Plesk has this feature and it proved it self various of times.
Made our life easier because we could enable these measures to all websites and keep them more secure.
These measures can be applied in a single click or applied automatically as part of the package / settings during wordpress installation:
Restrict access to files and directories
Configure security keys
Block access to xmlrpc.php(can be reverted)
Block directory browsing(can be reverted)
Forbid execution of PHP scripts in the wp-includes directory(can be reverted)
Forbid execution of PHP scripts in the wp-content/uploads directory(can be reverted)
Block access to wp-config.php(can be reverted)
Disable scripts concatenation for WordPress admin panel(can be reverted)
Turn off pingbacks(can be reverted)
Disable unused scripting languages
Disable PHP execution in cache directories(can be reverted)
Disable file editing in WordPress Dashboard(can be reverted)
Change default database table prefix
Enable bot protection(can be reverted)
Block access to sensitive files(can be reverted)
Block access to potentially sensitive files(can be reverted)
Block access to .htaccess and .htpasswd(can be reverted)
Block author scans(can be reverted)
Change default administrator's username
