The only WordPress firewall plugin backed with testing that shows that it delivers protection that other WordPress security plugins should, but fail to, provide https://www.pluginvulnerabilities.com/plugin-vulnerabilities-firewall/