Wordfence is a solid product. I 'inherited' my wife's business's website a few years ago from a small marketing firm. It was heavily infected with malware. I tried several tools to clean it up and Wordfence is the one tool that consistently helped me remove all malware and keep it off. I was using the free version for quite a while and just upgraded to a paid license yesterday as a matter of fact.

In the world of Wordpress plugins it is a gem in the rough.