Is the security scan really free? Yes, and there is nothing to sign up for. It checks from the outside what anyone can see of your website (versions with published vulnerabilities, exposed files, HTTPS, headers, domain email and blacklists) and gives a score from 0 to 100. It installs nothing and does not try passwords. Try it with the [free website security scan](https://webintacta.com/en/free-website-security-scan). ### What is the difference between the free scan and the paid report? The scan looks at the website from the outside; the report checks it from the inside with a read-only connector: core integrity file by file, malware, plugins or modules with known vulnerabilities, users and configuration, with a PDF that we then go through together by email or chat. It costs €129 for a website and €169 for a store, and it is deducted if you order a cleanup or maintenance within 30 days. More in [website security audit](https://webintacta.com/en/website-security-audit). ### How much does a website security audit cost? The external scan is free. The inside security report costs €129 for a business website, €169 for an online store and €329 for the 3-site pack for agencies; with the fix of the urgent findings included (up to 3 hours), €299. Prices excluding VAT. What it checks, in [website security audit](https://webintacta.com/en/website-security-audit). ### Do the prices include VAT? No: they are published in euros, excluding VAT. Customers outside the EU can pay the published US-dollar price, normally invoiced without Spanish VAT. They are all on the [pricing](https://webintacta.com/en/pricing) page. ### What does "with priority" mean? How soon do you start? Priority is an add-on to the cleanup (+€80 on WordPress, +€100 on a store) or, with the Priority add-on, to maintenance: your case jumps ahead of the rest of my work, not a guaranteed deadline. I work alone and I do not promise response times I cannot keep. The conditions are on the [pricing](https://webintacta.com/en/pricing) page. ### Do you do pentests, web design or SEO? No. A pentest is a manual penetration test with a scope agreed in writing, a different kind of job; I also do not design websites, do SEO or run marketing campaigns. My job is to keep the website you already have updated, clean and monitored. I explain it on the [about](https://webintacta.com/en/about) page. ## Hacked website ### How do I know if my website has been hacked? The most common signs are redirects to other sites (often only on mobile or when coming from Google), the "This site may be hacked" notice or Chrome's red warning screen, spam pages under your domain in Google, and emails that stop arriving. A lot of malware hides from a logged-in administrator. Step by step in [how to tell if your website is hacked](https://webintacta.com/en/guides/how-to-tell-if-website-is-hacked). ### What should I do first if my website has been hacked? Do not delete files blindly: they show how the attackers got in. Make a copy of the website as it is, change the hosting password from a clean computer and write down what you have seen. The full order is in [recover a hacked website](https://webintacta.com/en/guides/recover-hacked-website). ### Who can clean up a hacked WordPress site? WebIntacta does it remotely, wherever you are: I remove the malware from files and database, delete the access the attacker left behind and close the way in. It costs €219, excluding VAT ($219 outside the EU), with a 90-day guarantee. Details in [WordPress malware removal](https://webintacta.com/en/wordpress-malware-removal). ### Do you clean hacked PrestaShop stores? Yes; PrestaShop is the platform I work with most. In a store I check the checkout first (skimmers that copy card details), then overrides, modules and database, with guidance on breach notification if data was affected. It costs €349, excluding VAT. More in [hacked PrestaShop repair](https://webintacta.com/en/hacked-prestashop-repair). ### What does the cleanup guarantee cover? For 90 days, if the website gets reinfected, I clean it again at no cost. When I finish you get a report of what was there, how they got in and what I changed. Conditions in the [terms](https://webintacta.com/en/terms). ### Do you remove Google's "dangerous site" warning? Yes: after the cleanup I request the review in Google Search Console; it is included in the cleanup. Delisting from other external blacklists costs €75 extra. How long Google takes and how to request it, in [Google says my site is dangerous](https://webintacta.com/en/guides/google-says-site-is-dangerous). ### Is my hosting provider or my agency liable if my website gets hacked? In the EU, toward your customers and the data protection authority (the AEPD in Spain, or your country's supervisory authority), the one responsible is you, as the owner of the website and the data. The hosting provider answers for its server, not for the WordPress or PrestaShop you install, and the agency for whatever the contract said (without a maintenance plan, it is generally not liable for vulnerabilities published later). I explain it in [is the hosting or the agency to blame?](https://webintacta.com/en/guides/who-is-liable-hacked-website). ## Maintenance ### How much does website maintenance cost? There are two plans: Business website, €35/month, and Online store, €69/month, excluding VAT. The Priority add-on (+€25/month) can be added to either. Compared with the market, in [how much website maintenance costs](https://webintacta.com/en/guides/website-maintenance-cost). ### What does maintenance include? Supervised updates with a backup first, a daily backup stored off your server, a weekly security scan, an alert if the website goes down and a monthly PDF report. The Online store plan adds a daily scan, file-integrity monitoring with the connector, a monthly test purchase and one hour of technical work. Details in [website maintenance](https://webintacta.com/en/website-maintenance). ### Is there a lock-in period? No. You can cancel whenever you like, effective at the end of the paid month; with annual payment you pay 10 months and get 12. Conditions in [website maintenance](https://webintacta.com/en/website-maintenance). ### Do you offer PrestaShop maintenance? Yes, with the Online store plan (€69/month): modules updated with a backup first, a review before updating, file integrity monitored and a test purchase every month. I do it myself, and I work with PrestaShop every day. More in [PrestaShop maintenance](https://webintacta.com/en/prestashop-maintenance). ### Is it safe to stay on PrestaShop 1.7? No: PrestaShop 1.7 has received no patches since June 10, 2025 (the release of PrestaShop 9.0.0), it runs at best on PHP 7.4, which has had no patches since 2022, and core vulnerabilities published since then have no fix for 1.7. The recommended path is to move to 8.2 and then to 9; in the meantime, keep modules up to date and monitor the files. Dates and sources in [is PrestaShop 1.7 still safe?](https://webintacta.com/en/guides/is-prestashop-1-7-still-safe). ### If I am on a maintenance plan and get hacked, do I pay for the cleanup? No, from the third month after signing up: the Business website plan includes one cleanup a year and the Online store plan includes the cleanup if it gets infected. The three-month period stops people from signing up on the day of the hack and cancelling the next. Details on the [pricing](https://webintacta.com/en/pricing) page. ## The connector and privacy ### Why don't you ask for FTP access? Because a review does not need it, and a server password is the last thing you want to hand out. For the report I use a read-only connector that you install from the WordPress or PrestaShop admin panel; only for a cleanup do I ask for the access needed, agreed with you, and it is changed when I finish. More in [the read-only connector](https://webintacta.com/en/read-only-connector). ### What data does the connector see? Versions, the fingerprint of each file to compare it with the original, the security configuration and the admin accounts. It does not read customers, orders, payments or passwords, it cannot change anything and it only answers requests signed from my panel. I explain it in [the read-only connector](https://webintacta.com/en/read-only-connector). ### Which versions does the connector work with? PrestaShop 1.6, 1.7, 8 and 9, and WordPress with or without WooCommerce, from PHP 5.6 to 8.3. Joomla (3.10 to 6), Drupal (9 to 11) and Magento 2.4 have their own read-only connector; Shopify uses a read-only app, and for everything else there is a temporary agent that expires after 72 hours. Details in [the read-only connector](https://webintacta.com/en/read-only-connector). ### Where is the scan data stored? In my panel, only to prepare your report and, if you have a maintenance plan, to compare with earlier scans. The details are in the [privacy policy](https://webintacta.com/en/privacy). ## Who is behind it ### Who runs WebIntacta? Jose Soriano, a full-stack developer specializing in PrestaShop, WordPress and WooCommerce, who works from Ibi (Alicante, Spain). He is the PrestaShop developer of a PrestaShop Partner agency and has passed the official PrestaShop course and exam. More on the [about](https://webintacta.com/en/about) page. ### Is it a big company or one person? One person: I do the scan, the report, the cleanup and the maintenance myself. That is why I do not promise response times, and with Priority (an add-on to the cleanup or to maintenance) your case goes ahead of other work. I tell the story on the [about](https://webintacta.com/en/about) page. ### Where is WebIntacta based and how long has it been running? In Ibi (Alicante), Spain, working remotely for customers worldwide. WebIntacta has been running since 2026; I have been building online stores and modules since 2023. Contact and owner details are on the [about](https://webintacta.com/en/about) page and in the [legal notice](https://webintacta.com/en/legal-notice). ### How is it different from a security plugin or an agency? A plugin watches from inside WordPress, but it does not update anything for you or tell you how they got in; an international cleanup service usually works by subscription. WebIntacta covers PrestaShop as thoroughly as WordPress, publishes its prices, keeps you with the same person from start to finish and delivers a report the owner can understand. The full comparison, with sources, in [WebIntacta vs plugins and agencies](https://webintacta.com/en/compare). ## Working with me from abroad ### Do you work with websites outside Spain? Yes, worldwide and remotely. Prices are published in euros, and customers outside the EU can pay the published US-dollar prices: cleaning up a WordPress site costs $219 and the Business website maintenance plan is $29/month. Everything is on the [pricing](https://webintacta.com/en/pricing) page. ### In which languages do you work? English and Spanish, always with the same person. In English, support is by email and chat only; I do not take phone calls in English. Everything stays in writing in the ticket, so you can check back on it at any time. ### How do I pay, and what about VAT? By card through a Stripe payment link, or by bank transfer. Prices are published without VAT: Spanish VAT (21%) is added for customers in Spain, EU businesses with a valid VAT number are invoiced under the reverse-charge rule, and customers outside the EU are normally invoiced without Spanish VAT. The prices are on the [pricing](https://webintacta.com/en/pricing) page. ### What about the time difference? I work on Spanish time (CET/CEST). Since everything goes by email or chat and stays in writing in the ticket, you can write whenever suits you and I pick it up during my working hours.