Anyone have a good recommendation…

Anyone have a good recommendation for where to go for WordPress security assistance? I have a client I need to refer, who's been hacked.