Cloning your site is another degree in fix wordpress malware scanner which can be useful. Cloning simply means that you have backed up your website to a totally different place, (offline, as in a folder, in order not to have SEO problems) where you can get it at a moment's notice if necessary.
An easy way to keep WordPress safe is to use a few tools that are built-in. First of all, do not allow people to list the files in your folders, run a web host security scan and automatically backup your whole web hosting account.
Luckily, keeping your WordPress website up-to-date is one of the most easy things you can do. For the last few versions, WordPress has included the ability to install updates. Not only that, but sites are notified whenever a new upgrade becomes available.
BACK UP your site regularly and keep a copy on your computer and storage. Back up daily, For those who have a very active site. You spend a whole lot of time and money on your site, don't skip this! Is BackupBuddy, no other plug-ins back up plugins, widgets, your documents and database. Need to move your site to another server, this will do it in less than a few minutes!
However, I recommend that you set up the Login LockDown plugin as opposed to any.htaccess controls. That will stops login requests from being allowed from a for an hour or so after three failed login attempts. You can still access This Site your admin mobile while from your office, and yet you have protection against hackers if you accomplish that.