Malware Cleanup & Ongoing Security

My site half-way-there.co.uk was taken offline by my UK host after it started broadcasting attacks. I need the infection completely removed and the core CMS, plugins, themes and server-side code cleaned so the host will re-enable the account. Once the immediate threat is gone, I also want regular security updates and monitoring so I am not caught out again. If you can set up automated scans, timely patching and a simple monthly report, that would be ideal. I do not yet have any formal compliance obligations, but please build the solution so it can be tightened later should specific requirements arise. Key outcomes I expect: • All malware, backdoors and suspicious files eradicated • Clear documentation of what was found and fixed • Hardening of WordPress, server configs and user credentials • Host confirmation that the domain is safe and reinstated • Ongoing monitoring plan with update schedule and reporting format agreed Please outline your approach, approximate turnaround to get the site live, and the tools you prefer (e.g. Wordfence, Sucuri, ClamAV, Imunify360).