As a marketing agency manager I have tried most security plugins for WordPress, some suck, some will protect you from basic hacking but not pros, some work well but are a pain in the a$$ to maintain. Then there is Shield!

You install it, activate it, run through the simple setup wizard and go get a beer, it just works! The ONLY setting I change is the default User settings, because they are set to allow plugins like Jetpack to access the website remotely, which we never use, so I turn off that option and all finished.

Highly recommended, the free version will be enough for most small websites, but we will be upgrading to Pro just to encourage the developers to keep going!