The best security plugin is running your own linux server, with the necessary packages and dependencies up to date with an up to date Wordpress installation with no stupid security breaching configurations. In general it is bad practise to bloat setups with too many plugins, since this actually may open up vulnerabilities in the fututre. Also use a decent firewall, ufw or iptables, depends who's asking.