You should have had DK Smith from WPSecurity.com. He and his team know more about WordPress security than anyone.