If you're looking at your Host to give you assurances with your website security, you shouldn't.. I explain why here.. http://tonyonsecurity.com/2014/11/07/how-hosts-manage-your-website-security/