The verdict in three sentences
An abandoned B2B website can almost always be recovered if you work in the right order: secure the domain and email first, regain hosting access, then audit before deciding anything. Budget 2,000 to 5,000 EUR for a takeover audit and 2,500 to 7,000 EUR for security hardening as a 2026 Berlin market ballpark (net of VAT). A full rebuild, around 18,000 EUR, only makes sense when the audit finds an unsupported stack or unreadable custom code.
The first 72 hours
The real danger is the domain. If your .de domain is registered through the agency's reseller account and payments stop, both the website and company email can go dark. For a Mittelstand supplier, a few days without email can stall orders and tender responses.
Check the DENIC domain query for your .de domain to see which registrar manages it, then gather contracts, invoices and correspondence proving the site was commissioned and paid for by your company. Send a formal written demand (with a deadline) for the AuthInfo code, hosting credentials and source files.
| Asset to recover | Where to look | Realistic timeline |
|---|---|---|
| Domain AuthInfo code | Registrar, DENIC for .de | 5 to 30 days |
| Hosting and database access | Hosting provider, invoices | 2 to 15 days |
| CMS admin accounts | Agency, or reset via hosting | 1 to 5 days |
| Source code and custom theme | Server, Git repository if any | Immediate with server access |
| Search Console and analytics | Add a new verified owner | 1 to 2 days |
| Paid plugin licences | Vendors, with proof of purchase | 3 to 10 days |
| Company email tied to the domain | Email provider | Top priority |
If the agency itself is listed as domain holder and stays unreachable, DENIC has its own procedures, including the DISPUTE entry. Conditions and timeframes are set in DENIC's terms, so check them at the source rather than relying on secondhand figures.
What a takeover audit covers in Germany
Beyond CMS and PHP versions, abandoned plugins, known vulnerabilities and performance, a Berlin audit must cover compliance. Your Impressum must be complete and reachable, and DSGVO compliance is often broken on neglected sites: Google Fonts loaded from external servers, analytics firing before consent, an outdated privacy policy, contact forms without a data processing notice. German businesses also face cease and desist letters (Abmahnungen) from competitors or associations over such gaps, which makes fixing them commercially urgent.
| Audit or work package | Scope | Indicative price (net) |
|---|---|---|
| Express audit | Inventory, critical vulnerabilities, full backup | 2,000 EUR |
| Standard audit | Express plus code review, DSGVO, performance | 3,200 EUR |
| In-depth audit | Standard plus costed takeover plan and docs | 5,000 EUR |
| Light hardening | Updates, hardening, automated backups, consent fix | 2,500 EUR |
| Heavy hardening | PHP migration, plugin replacement, clean-up | 7,000 EUR |
| Full rebuild | New site on a clean stack | 18,000 EUR |
Recover or rebuild
Recovery pays off when the site is under five years old, runs on a mainstream CMS and the custom code is readable. It stops making sense when the site depends on an undocumented in-house framework, an end-of-life CMS version, or when hardening exceeds about 40 % of a rebuild. Then start fresh, migrate content and preserve rankings with a redirect map.
Whatever you choose, write reversibility into the next contract: domain in the company's name, admin access handed over at launch, code in a repository you own, minimal documentation. As a nearshore benchmark, Kolonell's prices are 53 EUR a month for Basic maintenance and 114 EUR for Standard, with a Growth rebuild at 1,830 to 3,050 EUR.
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Illustrative example: Jonas, managing director of a 45-person industrial automation supplier in Berlin, realises his agency has been silent for five months and the domain renews in six weeks. The site brings about 20 RFQs a month, 3 of which convert at an average 8,000 EUR gross margin.
He orders a standard audit at 3,200 EUR and light hardening at 2,500 EUR, 5,700 EUR in total, which also fixes the consent banner and the self-hosted fonts. One month offline would have cost around 24,000 EUR of margin, and a single Abmahnung can easily run into the low thousands in legal fees. The 18,000 EUR rebuild moves to next year's budget.
FAQ
Do we own the website if we have no logins?
Usually the paid content and design are yours under the contract, but rights to custom code depend on the licence clauses. Have a lawyer review the contract first, typically a 1 to 2 hour job.
How long does it take to recover a .de domain?
Between 5 and 30 days if the holder cooperates. Without cooperation, DENIC's dispute route takes longer and follows its own rules.
Can we take over without the source code?
With server access, the code is almost always there and can be copied in a few hours. With no access at all, you are rebuilding, closer to 18,000 EUR.
Is an audit worth it if we plan to rebuild anyway?
Yes, an express audit at around 2,000 EUR backs everything up, captures traffic data and lists URLs to redirect so rankings survive.
What should the next contract include?
A reversibility clause with access handed over within 8 days on request, the domain in your company's name and code in your own repository. These cost nothing to negotiate up front.
Let's scope your project. Tell us what you still control (domain, hosting, CMS) and your deadline, and we will price the audit, hardening or rebuild with a recovery plan. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.