Wordfence is essential

Wordfence has found active threats and compromises within and outside of WordPress installations. It provides peace of mind and ensures that updates are not ignored and that security threats are quickly identified and efficiently dispatched.

I never import a WordPress install or other web content without scanning it all with Wordfence.

For my money, this free plugin is an essential security plugin that every WordPress installation should include.