“The crux of the matter is how to choose a good security plugin. We’ve compiled an essential list, getting rid of things that aren’t related to security.
- Essential security features
- Malware scanning
- Malware cleaning
- Firewall
- Good-to-have security features
- Vulnerability detection
- Brute force login protection
- Activity log
- Two-factor authentication
- Potential problems
- Impact on server resources
As you can see, there are only 3 essential features you need to worry about. A security plugin should be great at these 3 things: malware scanning, malware cleaning, and firewall. Everything else is gravy. We aren’t putting down brute force protection or two-factor authentication, because those are important too. But you can get other plugins for that functionality.
MalCare is the only security plugin that has great malware scanning and cleaning capabilities, and an advanced firewall that keeps out threats. Every other plugin fails in one place or the other.”
—From an article comparing WordFence to Sucuri.
Another article comparison: 13 Best WordPress Security Plugins Compared & Tested
OK, this article was taken from the MalCare site, so they have an agenda, but I’m going to check it out.
Here’s another article: 12 Best Security Plugins for WordPress to Protect Your Website, from a wordpress site that is promoting their own product as well.