The prices, all of them
| What you buy | Price | When it applies |
|---|---|---|
| Free evidence check | CA$0 | Always first. We read your site the way visitors and Google see it, and the written report is yours to keep. |
| Founders Fifty cleanup | CA$299 one time | One hacked WordPress site, while one of the 50 spots is open. |
| Standard cleanup | CA$399 one time | The same cleanup after the 50 are claimed. |
| Emergency start | CA$599 one time | Your cleanup jumps the queue and starts at once. |
| Cleanup plus 12 months of protection | CA$999 a year | Monitoring, updates, backups, and free re-cleans. Founders lock it at CA$399 a year for life. |
| Optional full audit | CA$75 | The deeper inside look, credited in full toward your cleanup if you go ahead. |
All prices are in Canadian dollars. No hourly billing, and no surprise charges after the fact: the price you approve is the price you pay.
What decides which price is yours
- A standard WordPress site takes the flat price for its row above. Most small business sites are standard.
- A big or complex site, such as a large WooCommerce store, is quoted flat in writing before any work. The quote is the price, and if you say no, you owe nothing.
- An emergency is the same cleanup, started at once, for CA$599.
- One honest boundary: if the hack reached the database itself, the job becomes a rebuild. Its exact price is named in writing before any work, because nobody can responsibly quote that blind.
What the hack is costing you while you compare prices
Someone broke in and is renting out your good name. The injected pages point your visitors at casinos and pill shops, and the trick is built to hide from you: your screen shows your normal site while search visitors walk into the trap. Google can hang a warning on your name, public blocklists can list your domain, and a listing can start hurting your email too. Worst of all, most hacks leave a hidden back door, so a cleanup that only deletes what you can see buys days, not safety. Every week it sits there, it spends trust you took years to earn.
How you pay, and how the risk sits with us
The sequence is fixed, and it is the same for everyone:
- Free evidence check first. You see what is on your site, in plain words, before any money moves. If the evidence shows your site is not hacked, the report says so and you owe nothing.
- Scope and exact price in writing. You approve the number before anything is charged.
- Payment in full through the secure link. Work starts only after it lands, and it starts with a full backup, before anything is touched.
- We clean, close the way in, and harden the site. Then you receive the proof report: what was found, what was removed, what was closed.
And the risk is ours, in writing: if we cannot clean your site, your payment is refunded in full, automatically. You keep the evidence report and the backup. If your site is hacked again within 90 days of a successful cleanup, we clean it again free. The full terms sit on the service terms page.
What the cleanup includes
- Full backup of your site as it stands, before anything is touched
- The malware, spam pages and links, fake accounts, and hidden back doors removed
- The way in closed, so the same trick does not work twice
- Updates and hardening put right, and every password we touched reset with you
- Blocklist and Google warning review requests filed for you
- A plain-words proof report, with a clean backup of your site
What you can expect at the end: your site back without the warning, the spam gone, the door shut, and a written record you hold. Most standard sites are verified clean within 24 to 48 hours of access.
Who this is not for
Skip us if you want the cheapest scanner run on the market: a scanner finds symptoms, and this page is priced for closing the way in. If a hack reached payment card data, that is a bank and legal matter, not a cleanup; if we see signs of it, we tell you at once and stop. And if your site is not WordPress, recovery is scoped in writing first, never sold off this page.
When it is over, you are the owner who can prove what happened and what was done about it, in writing, to a customer, a partner, or Google. That proof stays yours. For the removal itself, see our WordPress malware removal service in Canada, or go straight to the Founders Fifty offer.
Questions owners ask about cost
What will my cleanup cost, exactly?
CA$299 flat while a Founders Fifty spot is open, CA$399 after the 50. A big or complex site is quoted flat in writing before any work, and the quote is the final price. There is no hourly meter.
Why do I pay before the work starts?
Because the payment is protected, not exposed: if we cannot clean your site, it is refunded in full, automatically. You also keep the evidence report and the backup either way, and a hack that returns within 90 days is cleaned again free.
How does the refund work if you cannot clean my site?
It is automatic. We tell you plainly, refund the full payment, and hand over the evidence report, the backup, and a written note of what we found and what a rebuild would involve. A rebuild is quoted only if you ask for one.
How long does a cleanup take?
Most standard sites are verified clean within 24 to 48 hours of access. You judge the job by the proof report, not by the clock.
Does the flat price cover a big online store?
A large WooCommerce store or a complex site is quoted flat in writing before any work begins. If you decline the quote, you owe nothing. The free evidence check stays free either way.
Start with the evidence. It is free.
Get the free evidence checkIn the form, choose "I think my site may already be compromised" and describe what you are seeing. We reply within 1 business day. Prefer email? Write to support@kollaztoolz.com.