Having repaired and security-hardened over 1000 websites in the last 4 years we prefer “prevention” over “repair”. A hack is never pretty.
The online security landscape is in constant flux, with hackers becoming increasingly clever at cloaking their methods. Often businesses won’t know they’ve been hacked until they find out that Google has blacklisted their site.
Getting off a blacklist can take time and do a lot of damage, not only to your reputation, but cash flow and potentially lost or compromised data.
Getting hacked is painful, it is absolutely worth the investment in proactive website security.