You make a big point of how many websites SiteLock is supposed to be protecting, but from what we have heard it sounds like a lot of their customers have been given some free SiteLock service, which they may not even be aware of, with their hosting account. It seems the purpose of that is so that SiteLock has a relationship with them that they can use to cold call them. Were you given any indication of how many of the websites they are supposed to be protecting are paying for the service and what kind of service they are getting, since a lot of their services don't seem to offer much, if any, protection?

Also, websites running WordPress 3.7 or above would normally get security vulnerabilities in WordPress patched automatically without requiring any additional service due to the automatic background updates feature in WordPress.