I'm always on the look out for security tips for WordPress, I've got about 15 or so live WP installs but only one of them is attacked. I think I upset someone :D I find a combination of BulletProof Security and WP-Sentinel plugins work for me. And all the admin account hackers are pathetic... username: admin / password: 1234. AS IF! These kiddiehaxors all think we're as stupid as they are!