Hacked or broken website? Fixed first. Paid after.

Send me the address and what you see. You get the likely cause and a fixed price before any work starts, and you pay for the repair once it's verified working.

Vlad BellomorskiDeveloper in Vienna. You write to me, not to a ticket queue. About me

What are you seeing?

Hacked, spam or redirects Joomla compromised An update broke it Checkout failing Old Joomla or PHP errors Not sure
Describe the problem, free

Each symptom opens the matching service with its price. No account, no passwords, no obligation.

Free website check

Tests your address against 90+ antivirus engines, blocklists and dynamic security tools, then matches the software versions your site exposes to recent exploits.

Only the homepage address is checked. Results appear in your browser; no email needed.

  • Pay after the fixRepairs are invoiced once they are verified working.
  • Fixed price firstScope and price agreed before any work starts.
  • WordPress and JoomlaIncluding legacy Joomla and PHP upgrades.
  • Austrian businessVienna, UID ATU75839407. Proper invoices.

Services

What's happening to your website?

All services and prices
First assessmentDescribe the problem and get the likely causeFreeFree Technical assessmentA paid diagnosis when the cause can’t be scoped from symptomsDiagnosisfrom €95 Maintenance & careUpdates, backup checks and priority help, defined in writingCarefrom €149/mo Hacked, redirected or showing spamMalware, browser warnings, unknown pages or administratorsWordPressfrom €690 Joomla site may be compromisedInjected files, abandoned extensions, unknown changesJoomlafrom €690 An update broke the siteBlank screen, critical error, broken login or featuresRecoveryfrom €390 Customers can't complete ordersPayment gateway, cart, session or order-status failuresWooCommercefrom €390 Legacy Joomla is holding you backPHP compatibility, old templates, unmaintained extensionsLegacyFixed quote It works, but it doesn't feel safeAccess review, hardening, backup checks, exposure reductionSecurityFixed quote

Not sure which applies? Describe what you're seeing

How it works

You pay when it works. Not before.

Every repair follows the same four steps, so you always know what happens next and what it costs.

  1. Tell me what's wrong

    The address, what you see and how urgent it is. No access or passwords at this stage.

    Free

  2. Get a fixed price

    I reply with the likely cause, the scope and a fixed price. Nothing starts without your OK.

    You decide

  3. Repair and verify

    I fix the cause, not just the symptom, with backups and rollback in place, then test login, forms and checkout.

    The work

  4. Invoice after it works

    You pay for the repair once it's verified working, and you get written findings, including any remaining risks.

    Then you pay

If the cause can't be scoped from the symptoms, I'll propose a paid diagnosis first (from €95), again only with your approval. See all prices

The person behind the work

Your website isn't a ticket number.
Neither am I.

I'm Vlad Bellomorski, a developer based in Vienna. My background is software development, technical architecture and open-source work. I repair WordPress and Joomla sites remotely for clients in Austria, Germany, Switzerland, Bulgaria and the rest of the European Union.

I tell you what is actually wrong, what it will cost and what risks remain. If something can't be fixed safely, you hear that before you pay for anything.

About me and public workGitHub ↗LinkedIn ↗
Vlad Bellomorski
Vlad Bellomorski
VirtuaWorx.Net Services
Gumpendorfer Strasse 140, 1060 Vienna, Austria
UID ATU75839407Impressum

Security note / Oct 2026

A working website can still be exposed.

Recent flaws in PHP, WordPress core and Joomla's JCE editor can let attackers reach server-side code without a login. Whether your site is affected depends on its versions and server setup.

Keeping your CMS, plugins and PHP updated is a duty of care: NIS2 makes patching mandatory for covered organisations, and GDPR requires appropriate security wherever a site handles personal data.

PHP2ShellCVE-2026-109618 / 109619 · PHP runtime WordPress WP2ShellCVE-2026-63030 / 60137 · WordPress core Joomla / JCECVE-2026-48907 · JCE editor What the 2026 EU rules mean for CMS sitesEU CRA / NIS2 · GDPR · update duty

Read the full security briefing · Run the free check

Questions

Before you get in touch

What does it cost?

Starting prices: a critical website fix from €390, malware cleanup and hardening from €690, a technical diagnosis from €95 when the cause can't be scoped from symptoms. You get your fixed price with the scope, and repairs are paid after they work. See pricing

Do I need to send passwords?

No. The first message only needs the website address and a description. If access is needed later, we agree a secure way to share it, limited to the job and revoked afterwards.

When exactly do I pay?

Repairs are invoiced after the fix is verified working. If a paid diagnosis is needed first, you approve it and its price before it starts.

What if the site can't be fixed?

Then you don't pay for a repair. You get an explanation of why, and the realistic options, such as restoring a clean backup or rebuilding the affected part.

How quickly will you reply?

Enquiries are answered on working days in order of urgency. Choose the urgency in the form; a site that is down or hacked is handled first.

Can you work with my hosting provider?

Yes. I work remotely with the access you grant, and can explain the findings to your host when the cause is on their side, for example an outdated PHP version.

Do you offer ongoing maintenance?

Yes, from €149 a month: updates, backup checks and priority help, defined in writing. See what maintenance covers

Tell me what broke. Not your passwords.

The address and a plain description are enough. You'll get the likely cause and a fixed price, and you pay for the repair after it works.

Describe the problem Run the free checksupport@virtuaworx.net