In my opinion, the best way to ensure that your WordPress security is through using a fix malware problem backup plugin. This is a fairly inexpensive, easy and elegant to use way to be certain that your site is accessible to you.
Do not depend on your Web host - Many people depend on their web host to"do all that technical stuff for me", not realizing that sometimes, they visit the website do not! Far better to have the responsibility lie with you, instead of out.
Exclude pages - This plugin provides a checkbox,"include this More hints page in menus", which is checked by default. If you uncheck it, the page will not appear Go Here in any listings of webpages (which contains, and is usually restricted to, your page navigation menus).
You can extend the plugin features with premium plugins like: Amazon S3 plugin, Members only plugin, DropShop etc.. So I think you can use it and this plugin is a fantastic option.
Do your homework and some hunting, but if you are pressed for time and want to get this try out the WordPress security plugin that I use. It is a relief to know that my site (and business!) are secure.