Cloning your website is another level in fix wordpress malware plugin which may be useful. Cloning simply means that you've backed up your website to a completely different location, (offline, as in a folder, so as not to have SEO issues ) where you can access it at a moment's notice if the need arises.
An easy way is to use a few built-in tools. First of all, don't allow people run over at this website a web host security scan to list the files in your folders and automatically backup your web hosting account.
I don't think there is a person out there that after learning how much of a problem WordPress hacking is that it is a good idea. Something I've noticed through the years is that when it comes to securing their blogs, bloggers seem to be stuck in this reactive state.
Install the WordPress Firewall Plugin. This plugin investigates web requests with WordPress-specific heuristics that are easy to identify and stop attacks.
Just make sure that you may schedule, and you choose a plugin that is current with release and the version of WordPress, restore and replicate.