Hi Sarah
I use the paid Sucuri service on all my sites.
The guys there are very good and will take a look if you think you have a problem.

Wordfence looks like a fabulous plugin with tons of features. The problem with complex plugins like that is knowing how to configure them.

Good in-depth post Sarah thanks for putting it together.