Did you know? WordFence (which we install on all sites we monitor) blocks the ability for hackers to discover your usernames.

That makes it harder for them to attempt brute force attacks, among other things.

See https://www.wordfence.com/blog/2016/12/wordfence-blocks-username-harvesting-via-new-rest-api-wp-4-7/ for details.