WordPress Security Scanner might be a bit more popular than Duplicator Pro. We know about 1 link to it since March 2021 and only 1 link to Duplicator Pro. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
2, The logical way would be to develop the site on a staging/ dev server then move it to their live site when ready. A few things, again, need to be considered, but, for a straightforward swap, you can use a plugin like Duplicator Pro to 'duplicate' your updated version and overwrite the live site when ready. Source: over 2 years ago
I had my website deployed as a virtual host using web station. Then I moved it into a virtual DSM where I setup web station and backends etc. Exactly the same (restored a hyper backup of web station and website files/databases into the VM then uninstalled same from the main NAS). Then to get to it over the web, my NAS has a reverse proxy that routes the traffic to the VM. The way it's setup the only port that will... Source: almost 2 years ago
UpdraftPlus - UpdraftPlus is a WordPress backup plugin.
Marshal - Quickly scan your cloud for exposed sensitive information.
All-in-One WP Migration - Migrating WordPress sites is a challenging and growing process.
Trustpage - Building trust with customers just got easier
WPvivid Backup - Wordpress Developer
The Security Checklist - The Practical Security Checklist for Web Developers