Website Hacked Protection Needed

I had my server websites hacked from some russian, the malware is already removed but know I want to buy some aditional protection for my website untill now I only found sitelock anyone knows another one?

Is your Website WordPress Based ?

If so add captcha login plugin

Moreover Take Latest Backup of your Website for recovery

Incase u got hack again

I've recently had one WP site hacked so I've added this to .htaccess in WP-Admin folder

order deny,allow
deny from all
allow from xx.yy.zz.aa

As I have a static IP WP-Admin only available from my IP so others can't login (easily)
Also testing Wordpress File Monitor which checks for any changed files and Emails you if it finds any.

Don't forget to remove admin user (add another with admin access first first lol)

I'm looking at other stuff but haven't tested them yet.