5 Excellent wordpress security plugins to not get Hacked

iThemes Security (formerly Better WP Security)

The easiest, most effective way to secure WordPress in seconds.

Important Features:

1. User action logging
2. 2 factor authentication
3. GeoIP banning
4. Hide wordpress vulnerabilities
5. Create backup of WP site daily
6. Import/export settings
7. Malware scanning 
8. And many others...

All In One WP Security & Firewall

A comprehensive, user-friendly, all in one WordPress security and firewall plugin for your site.

Important Features:

1. User Accounts Security
2. User Login Security
3. Database Security
4. File System Security
5. htaccess and wp-config.php File Backup and Restore
6. Firewall Functionality
7. Brute force login attack prevention
8. Security Scanner
9. Comment SPAM Security
10. And many others

BulletProof Security

WordPress Website Security Protection: Effective...Reliable...Easy to use

Important Features:

1. .htaccess Website Security Protection (Firewalls)
2. Login Security & Monitoring
3. DB Backup
4. DB Backup Logging
5. DB Table Prefix Changer
6. Security Logging
7. HTTP Error Logging
8. FrontEnd/BackEnd Maintenance Mode
9. UI Theme Skin Changer
10. and many others..

Wordfence Security

Wordfence Security is a free enterprise class security and performance plugin that makes your site up to 50 times faster and more secure.

Important features

1. Sign in protection
2. 2 factor authentication
3. Security Scanner
4. Scans for the HeartBleed vulnerability
5. File system security
6. Firewall functionality
7. many others...

Acunetix WP Security

Scans your WordPress installation for security vulnerabilities.

Important Features

1. MultiSite ready
2. Easy backup of WordPress database for disaster recovery
3. Removal of error-information on login-page
4. Removal of wp-version, except in admin-area
5. Removal of Really Simple Discovery meta tag
6. Removal of core update information for non-admins
7. Removal of plugin-update information for non-admins
8. Removal of theme-update information for non-admins (only WP 2.8 and higher)
9. Hiding of wp-version in backend-dashboard for non-admins
10. Removal of version in URLs from scripts and stylesheets only on frontend
11. Reporting of security overview after WordPress blog is scanned
12. Reporting of file permissions following security checks
13. Live traffic tool to monitor your website activity in real time
14. Integrated tool to change the database prefix
15. Disabling of database error reporting (if enabled)