Given you go on to mention WordPress.org and even mention a discount for HN users, it feels as though this is a pitch for a specific vendor..? :(
I can see how it looks like a pitch, but in some ways it's an anti-pitch or a pre-negotiation. They specialise in wordpress compromises, we deal with completely different stuff but in the security space. We can deal with your compromised wordpress install but sucuri does this day in day out - we deal more with your network being broken into. I thought it might be good to highlight the poster's speciality in the area, and (cheekily) ask for a HN discount.
Apologies if I've betrayed some HN etiquette here, that was not my intention. For What It's Worth I'll be talking tomorrow at OWASP London about WordPress Security and (again, independently) recommending Sucuri's scanner - it's better than Plecost, not by much, but enough.
Where can we see your talk/slides/etc on WordPress Security (sadly London is no longer home)
thanks,