Sitelock is a ripoff they took advantage of me and refused to fix it, Internet

I was hacked causing my website to go down so I contacted my hosting company which recovered the files and my site was back up.  

I paid SiteLock for
protection however found out apx. a week later after they called me that what I purchased only covered 25 pages of my site, they offered another service for $400.  I felt that I needed to think about what the salesman told me before buying anything however apx. a week or so after they called my site was hacked again.  

I contacted Sitelock back asking why my protection did not catch the hack and they said it would be $800 now to clean and secure my site from future hacks.  I paid them thinking I was protecting my site and business.  Approximately a day later my website was back up for about 24 hours and was re hacked taking it down.  

I contacted Sitelock again and they said the site was hacked in between cleaning the site and securing it which I paid them to do both.  Monday I received an email stating that I must had been confused about what I paid them to do and that they had performed the work of cleaning the site but it had been re hacked before they secured it.  They then suggested that I pay $500 (now up to $1600) more for a maintenance plan or I would just get re hacked.  

At this point it is obvious what they are doing which is ripping me off.  I asked for a full refund how ever after talking to several people including management they still claim that they can't refund the $400 for the clean because the work was done which lasted all of apx. 24 hrs.  The last manager stated he would send an email that I could reply to approve the refund but still not email.  I contacted them back and got the same run around.  

My main issue is that they were paid to clean and secure the site for future hacks.  They cleaned it and put my site back up vulnerable to get hacked again which I feel was nothing more than a way to convince me to buy another $500 service.  They never asked me if I wanted my site back up after cleaning it they just put it back up vulnerable.  If they would have I would have suggested leaving it down until they secure it from future attacks.  They made it sound like I was protected once I paid for both the clean and secure.   As of the time I filed this I still have not received the refund I requested.