preventing hack

So I have wordfence plugin installed as of right now, but I was wondering, can someone let me know the top things i can do in order to help prevent my website from ever being hacked (as far as plugins, or just general site maintenance that I should be doing)
the free route and the costly route.

There's many free plugins that offer decent wordpress security. There is a popular vulnerability going around right now that exploits the rev slider plugin (my website got hacked twice from it), but now there's a fix for it. Just stay up to date on security trends, and keep your wordpress, plugins, and themes up to date and you shouldn't have any problem.