The WordPress Developer’s Guide to Security: Security & Backup Plugins

as well as Understanding the WordPress Security Plugin Ecosystem