Automatic WordPress malware cleanup

Hacked WordPress site?
Kornet cleans it — automatically.

We scan every file and your database, remove the malware, and show you exactly what we did — in minutes, not days. No queue, no waiting on a human.

Start the free scan See how it works
No card, no upfront cost — you only pay $70 if we find malware.
Everything backed up first Full report included
A Kornet report showing a clean WordPress site — all clear, every file scanned, with a downloadable pre-scan backup

“We built Kornet because getting hacked shouldn’t mean days of panic, a wall of jargon, or a $300 emergency bill from someone you’ve never met. It should mean one button, a few minutes, and your site clean again — with a copy of everything from before, in case you ever need it.”

— The Kornet team

How it works

A few steps. Free to scan — you only pay if we find something.

It's self-served and fully automatic — no calls, no tickets, no security expertise required.

1Sign in — no card

Free to start.

Create an account and connect your site — takes about a minute.

No card and no charge to scan. You only enter payment if we find malware or something that needs a closer look.
Kornet sign-up screen — create your account with first name, last name and email, no card required
2Connect your site

Two ways in — your choice.

Share your FTP/SFTP details and Kornet installs a tiny helper automatically — or download the connector file and drop it in yourself. Either way takes a minute.

Your password is encrypted in transit, used only for this cleanup, and never stored. The helper is removed at the end — and removes itself automatically as a backstop.
Kornet connect step — enter FTP details or upload the connector file yourself
3Free scan → pay only if we find something → clean

You decide before we charge anything.

We scan every file and your database — for free. If it's clean, you're done. If we find malware, we show you exactly what and ask for a one-time $70 at checkout before doing anything. Approve it, and we clean the site automatically. You don't have to watch — close the tab and come back anytime.

Payments are handled securely by Stripe. We never see your card details.
Everything we change is saved first — and you can download a copy of your site's files from before the cleanup.
4Get your report

See exactly what happened.

A clear report shows everything that was found and cleaned across your files and database — plus anything that still needs your eye, spelled out in plain English. Download a copy of your site's files from before the cleanup, so you have a record for your host, Google, or a client.

Want something restored? We keep the before-and-after copies — email us and we'll put it back.
Kornet report — your site is clean, with files scanned, threats removed and database cleaned
More than a delete

We don't just remove one bad file.

A real infection hides in more than one place. Kornet hunts the backdoor disguised as a WordPress core file, the malicious code slipped into your theme, and the spam quietly injected into your database — and shows you everything it found.

Finds the hidden backdoors

Webshells and malicious code buried inside legitimate files — found and removed, not just flagged.

Cleans your database too

Spam and malicious scripts injected into your posts, pages, and settings are removed — not just the infected files.

Locks out compromised admins

Every existing admin is dropped to a limited role, and you get a fresh admin login — so a hijacked account can't let anyone back in.

Verifies your core is genuine

Suspicious WordPress core files are checked against the official WordPress.org release, so a tampered file can't hide in plain sight.

Pricing

Free to scan. $70 if we find something.

No subscription, no renewals, no tiers to decode. Clean what you need, when you need it.

No subscription
$70one-time, per site — only if we find malware

WordPress malware cleanup

Everything it takes to get one hacked WordPress site clean again.

  • Full scan of every file and your database
  • Automatic removal of the malware we find
  • A clear report of everything found and removed
  • Everything backed up before we touch it, with a downloadable copy of your files
Start the free scan
Unusually large or heavily infected sites may cost more — we always show the total before charging.
KornetTypical malware-removal service
How fastMinutes, automaticHours to days in a queue
Price$70, one-time$150–$1,250 / year subscription
When you payOnly if we find malwareUpfront, before any work

Comparison reflects typical published prices of common one-time and subscription cleanup services.

How fastMinutes, automaticTypical service: hours to days in a queue
Price$70, one-timeTypical service: $150–$1,250/year subscription
When you payOnly if we find malwareTypical service: upfront, before any work

Honest, in writing.

If something isn't right after a cleanup, email us within 7 days. Refunds aren't automatic — we review every request based on what was and wasn't cleaned. Read our refund policy →

FAQ

Questions, answered.

What if you don't find any malware — or you do?
No card upfront, ever. If the scan is clean, you pay nothing. If we find malware, we show you exactly what and ask for a one-time $70 (more only for unusually large or heavily infected sites) at a single checkout. Approve it and we clean; decline and you walk away at no cost.
What if my site is very large or badly infected?
$70 covers most sites. Very large or heavily infected sites take more processing, so they can cost more — we always show the exact total before charging, and you decide whether to continue.
How long does it take?
Most scans finish in minutes. A full cleanup on a larger site can take up to an hour if we find malware.
Is it safe to share my FTP details?
Yes — they're encrypted in transit, used only for this cleanup, and never stored on our servers. The helper file removes itself automatically once it's done. Prefer not to share credentials? Download the connector file and install it yourself.
Is this only for WordPress? What about broken sites?
Kornet is built specifically for WordPress, and each cleanup covers one site (run as many as you like). It removes malware — it doesn't repair broken websites. If we detect your site may already be broken, we tell you before continuing; proceeding is your choice and isn't eligible for a refund. The wizard, report, and support are in English today.
Can I get a refund? Can I undo the cleanup?
Before anything is charged, there's nothing to refund. After a cleanup, email [email protected] within 7 days — we review each request and may issue a full or partial refund. Need something restored? Download your pre-cleanup files from the report, or email us. See our refund policy.

Get your WordPress site clean.

Hacked sites lose traffic and trust every day they stay that way. Start your free scan now — no card required.

Start the free scan
WordPress · files + database · one-time, no subscription