Preserve headers/logos underneath 125 pixels high. It takes up beneficial viewing space, primarily for laptop users, that is ideal left for the good stuff to appear"above the fold." Take a cue from the massive businesses, straightforward logos completed nicely say it all. This is our #1 pet peeve - screaming logos and headers!
Cloning your site is another level in fix hacked wordpress site that can be useful. Cloning simply means that you have backed up your site to a totally different place, (offline, as in a folder, in order not to have SEO issues ) where you can get it at a moment's notice if necessary.
Also, don't make the mistake of believing that your hosting company will have your back so far as WordPress backups go. Not always. It has been my experience that the company may or may not be doing backups, while they say they do. Take that kind of chance?
Keep your WordPress Setup to date - One of the simplest and most valuable tasks you can do yourself is to ensure that your WordPress installation is upgraded. WordPress gives you a notice on your dashboard, so there is really no reason not to do this.
Black and pathological-looking phrases that were whitelists based on which field they appear within, in a page request. (unknown/numeric parameters vs. known informative post post bodies, remark bodies, etc.).
Just make sure you decide on a plugin that is up to date with the version and release of WordPress, and that you may schedule, restore and clone.