Wordpress Security settings

[sumesh]

Thanks for the list Edward.

I will add the below to your ones 

1. Hide your author usernames by adding these codes into functions.php file

Code:

add_action('template_redirect', 'bwp_template_redirect');
function bwp_template_redirect()
{
if (is_author())
{
wp_redirect( home_url() ); exit;
}
}

2. Make sure you add proper protection to bruteforce attacks on wp-login.php and xmlrpc.php either using fail2ban or modsecurity as these are the best methods than blocking using a plugin or htaccess.