About WordPress Malware Removal

WordPress Malware Removal is a sub-brand of HyperledgerIT, based in Canary Wharf, London. We clean hacked WordPress websites for UK businesses, charities and freelancers. We don't sell hosting or design, and we don't try to sign you up to anything.

Canary Wharf skyline in London seen across the River Thames
Canary Wharf, London, where HyperledgerIT is based.

Part of HyperledgerIT

WordPress Malware Removal is a sub-brand of HyperledgerIT, an IT company based at 214 Westferry Road in Canary Wharf, London. We set it up as a separate brand so that people with a hacked WordPress site can find one thing quickly: a team that will clean it properly and keep an eye on it afterwards.

Being part of HyperledgerIT means there's an established UK business behind every clean-up, with a real address you can write to and a phone that gets answered. Your contract, invoice and any follow-up all come from HyperledgerIT.

Our team

Behind WordPress Malware Removal is a team of cyber security specialists who spend their days inside hacked WordPress sites. Between them they cover the whole job, from working out how an attacker got in to watching the site for weeks afterwards. Each clean-up is handled by more than one person, so nothing depends on a single pair of eyes.

Malware analysts

Investigate the infection: what was planted, where it hides, and the weak spot that let the attacker in.

Clean-up engineers

Remove malware, backdoors and rogue users from files and the database, then patch, update and lock the site down.

Monitoring team

Check your site every day for 15 days after the clean-up and act quickly if anything returns.

Client support

Your single point of contact, who keeps you updated and walks you through the final report.

Why we only do WordPress

WordPress runs a huge share of the web, and its plugins and themes are where most break-ins start. Attackers know this, and they reuse the same tricks across thousands of sites. Focusing on one platform means our team sees those tricks again and again, and knows where to look for the ones that scanners miss.

How we work

Our specialists do the clean-up, not just an automated tool. We use scanners because they're quick at finding known malware, but the backdoors that cause re-infections are usually the ones no scanner recognises yet. Finding those means reading code.

We quote before we start. You'll know the price, what's included and what isn't before you agree to anything. If the job turns out to be bigger than expected, we stop and talk to you first.

We explain what we did. Every clean-up ends with a written report in plain English, and we're happy to walk you through it on a call.

We stay with you after the clean-up. That's what the 15 days of free monitoring is for.

How we handle your access and data

To clean your site we need logins to WordPress and your hosting. We only use them for the job you've asked for, we don't store them after the work is finished, and we recommend you change them once we're done. Backups we take of your site are deleted at the end of the monitoring period unless you ask us to keep them. Our privacy policy has the details.

Company details

Think your site has been hacked?

Send us the address and a line about what you're seeing. We'll tell you what we think is wrong and what it will cost to fix, before any work starts. Every clean-up includes 15 days of free monitoring.

Get your site checked
Email UsChat on WhatsApp