The unofficial WordPress Plugin Directory
Basic hardening: secure headers, login honeypot, user enumeration blocking, generic login errors, rate limiting, and more.