Best security plugin for wordpress

I have a client that has had some pretty bad attacks on his site. I have cleaned the code and removed the backdoors.

I am looking for something that I can install as a plugin to protect the wordpress files and the site

please let me know your thoughts.