Year and a half taught us that WordPress security shouldn't be taken lightly by any means. Between 15% and 20% of the world's high traffic sites are powered by WordPress. The fact that it is an Open Source platform and everyone has access to its Source Code makes it a prey for hackers.
Cloning your site is just another degree in rename your login url to secure your wordpress website which can be very useful. Cloning simply means that you've backed up your website to a completely different location, (offline, as in a folder, in order not to have SEO problems) where you can get it in a moment's notice if necessary.
I might find it a little harder to crack your password, if you're one of the ones that description are proactive. But if you're one of those ones that are reactive, I might just get visit this website you.
It's a WordPress plugin. They are drop dead easy to install, have all the features you need for a task like this, and are relatively inexpensive, especially when compared to having to employ someone to get this done for you.
Install the WordPress Firewall Plugin. This plugin investigates web requests with WordPress-specific heuristics that are easy to identify and stop attacks.
Do not use wp_. Most web hosting providers are eliminating that default but if yours does not, fix wp_ check these guys out to anything but that.