You should ALWAYS backup your site to prevent data loss. Even if your host makes backups of your website, you should still backup your own site. To ensure that your site is secure at all times, you do the below. - Use secure passwords - Remove any FTP accounts that are no longer being used - Make sure all your scripts are up to date Also, not sure if your host would be able to do this, but many hosts such as ours, can perform detailed security audits of your account if you request it. Get in contact with them and see if they can check your security.