With over 3 million installs, Wordfence is one of the most popular endpoint firewall and anti-malware plugins for WordPress.
Extract from WordPress.org
Wordfence includes an endpoint firewall and malware scanner that were built from the ground up to protect WordPress. Our Threat Defence Feed arms Wordfence with the newest firewall rules, malware signatures and malicious IP addresses it needs to keep your website safe. Rounded out by 2FA and a suite of additional features, Wordfence is the most comprehensive WordPress security solution available.https://wordpress.org/plugins/wordfence/