Get in touch
Site Recovery Kit — WordPress diagnosis and cleanup after a hack
Findings Plan
WordPress

Site Recovery Kit — WordPress diagnosis and cleanup after a hack

Checks WordPress after a hack: 8 checks, findings in plain words and an 11-step plan. The free version only reads. Pro adds quarantine with undo, core files by checksum, password resets and a daily scan.

Download Free
Pro · one-year licence Staging copies are included. The more sites, the cheaper each one
Compatibility
WordPress 6.2+ · PHP 7.4+ · languages: English, Ukrainian in Pro
Licence
a site + a staging copy, annual
Trial
7 days, no card, one per site
Updated
November 2026
Or all 394 Pro modules with All Access — 4 990 ₴ / year ≈ €98

What Free has,
and what Pro adds

The free version works with no time limit. Pro adds the rest of the features in the table.

Feature Free Pro
8 site checks ✔ ✔
Findings in plain words ✔ ✔
A "This is mine" mark tied to the content ✔ ✔
An 11-step plan ✔ ✔
Changes nothing on the site ✔ ✔
File and folder quarantine with undo — ✔
Health check with auto rollback — ✔
Official core and plugin files by checksum — ✔
Removing admin rights and revoking application passwords — ✔
Cron cleanup, password and salt reset — ✔
A signal when a file comes back — ✔
HTML and JSON report — ✔
Daily scan with an e-mail — ✔

What it looks like

Findings
Scan findings. Test site.
Plan
The action plan in Pro.

Key points

What the scan shows

The scan shows findings in plain words: what was found, why it looks suspicious and what to do.

What the admin gets

In Pro a file goes to quarantine rather than being deleted, and it can be restored.

How much it costs

The base version is free. Pro costs 990 UAH for a one-year licence. A year of updates, technical support and all Pro features.

The trial starts when you ask

A fresh install is the free version, nothing switches on by itself. The “Try Pro for 7 days” button → e-mail → the key right in the window and by e-mail.

One key — a site and a staging copy

Moving the site? Unlink the licence on the old domain and activate it on the new one yourself. A staging copy (staging., dev.) works with the same key and does not take a site slot. For studios — keys for 5 or 25 sites, or unlimited.

Technical requirements

  • WordPress 6.2+, PHP 7.4+.
  • A backup before cleanup.

Version history

v1.0.0 Current November 2026

Checks, findings, a plan.

Frequently bought with Site Recovery Kit

All Access Need more? All modules (394) under one licence, new ones are added automatically. 4 990 ₴≈ €98 Learn more →

Full module description

Site Recovery Kit helps you see what happened to a WordPress site after a hack and clean up step by step.

What the scan shows

The scan shows findings in plain words: what was found, why it looks suspicious and what to do. You can mark your own file as “This is mine”, and the mark is tied to the content. The 11-step plan leads from diagnosis to the finish.

What the admin gets

In Pro a file goes to quarantine rather than being deleted, and it can be restored. After an action a health check tests the site and rolls back if the site fell. Password and salt resets need a typed confirmation word.

How it works, step by step

  1. You run the scan.
  2. You read the findings and mark what is yours.
  3. You follow the plan.
  4. In Pro you run actions with quarantine and rollback.
  5. A daily scan watches for returns.

Under the hood

  • The free version writes nothing to the site except its own settings.
  • Files are compared with wordpress.org checksums.

How to install

  1. Plugins → Add New → Upload Plugin: pick the zip and activate.
  2. Open Site Recovery Kit in the admin menu and run the scan.
  3. For Pro: paste the key or start the 7-day trial.

The module is not on wordpress.org yet: the free version and Pro are one archive from this page. Without a key it works as the free version.

Questions
about the module

Didn't find the answer? Message us on Telegram and we'll reply within a business day.

@catcode_support Setup, compatibility, activation
Will the plugin remove malware by itself?

The free version changes nothing. Pro runs the actions you confirm.

Can an action break the site?

Each action has a rollback, and a health check tests the site.

Is there Ukrainian?

Yes, in Pro.

Not quite what you are looking for?

We build custom modules for WordPress, WooCommerce, OpenCart and Shopify. Tell us about the task and we'll prepare an estimate.

Order a custom module