After X attempts to log in, it bans the IP address.

It will scan your wordpress files and alert you if any of them have changed in suspicious ways (hacked).

It can disable the xml-rpc endpoint which is rarely used and is a big vector for hacking.

… and a lot more but those are the main ones for me.

The WordFence plugin is a must-have for security.

If you use Caddy instead of Apache then you get SSL automatically. You’ll need php-fpm as well, tho.

genuine investigative journalism

It’s 2024, in case you forgot ;)