WordPress Security Hardening & Updates

My WordPress site has been running on the same setup for a while and I want to tighten security before anything goes wrong. I need two things handled together:

• A complete site-wide vulnerability assessment. Run a scan, identify weak points, and prioritise what needs fixing.
• Installation and configuration of reputable security plugins. I’m open to Wordfence, Sucuri, iThemes Security or any comparable tool you trust, as long as it is properly configured and documented.

While you’re in the dashboard, please bring both the WordPress core and every active plugin up to their latest stable versions. I expect you to create a full backup first, carry out the updates in a staging or maintenance window, then test the front-end and admin area so nothing breaks.

Deliverables:
1. Backup archive and quick restore instructions
2. Summary report of the vulnerability scan and actions taken
3. List of security plugins added (with key settings noted)
4. Confirmation that WordPress core and all plugins are on the newest versions and the site functions correctly