Wordfence plugin is one of the most or the most popular
WordPress firewall and security scanner.
It is a very important plugin and we must use that.
The plugin Wordfence protects our website and with new firewall rules
malware signatures and malicious IP addresses are also armed by it.
Wordfence Link Here
There are both free and premium versions.
Free Version Gives you there following options:
Set one-click security level
Live traffic view
Login security features
Avoid DDoS attacks.
Additional WordPress security options
You can directly download then install and activate the plugin
directly from the WordPress dashboard.
You will get an API key then go to Wordfence and then into Wordfence settings and
add the API key.