WORDFENCE:
With Two million downloads and a rating of 4.9/5, WordFence is one of the most popular WordPress security plugins. It covers login security, IP blocking, security scanning, and WordPress firewall and monitoring.
WordFence starts by checking if the site is already infected. It does a deep server scan of the site’s source code and compares it to the Official WordPress repository for core, themes and plugins.
The plugin is great for beginners and pro users alike.
If you want to secure your website with some more features, then you can also try the premium version of this plugin, which includes country blocking, two-step authentication, scheduled scanning and more.
WORDPRESS SECURITY FEATURES
WORDPRESS FIREWALL
-> Web Application Firewall stops you from getting hacked by identifying malicious traffic, blocking attackers before they can access your website.
-> Threat Defense Feed automatically updates firewall rules that protect you from the latest threats. Premium members receive the real-time version.
-> Block common WordPress security threats like fake Googlebots, malicious scans from hackers and botnets.
BLOCKING FEATURES
-> Real-time blocking of known attackers. If another site using Wordfence is attacked and blocks the attacker, your site is automatically protected.
-> Block entire malicious networks. Includes advanced IP and Domain WHOIS to report malicious IP’s or networks and block entire networks using the firewall. Report WordPress security threats to network owner.
-> Rate limit or block WordPress security threats like aggressive crawlers, scrapers and bots doing security scans for vulnerabilities in your site.
-> Choose whether you want to block or throttle users and robots who break your WordPress security rules.
Premium users can also block countries and schedule scans for specific times and a higher frequency.
WORDPRESS LOGIN SECURITY
-> Sign-in using your password and your cellphone to vastly improve login security. This is called Two Factor Authentication and is used by banks, government agencies and military world-wide for highest security authentication.
-> Enforce strong passwords among your administrators, publishers and users. Improve login security.
Checks the strength of all user and admin passwords to enhance login security.
-> Includes login security to lock out brute force hacks and to stop WordPress from revealing info that will compromise WordPress security.