Incident response
Hacked, down, or showing spam in Google?
Triage, containment and cleanup for WordPress. Response within the same business day.
Response within the same business day. · 24–72h depending on severity
Initial triage
+55 19 99502-1465Response within the same business day.
- Discord
- yannix_dex
- zenitih@proton.me
- Scope and price confirmed before starting.
- WP admin, hosting and backup access.
- NDA available.
Symptoms
Signs your site may be compromised
- redirects to another domain
- spam pages indexed by Google
- files, plugins or users you did not create
- sudden downtime or HTTP 500
- "dangerous site" warning in the browser
- sudden slowness and odd traffic spikes
- password reset emails you did not request
If you recognize more than one, don't wait.
Process
What I do
Six stages, no surprise stage. What is not here is in the exclusions list.
- 01
Triage
confirm the compromise and the likely vector.
- 02
Containment
isolate the issue and stop propagation.
- 03
Cleanup
remove backdoors, malware, suspicious users and plugins.
- 04
Hardening
close the vector, update what matters, configure backups and headers.
- 05
Report
what happened, what was done and what to avoid.
- 06
Follow-up
7 days of post-cleanup monitoring.
Not included
- data recovery without backups
- Google penalty removal (guidance only)
- feature development or redesign
- a guarantee that the site will never be attacked again — security is a process, not an event
How it works
- Contact
- WhatsApp +55 19 99502-1465 / yannix_dex / zenitih@proton.me
- Response
- within the same business day.
- Initial triage
- I confirm the scope and send the price before starting.
- Payment
- Pix (Brazil) or PayPal (international). 50% to start, 50% on delivery (adjustable).
- What I need
- WP admin access, hosting, backup and written authorization.
- Confidentiality
- NDA available.
Questions
FAQ
If your question isn't here, message me on WhatsApp. I answer before any commitment.
Did I lose my data?
Depends on your backups. I check what exists during triage and explain the scenario.
How long does it take?
24–72h depending on severity and access.
Do you guarantee it won't happen again?
No. Nobody honest does. I harden the site, explain the vector and recommend ongoing monitoring.
Do I need to change hosting?
Not always. I assess case by case.
Do you work outside WordPress?
My focus is WordPress. Other cases on request.
Is it confidential?
Yes. NDA available; I don't disclose clients without authorization.
If your site is down, don't wait.
After cleanup
Don't leave the next incident for later.
Updates, verified backups and ongoing monitoring cost less than a second breach.