I searched for a good security plugin. Read the support docs for all the recently updated ones. Most of the support consists of forums where I can barely understand the question and never understand the answers. And most apps appear to keep asking you for money to get help.
All In One WP Security & Firewall is the exception. They have several very clearly written help documents. And the app itself has built-in directions - just go through every screen in order and decide what to add. I'm a novice at WordPress and I found it to be very easy to program. I kept on down the list until I started seeing warnings that I thought might break my website and then stopped. At that point, on their dashboard meter I had 120 points, well into the green zone.
So far, my site is working well and I feel much better protected. If it continues to work well, I plan to give these folks a donation for outstanding software!