Really Simple Security
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate generation.
Limit Login Attempts Reloaded – Login Security, Br
Limit Login Attempts Reloaded

Prevents brute-force attacks by limiting login attempts through WordPress login forms, XMLRPC, and WooCommerce.
Jetpack Security
Offers security features like brute-force attack protection, backups, and downtime monitoring as part of the Jetpack suite.
Headers Security Advanced & HSTS WP
Headers Security Advanced & HSTS WP – Simple, Light and Fast. The plugin uses advanced security rules that provide huge levels of protection and it is important that your site uses it. This step is important to submit your website and/or domain to an approved HSTS list. Google officially compiles this list and it is used by Chrome, Firefox, Opera, Safari, IE11 and Edge. You can forward your site to the official HSTS preload directory. Cross Site Request Forgery (CSRF) is a common attack with the installation of Headers Security Advanced & HSTS WP will help you mitigate CSRF on your WordPress site.
Antivirus Security
A lightweight plugin that scans WordPress for malware and malicious code, helping to keep sites secure.
Antispam Bee
A free and privacy-friendly anti-spam plugin that blocks spam comments without captchas.
All In One WP Security & Firewall
A free, user-friendly security plugin that strengthens WordPress sites with firewall, login protection, and security audits.
Akismet Anti-Spam
A popular anti-spam plugin that automatically filters out spam comments and contact form submissions.