Clean malware from your WordPress site and secure it

I remove malware from infected WordPress websites and close the vulnerabilities that let it in, not just a surface clean. This includes scanning all core files, plugins, themes, and the database for malicious code, removing infected files, patching the entry point (outdated plugin, weak credentials, vulnerable theme, etc.), and doing a final verification scan to confirm the site is clean. This covers one WordPress site, standard shared/VPS hosting. It doesn't include site rebuilds from total data loss or hosting-level server compromises, I'll flag clearly if that's what's actually happening.