Rafal Dziwinski

This plugin checks if your WordPress installation is secure. It checks basic rules, inspired by Wazuh policies. 
If there is any red light, your WordPress installation is insecure. 
If all lights are green, you can’t be 100% sure that your website is impossible to hack, but it will be really, really hard.
<h3>External services</h3>
This plugin uses the php.net website to get a list of supported PHP versions.

WPEye

Sean Fisher

This plugin will hide WordPress Admin (/wp-admin/) when a user isn’t logged in. If a user isn’t logged in and they attempt to access WP Admin directly, they will be unable to and it will return a 404. It can also rename the login URL.
Also, you can add HTTP authentication directly from WP Admin and add custom username/password combinations for the HTTP auth or use the WordPress credentials.
This doesn’t touch any .htaccess files or change the WordPress core files. All the CSS/Images under /wp-admin/ are still accessible, just not the .php ones.
If you enable HTTP authentication, it will add HTTP authentication to the PHP files in /wp-admin/.
To contribute to the development, check out <a href="https://github.com/srtfisher/Lockdown-WPAdmin" rel="nofollow ugc">the GitHub Repository</a>.

Lockdown WP Admin

Lockdown WP Admin conceals the administration and login screen from intruders. It can hide WordPress Admin (/wp-admin/) and and login (/wp-login.

WPEye vs Lockdown WP Admin