Updates, login protection, backups and a malware scan for a site that isn't on our plans, with a short report.
One-time setup
The protective work every site should have had on day one: login protection, correct file permissions, disabled unused protocols, and hardened configuration. One-time setup, priced on request.