Install Wordfence. The free version is enough. Regularly checks the site for dodgy files, blocks spammers and offers 2FA for login. Big fan since it prevented multiple hack attempts to several of my sites.