I am handling a WP security product, so I have an interest here. I will not name it or link it, and I am not asking you to try anything.

---

I want to understand one thing: how the security decision gets made for client sites at agencies and freelancers.

1. How do you decide to trust one vendor over another? What do you check before it goes on a client site?
2. Does a reseller or affiliate margin change which one you pick, or does it not matter?
3. When a hack or a blacklisting happens, how do you handle the cleanup? Outsource it, your own team, or resell an existing service to the site owner?