I've tired all the popular ones out there. BulletProof is obviously put together by a passionate individual, but its messed up UI makes it difficult to know what you are protected against. The pro version is even worse. I'm not a IT Security Pro. I want protection and that is what I get from All In One Security and Firewall.
I hope the team reads this as I'd like to see them put in auto blocking off login attempts from unlisted user names. I've been brute forced to having my ISP step in an modify my .htaccess file to deny almost all traffic. I don't use admin for any of my administration usernames, but bots use it all the time hoping that they have half the battle won in a brute force attempt. Please add that . . . Wordfence has it and it is a great option
Other than that, I love this plugin.