WebAware Secure
some simple security measures without all the performance traps
FAQ
Why?
Because every WordPress security plugin I've ever looked at has been bloated, problematic (breaks websites), ill-informed, and prone to security vulnerabilities. And I needed some options for Apache-hosted clients.