Best Security for WordPress?

I am currently using Wordfence, but at my current CW hosting server, they have to disable Varnish Cache because for some reason it conflicts with Wordpress.

When Varnish is turned on, my site gives 'Forbidden' errors, but the site does load quickly when it does work.

When Varnish is turned off, my site suffers from extreme slow loading symptoms (takes 20+ seconds to load home page).

So, I need to find an alternative to Wordfence.

Any help would be appreciated.

Thanks,

iThemes Security beats everything.

Thanks, just installed it!

Use Sucuri and IP Based Login WordPress plugin.

Limit login attempts plugin also works great to prevent Brute force attacks. These are the light-weight yet effective plugins. If you are on a shared server.

BulletProof Security?

ID Internet Marketer said:

BulletProof Security?

Code:

https://wordpress.org/plugins/bulletproof-security/

Click to expand...

This is a good one, definitely one of the top 5.

No need any resources....just 'change permission' your login.php file (from control panel) to 000 when you have entry to your dashboard until logout. No more backdoor. However, when you need to login again, you should start from your control panel and changes back login.php to 644....after that repeat above step.

Wordfence, iThemes Security and Sucuri are my main choices for my blogs.

Here's a list of 6 Best Security Plugins to improve your WordPress website's security.
iTheme Security
iTheme security formerly known as Better WP security is one of the most popular and the best WordPress security plugin. The plugin provides you 30+ ways to protect your WordPress website from malicious attacks. It strengthens user credentials by fixing common loop holes and automated attacks. The plugin is available in free and premium versions. Both have same feature but premium version include few more features like two-factor authentication, Geo ID banning and user action logging.
All in one WP security and Firewall
All in one WP Security and Firewall is the most comprehensive WordPress security plugin. This plugin protects your website by checking vulnerabilities and implementing latest techniques and security measures.
Wordfence Security
Wordfence is another leading WordPress security plugin with over 2.5 millions of downloads. The plugin scans for hacked files and monitors the access of visitors to your blog. It includes a firewall, virus scanning and new cache engine that secure your blog from malicious attacks.
BulletProof Security
Another popular WordPress plugin to secure your WordPress website is BulletProof Security. This plugin provides 1-click security solution. The plugin allows you to protect wp-admin folder of your WordPress website. This plugin secures your website against RFI, CRLF, XSS, Code injection and SQL injection hackings.
Authenticator
Google Authenticator is one of the most popular security plugin for WordPress. It offers you two-step authentication using Google Authenticator app for iPhone, Blackberry and Android. You will need a smartphone or any other device to use Google Authenticator app because this plugin app works on your dashboard and your smartphone simultaneously.
Sucuri Security
Sucuri Security is very popular security plugin that offers you website monitoring, malware removal and many mores services to secure your WordPress website. The plugin detects large number of malwares, spams, blacklisting and many other security issues.

Hi,
Which of them are free? I mean free to removal and fix it.

I've had good luck with sucuri

i themes Security are best in everything

Like close the entire /wp-admin either by cloudflare custom URL rule, or your webserver. Its annoying if your IP changes constantly and you have to whitelist it every time, but I sleep better so...
Close all ports, check the right premissions of the files, don't use not serious plugins especially with upload option.

What I like in Wordfence Security is the notification of file change and the hash, so even if someone modifies a file you will be notified. Of course you can do this manually with a script.

But in reality if someone really want to crush you they will do it. No plugin can help you Those steps only stop just every script kiddie to play around....
I would use other CMS or custom build website, because it is much harder to hack a system that you dont know how is coded and the logic, than a free CMS that everyone can download and search for new vulnerabilities. What are the constant patches? Constant bug fixes, because someone got hit and cried to the WP devs... but you can not fix everything.