All in One WordPress Security is a powerful WordPress security auditing, monitoring, and firewall plugin, but even name said “All-In-One Security”, there is no firewall in this plugin.

Bot Protection, Real-time Firewall, and Brute-Force Protection are the main features of Malcare security plugin. Usually, Malcare blocks 2 billion attacks each month.

This plugin is also a good security solution for WordPress, but iThemes Security does not include a website firewall.

Sucuri is just not for WordPress, you can use Sucuri firewall for any website. If you have a WordPress site, they provide an additional WordPress plugin that provides more features like Security Activity Auditing, File Integrity Monitoring.

If you looking for either a free or pro-WordPress security plugin this may be the best choice. There are more than 4 million downloads in the free version and the pro version needs to use if you need real-time updates to the threat defense feed which includes a real-time IP blocklist, firewall rules, and malware signatures.