No wordfence

I would like to improve the security of my website but have a security plugin like Wordfence. Is there a recommended security guide or can you provide some advice on what steps to take to secure my site without using wordfence?