Two related services.
HARDENING
Applied once: permissions, admin protection, two-factor, removing unused software, blocking execution in upload directories, configuring backups.
Sold as a one-off, or included in a higher maintenance tier.
CLEANUP
Removing a compromise. Reactive, urgent, and chargeable.
PRICING CLEANUP
Higher than routine work. It is urgent, unpleasant, and requires real expertise.
Be clear about what is included: the clean, the hardening, and a period of monitoring.
THE UNCOMFORTABLE CONVERSATION
If you were paid to maintain the site and it was compromised through an unapplied update, that is yours to fix.
If the client declined maintenance, cleanup is chargeable. Your terms should say so in advance.
WHAT TO INCLUDE IN A CLEANUP
Identifying and removing the infection Finding and closing the entry point Changing all credentials Updating everything Requesting review from search engines if flagged A period of monitoring
WHAT NOT TO DO
Clean without closing the entry point. It recurs within days and the client blames you.
THE PREVENTATIVE SALE
After one cleanup, most clients accept maintenance.
