Wordfence prevents bruteforce and ddos attacks. Also prevents bots and other human undesirable attacks. Wordfence protects you from malware with its great malware scanning and removal feature. Wordfence automatically blocks unwanted IP's by listing them on the blocklist.

Wordfence is the best security plugin we have tried as it is the most compatible to our needs. The free version offers features that are already enough to security a wordpress website. It has firewall options, rate limiting features, malware scanners and removal and even notifies you of unwanted behaviors and files within your wordpress site. The best thing is its live traffic option, in which it can show you the visitors to your site, especially the one's trying to hack your login page, showing its ip, and whether the one trying to access is a bot or human.

Wordfence is great, even for the free version. It allows me to scan my web files without consuming much resources and it does notify me of different version of files if any, unwanted files and infected files. Real time monitoring is also great as it tracks every incoming and outcoming traffic from your website. I also like how you can set the firewall for rate limiting features to prevent bruteforce attacks.