Emergency Response

Got Hacked? Call CraftKnight

Emergency website security response — cleanup, recovery, and hardening within 24 hours. Response same day.

Signal craftknight.01 sos [at] craftknight.com

Send me: your site URL, what happened, when you noticed it. Full checklist

How It Works

  1. 1

    Send Me the Details

    Signal or email with your site URL, what happened, and when you noticed it. Full checklist

  2. 2

    I Assess & Quote

    I review the situation and send you a fixed price. Same day.

  3. 3

    50% Upfront

    Payment via Stripe. Work begins immediately after.

  4. 4

    Cleanup & Hardening

    Site cleaned, secured, and hardened within 24 hours.

  5. 5

    Remaining 50% & Report

    Final payment, then full postmortem report delivered. Can't fix it? Full refund.

Situations I Handle

Malware injected into your WordPress or WooCommerce site

Admin access stolen or locked out of your own site

Google flagged your site as dangerous

Spam pages appearing under your domain

Site redirecting visitors to scam pages

Card skimmer or malicious code injected into your e-commerce checkout

Backdoors, webshells, and persistent infections that keep coming back

Website defaced — homepage replaced with attacker's message

Real Incident

E-Commerce Under Active Attack

3
attack layers
1,387
botnet IPs
13+
casino domains injected
10
operator IPs across 8 countries

A WooCommerce store compromised through a fake plugin deploying data exfiltration, SEO spam injection, and persistent webshell access. A 1,387-node proxy botnet provided cover while the operator worked from 10 IPs across 8 countries. The botnet has been neutralized.

Read the full anonymized postmortem

Pricing

Emergency Cleanup

€1,500–2,500

Standard infections, no active adversary.

24h turnaround
  • Malware removal & access restoration
  • Basic security hardening
  • Incident summary report
Get Emergency Help
Most Common

Full Incident Response

€3,500–5,000

Deep multi-layer malware hunting. The core offering.

12–20h engagement
  • Deep multi-layer malware hunting
  • Full security hardening + WAF/Cloudflare
  • Detailed postmortem with timeline & IOCs
  • 30 days monitoring
Get Emergency Help

Critical Response

€5,000–10,000+

Highest stakes. Active adversary engagement.

Full engagement
  • Everything in Incident Response
  • Credential recovery chains
  • Active adversary engagement
  • Email migration & DNS overhaul
  • SEO spam cleanup
  • 3–6 month monitoring + priority response
Get Emergency Help

For Agencies

You handle the client relationship. I handle the incident. Deliver a professional postmortem report under your brand.

White-Label Incident Response

  • White-label reports — your branding, your client, my work
  • Detailed postmortem with timeline, IOCs, and remediation steps
  • NDA-ready — full confidentiality guaranteed
  • Flexible engagement: one-off or ongoing retainer
Let's Talk

Message me anytime.
Response same day.

If I can't fix it, you don't pay.