WordPress Security Assessment, Multi-Site Remediation, and Clean Website Rebuild

I am requesting an estimate for a whole-account WordPress security assessment and the clean rebuilding of one compromised website.

My WebHostingHub/cPanel account contains five domains:

• arealwholelot.com — document root: /public_html
• kaneconsultingandcoaching.com — document root: /public_html/kaneconsultingandcoaching.com
• doctoralsuccess.com — document root: /doctoralsuccess.com
• finisheddissertation.com — document root: /finisheddissertation.com
• jakproductions.biz — document root: /jakproductions.biz

WebHostingHub confirmed that arealwholelot.com was compromised. A support representative found substantial malicious base64 code in its wp-config.php file. The host reinstalled the WordPress core files, but the problem persisted. The host did not perform a complete malware scan, identify all affected files, or determine how long the infection had been present.

Although the sites use separate WordPress installations, Kane Consulting and Coaching is nested beneath /public_html, and all five sites share the same hosting account. I therefore need the entire account examined—not only the known infected wp-config.php file.

I have a full cPanel account backup created on August 16, 2026. It is a 3.65 GB preservation snapshot stored locally and in Dropbox. Because it was created after the compromise was discovered, I am treating it as potentially infected and will not restore or share it except through an agreed secure process.

Please provide an itemized estimate addressing:

• A security assessment and malware scan of the entire hosting account, including all five sites, databases, wp-config.php and .htaccess files, administrator accounts, themes, plugins, uploads, cron jobs, and other persistence mechanisms.
• Safe containment of arealwholelot.com without disabling or damaging kaneconsultingandcoaching.com or the other sites.
• Identification and remediation of any compromise found in the other WordPress installations or elsewhere in the hosting account.
• A fresh rebuild of arealwholelot.com using a clean WordPress installation, freshly obtained themes and plugins, and only scanned and validated content recovered from the old site.
• Security hardening, including credential rotation guidance, new WordPress salts, multifactor authentication where available, removal of unused accounts and software, firewall or monitoring recommendations, and properly configured off-site backups.
• Post-remediation testing and written confirmation that the rebuilt site and the other installations have passed malware scans.

Please also include:

• Your proposed approach: cleaning the existing ARWL installation, rebuilding it, or both—and why.
• The estimated schedule.
• Itemized one-time charges.
• Any required subscriptions or continuing fees.
• What access or credentials you would require and how they would be transmitted securely.
• What reports or documentation I would receive.
• Whether you provide a remediation warranty or follow-up period if malware reappears.
• Your experience handling compromised WordPress accounts with multiple sites under one cPanel account.