Daycare Site Malware & Speed Optimization

My daycare’s website was recently hit by malware. It has been restored and cleaned, yet I want another professional eye on it to be absolutely certain every trace of malicious code is gone. Once the security check is complete, I need the entire site—homepage and every internal page—tuned for loading speed. Right now that is my single biggest performance concern. The website seems to not be loading as quick.

Plugins already in use so you're aware and you can tell me if you plan to use these or something else:
1. WordFence
2. Airlift
3.LiteSpeed Cache

Scope of work
1. Security verification
• Run a full-site scan with your preferred malware-detection tools, manually inspect core files, themes/templates, and the database, then deliver a clean-bill-of-health report (or a list of any lingering issues and how you resolved them).

2. Performance optimisation
• Implement best-practice techniques—caching, image compression, script and stylesheet minification, lazy loading, database cleanup, CDN configuration (if appropriate)—to cut page-load times noticeably across the whole site.
• Provide before-and-after metrics (e.g., GTmetrix, PageSpeed Insights or WebPageTest) so I can see the improvement in real numbers.

Acceptance criteria
• Zero malware found on a final post-work scan.
• Consistent sub-3-second loads for all key pages on both desktop and mobile.
• Clear, step-by-step hand-off notes outlining every change you made so future updates don’t undo the gains.

To be considered, attach a detailed project proposal describing the tools you will use, the sequence of tasks, and an estimated timeline.