Published rates, signed scope
Published rates, signed scope, best-efforts obligation stated in writing.
Emergency response
- Fixed price, paid up front — no balance to settle mid-job, no add-ons
- Triage and full forensic analysis
- Root-cause eradication and credential rotation
- Third-party access audit (keys, vendor accounts)
- 90 days of monitoring and re-cleaning guarantee
- Executive summary report
- Optional insurer / ad-platform report: + €400 excl. VAT
What is included, what is not →
Site hacked: pay €1,990 excl. VATNot sure: check for €990 excl. VATStart an interventionContinuous protection
- 24/7 integrity and injection monitoring
- Google and antivirus blacklist watch
- Managed WAF and CMS patch watch
- Full monthly re-scan
- Quarterly third-party access audit
- Priority on-call
Subscribe online:
Contact usPreventive hardening
- External exposure, permissions, accounts and access
- Backups verified by actual restoration
- WAF, segmentation, lockdowns
- Ready-to-use incident response plan
- Executive debrief
Magento / Adobe Commerce
- Payment skimmer: conditional checkout analysis
- Core, modules, theme, queues, cron jobs
- API tokens and admin accounts
- Order database and customer data
- 90 days of monitoring and re-cleaning guarantee
Migration to a supported version
- Theme rework and compatibility check
- Module-by-module inventory, with each price
- Testing and go-live
- Licence repurchase is not included
Frequently asked questions
How fast do you respond?
First response from an engineer within 5 hours, Monday to Friday, 8am to 8pm. “Response” means talking to an engineer, not an automated acknowledgement.
Should we take the site offline immediately?
Not before speaking with us. Shutting down destroys volatile evidence and does not remove persistence. We move the site into controlled maintenance instead.
What if no compromise is confirmed?
You keep the diagnostic report and nothing else is billed. If you prefer, the amount paid becomes a credit towards preventive hardening.
Do you guarantee we will not be attacked again?
No — and be wary of anyone who promises that. We are bound by a best-efforts obligation stated in the contract: industry standards, a defined scope, and 30 days of monitoring to verify the eradication holds.
Our ad account is suspended — can you help?
Yes, as an option: we assemble remediation evidence in the expected format, file the review request and follow it through to removal of the flag — the same process applies to cyber insurance claims.
Contact us
An engineer replies within 4 to 5 hours — within 4 hours for continuous-protection subscribers.
[email protected]
Remote engagements across Europe — EN / FR / ES / IT / PT / PL / HU / CS