All In One Security & Firewallis not recomendable for any new users because there is lack of security so a good setup on your own would be better.
I was yesterday victim of a DDOS attack on my webhost and after cleaning up after the kids that stalled my webhotel for a couple of hours i installed this plugin.
Used the highest level of security possible but when i later was looking at my files the old GOOD .htaccess was changed to backup and a new was there and when i looked into it i found a Password i usually use!
And when i looked at the attributes of the file it was readable by the world wtf a security file without security!!!
So the hackers could just search for the plugin and look inside .htaccess and then login to the site ... ok they would not have to hack it then.
Stay out i do and use wordfence or better wp security instead this looks anyway like a copy of better wp security although it missed some of the good features.