Wordfence is one of the big players in terms of WordPress security plugins. The plugin combines a variety of configurable security features - even in the free version. It has a good firewall and essential functions to make your WordPress more secure.