I run an web design agency and for all my clients I use https://www.siteguard.com and since I did I’ve had zero hackings. If you choose not to use a anti-malware provider like Site Guard, make sure you harden your WP plugins, change passwords frequently and upgrade your web hosting.
