WordPress Security Assessment, Multi-Site Remediation, and Clean Website Rebuild

I am requesting an estimate for a whole-account WordPress security assessment and the clean rebuilding of one compromised website.

My WebHostingHub/cPanel account contains five domains:

arealwholelot.com — document root: /public_html

kaneconsultingandcoaching.com — document root: /public_html/kaneconsultingandcoaching.com

doctoralsuccess.com — document root: /doctoralsuccess.com

finisheddissertation.com — document root: /finisheddissertation.com

jakproductions.biz — document root: /jakproductions.biz

WebHostingHub confirmed that arealwholelot.com was compromised. A support representative found substantial malicious base64 code in its wp-config.php file. The host reinstalled the WordPress core files, but the problem persisted. The host did not perform a complete malware scan, identify all affected files, or determine how long the infection had been present.

Although the sites use separate WordPress installations, Kane Consulting and Coaching is nested beneath /public_html, and all five sites share the same hosting account. I therefore need the entire account examined—not only the known infected wp-config.php file.

I have a full cPanel account backup created on August 16, 2026. It is a 3.65 GB preservation snapshot stored locally and in Dropbox. Because it was created after the compromise was discovered, I am treating it as potentially infected and will not restore or share it except through an agreed secure process.

Please provide an itemized estimate addressing:

A security assessment and malware scan of the entire hosting account, including all five sites, databases, wp-config.php and .htaccess files, administrator accounts, themes, plugins, uploads, cron jobs, and other persistence mechanisms.

Safe containment of arealwholelot.com without disabling or damaging kaneconsultingandcoaching.com or the other sites.

Identification and remediation of any compromise found in the other WordPress installations or elsewhere in the hosting account.

A fresh rebuild of arealwholelot.com using a clean WordPress installation, freshly obtained themes and plugins, and only scanned and validated content recovered from the old site.

Security hardening, including credential rotation guidance, new WordPress salts, multifactor authentication where available, removal of unused accounts and software, firewall or monitoring recommendations, and properly configured off-site backups.

Post-remediation testing and written confirmation that the rebuilt site and the other installations have passed malware scans.

Please also include:

Your proposed approach: cleaning the existing ARWL installation, rebuilding it, or both—and why.

The estimated schedule.

Itemized one-time charges.

Any required subscriptions or continuing fees.

What access or credentials you would require and how they would be transmitted securely.

What reports or documentation I would receive.

Whether you provide a remediation warranty or follow-up period if malware reappears.

Your experience handling compromised WordPress accounts with multiple sites under one cPanel account.