Okay, you got me: WordPress security isn't the sexiest way to spend your time, but it could end up being one of the most profitable! Nothing is more caustic to the lining of your stomach than having your site go down, and wondering whether or not you've lost it all.
I back up my blogs regularly using a plugin WP DB Backup. If anything happens I will always restore my blog. I use my site to be scanned by WP Security Scan plugin regularly and asks to be blocked by WordPress Firewall to fix wordpress malware protection.
Also, don't make the mistake of believing that your hosting company will have your back so far as WordPress copies go. Not always. It's been my experience that the hosting company may or may not be doing backups, while they say that they do. Take that kind of chance?
This is very handy plugin, protecting you against investigate this site brute-force strikes that are password-crack. It keeps track of the IP address of every failed login attempt. You can configure the plugin to disable login attempts when a certain number of attempts is reached.
BACK UP your site regularly and keep a copy on your own computer and off-site storage. Back up every day if you have a website that is very active. You spend a lot of time and money on your site, do not skip this! The one complete solution that does it all is BackupBuddy, no additional plug-ins back up database, widgets, plugins and your files. Need to move your site to another host, this will do it!
Using a plugin for WordPress security makes sense. WordPress backups need to be carried out on a regular basis. Don't become a victim because of not being proactive!