Wordpres

Use only one plugin. A lot of the security has to be done outside of wordpress. Password protect your admin area. Limit the amount of logins someone can do before they're locked out to prevent brute force attempt.