I use some security plugins.
General all around WP security:
BulletProof Security
Exploit Scanner
WP Security Scan
TAC – this one looks at your themes to see if there’s anything hinky going on. Many theme makers put code in their themes that can easily be exploited and this will tell you.