Just read about Dolly Way malware on wordpress

I am working on two websites about to go live by the end of the month. I educated myself on wordpress and created these myself. Now what kind of checklist should I have for security before going live? I have already installed wp hide login and limit login. Any recommendations on security plugins will be helpful.