How to lock wp site from malicious attacks

Any WordPress site on the Internet will get probed all the time and bots will attempt to get in. If you did get hacked then you need to make sure you’ve deloused your site before proceeding.

https://codex.www.ads-software.com/FAQ_My_site_was_hacked

Personally I don’t recommend any security plugins for WordPress. I do use Jetpack’s Bruteforce protection but that’s more for helping collect data that can protect others.

The best way is to maintain your software and use responsible hosting. I wont get into the hosting part, that hosting discussion is not really allowed in these forums. I will say that your host should know how to handle compromised servers.

Maintaining your software means updating to the latest versions, keeping good backups of all of your files/database away from your server and know how to restore them.

https://codex.www.ads-software.com/WordPress_Backups
https://codex.www.ads-software.com/Restoring_Your_Database_From_Backup

If you like you can also harden your own WordPress installation.
https://codex.www.ads-software.com/Hardening_WordPress

Thanks a lot Jan! ??