Your website compromised. Your next step, clear.
Unexpected redirects. Unknown accounts. A website your customers can no longer trust. We investigate what happened, agree a recovery plan and help you take back control.
Initial incident assessment
€195.00, one-off, excl. VAT. Up to 90 minutes for one website or database. Findings, priorities and a recovery proposal. No automatic commitment to further work.
Clear services. A scope that fits your site.
WordPress
Recovery: From €395.00. Security audit: From €195.00. one-off · excl. VAT.
Joomla
Recovery: From €495.00. Security audit: From €245.00. one-off · excl. VAT.
Drupal
Recovery: From €595.00. Security audit: From €295.00. one-off · excl. VAT.
PHP / Laravel
Recovery: From €695.00. Security audit: From €395.00. one-off · excl. VAT.
Other languages & frameworks
Recovery: From €695.00. Security audit: From €395.00. one-off · excl. VAT.
Database
Recovery: From €595.00. Security audit: From €295.00. one-off · excl. VAT.
Recovery starts with the €195.00 assessment. The platform recovery price is the minimum total including that assessment, not an extra fee on top. We agree the balance and scope before continuing. Standalone audits use the audit prices shown and do not include cleanup.
Starting prices cover one website or one database within an agreed scope. Database work is also available separately. Larger applications, multisites, paid licenses, migrations and extensive rebuilds are quoted separately.
Keep an eye on where your domain points.
A healthy website can still be affected by a changed nameserver, redirected DNS record or altered mail setting. Include domain and DNS monitoring in your security or maintenance proposal.
Nameservers & delegation
Track the agreed NS delegation and authoritative nameservers against an approved baseline. Investigate unexpected changes with your registrar or DNS provider.
Website & service records
Watch selected A, AAAA and CNAME records for changes to addresses and destinations. Include CAA and other relevant records in the agreed scope.
Email routing & protection
Review MX destinations and selected TXT records, including SPF, DMARC and known DKIM selectors, so changes affecting mail delivery or trust can be investigated.
DNSSEC & change history
Check DNSSEC status and DS records where enabled. Keep dated observations of the monitored records and route alerts to the agreed contacts.
Monitoring is a separately quoted service. We agree domains, hostnames, record types, polling intervals, alert recipients and retention. Public DNS checks cover the selected records, not every record in a zone. A change can be legitimate; an alert is a reason to investigate, not proof of a compromise.
Does my website have to be hosted by ITIFY?
No. We can work with your current hosting provider when the required access and permissions are available. A hosting move is optional and quoted separately.
Can you help without a clean backup?
We first assess what can be recovered. Cleanup or rebuilding may be possible, but missing data cannot always be restored. We explain the options before agreeing further work.
How quickly can you start?
Tell us the business impact in your request. We confirm availability and an expected response window personally. Submitting the form does not book an emergency slot or guarantee a recovery deadline.
Is an audit the same as a penetration test?
No. This is a scoped technical review. Penetration testing, formal forensic investigation and breach-impact assessment require a separate agreement.
What if customer data may have been accessed?
Mention that in your request without sharing customer records. We can help preserve available evidence and assess technical findings. Specialist forensic and legal support may be needed and is scoped separately.
Is recovery guaranteed?
No. Results depend on the compromise, access, backups and application condition. The assessment is paid work even if recovery is not viable. We do not promise that a website can never be compromised again.
Can you monitor nameserver and DNS changes?
Yes, we can scope monitoring for NS delegation, selected DNS records and DNSSEC checks. We first agree what to watch, how often to check and who receives alerts. Monitoring is quoted separately and does not automatically reverse changes or include recovery work.