Harden WordPress Against Bots & Malware

My WordPress installation is buckling under constant bot traffic: the number-of-process and entry-process limits max out, spam registrations pile up, and recurring malware keeps slipping past the single security plugin I currently run.

I’m looking for a seasoned WordPress security specialist who can:

• run a quick but thorough audit to spot every open door,
• clean out any active infections,
• add dependable bot-prevention (rate-limiting, reCAPTCHA, Cloudflare, or your proven method),
• configure continuous malware scanning with automatic alerts, and
• tweak server and WP settings so typical load stays well below limit.

Success is a clean security scan, noticeably lighter server load, and zero spam or malicious files during a short monitoring window after hand-over. If you have recent experience with tools like Wordfence, Sucuri, or similar and can document the changes you make, I’d love to get this wrapped up quickly.