2) WP Better Security
3) WPScan (https://github.com/wpscanteam/wpscan)
Should be sufficient for most small/medium installation