Preserve headers/logos underneath 125 pixels high. It takes up beneficial viewing space, primarily for laptop users, that is ideal left for the good stuff to appear"above the fold." Take a cue from the massive businesses, straightforward logos completed nicely say it all. This is our #1 pet peeve - screaming logos and headers!
fix wordpress malware scanner will also tell you that there is not any htaccess from the directory. You can put a.htaccess file if you wish, and you can use it to control access to the directory by IP address or address range. Details of how to do this are available on the internet.
Also, don't make the mistake of thinking that your hosting company will have your back as far as WordPress copies go. Not always. It has been my experience that the hosting company may or might not be doing proper backups, while they say that they do. Take that kind of chance?
Yes, you need to do regular backups of your site. I recommend at least a weekly database backup and you could try here a monthly "full" backup. More. If you make changes and additions to your website, definitely more. If you have a community of people which are in there all the time, or make changes multiple times every day, a daily backup should be a minimum.
If you aren't currently running the latest version of WordPress, upgrade now. Similar to maintaining your door unlocked when you leave for vacation, leaving your site on an old version is.
Whenever your site is new, you do consider needing security but you do need to protect yourself and your investment. Having a site go down and not having the ability to restore it can mean a Recommended Site big loss of customers who probably won't remember to look for your website again later and can't find you. Do not let this happen to you. Back up your site after you get it started, as the website is operational, and schedule regular backups for as long. This way, anchor you will have peace and WordPress security of mind.