SF-Locker doesn't require SF-Core
Takes care of all the security basics and many QOL features, including:
- Cloudflare Turnstile for Breakdance and WooCommerce
- Obfuscate emails across your site
- Prevent showing user names in URLs and archives
- Enable 2FA for logins
- Block XML-RPC
- Rate-Limit login and XML-RPC
- Custom login URL
- Login attempt limiter
- Protect sensitive files and urls.
- Control updates and admin email notifications
- Optimise Gutenberg
Of course it doesn't replace Wordfence - but it provides a solid foundation for most sites.