What do you do if somebody sends you this message in an email: "your security is crap see you soon via the back door TA TA for now"
The site in question is hosted on a dedicated server, with firewall, from a respectable hosting company who are fanatical about support.