So i’m locking down more of my websites. I’ve found two very good plugins – Bulletproof Security and WordFence.
Bulletproof is more powerful, but you will need to FTP into your site and change file permissions it recommends.
Wordfence is simpler and easy to use. Sort of like tripwire, it emails you any files that were recently changed in the core install. Also, it does a anti virus scan.
If you are a techie, go with Bulletproof. If you want simple do Wordfence. I’ve not yet tested their combined comparability, someone needs to.