Comprehensive security without bloat

Atlant Security is one of the most complete free WordPress security plugins I have tried.
It is feature-rich, so it deserves careful configuration rather than switching everything on blindly. 

A strong option for site owners who want serious protection without being pushed into a paid tier.