Cloning your site is just another level in rename your login url to secure your wordpress website which may be very useful. Cloning simply means that you've backed up your website to a completely different place, (offline, as in a folder, so as to not have SEO problems) where you can access it at a moment's notice if necessary.
After spending a couple of days and hitting several spots around town, I finally find a cafe that offers free, unsecured Wi-Fi and to my pleasure, there are a ton of folks sitting around each day connecting their laptops to the"free" Internet services. I sit down and use my handy dandy cracker tool that is Wi-Fi and log . Bear in mind, they are all on a network that is shared.
Exploit Scanner goes through the files on your site post, comment and database tables continue reading this in search of anything suspicious. It informs you for plugin names that are unusual. It doesn't remove anything, it warns you.
You can extend the plugin features with premium plugins like: Amazon S3 plugin, Members only plugin, DropShop etc.. So I think you can use it for free and this plugin is read a good choice.
Don't use wp_. Most web hosting providers are eliminating that default now but if yours doesn't, adjust wp_ to anything but that.