The Wordfence plugin is a fantastic option for WordPress security.
Steps we recommend you take
- Most important: Keep your site updated with the latest version of WordPress.
- Verify the integrity of your WordPress core files, themes and plugins.
- Scan your WordPress site for signs of malware.
- Protect your WordPress website from brute force attacks that try to break in through automated password guessing.
Like many plugins, there is a premium option that has even more security features you may be interested in.
Check out this video for step by step instructions on Using the WordFence WordPress plugin: