I watched a few YouTube videos on security in WordPress and if you think all you need to do is install a WordPress plugin (as these videos suggested) I highly recommend coming to this talk.
There is a lot more than just installing a plugin to secure a site, there are tools like using CloudFlare, using an actual firewall, etc.
I’ll walk you through a lot of things I do for the couple hundred sites that I host.