I have been working with WordPress since last 5 years almost. But so far I didn't get a standard solution to secure a WordPress site.
I have a clients hosting account which has 11 WordPress websites that keeps getting hacked every year almost. Even Finally I had to leave the Hostgator or they suspended that account because of this. Now I bought a new hosting and I don't want it to be happen again and again.
So far what I did to secure my site is I have used "Wordfence" Plugins and set it up correctly. Tried to hide my wordpress installation using "Hide My Wp" Plugin. Has set the login attempt to 5 in Wordfence settings that could help it to protect from Ddos attack. Always using updated version of plugins and themes and WordPress core. By following these steps still I have been hacked 6 times in Hosgator hosting.
Now my question is that as I have moved to new host and off course I am using all fresh new installation in my new hosting for these existing sites; How I can I make all these site secure or what is the best standard methods to secure a WordPress site ?
Thanks to you all in Advance.