Here is a quick demo using WPScan to brute force into a plain old WordPress install. The concept is to show how trivial it is using open source and readily available tools to brute force a WordPress site.
Sucuri Top 1 Million Websites Scanned
Sucuri conducted a test by scanning the top ranked million websites (Alexa) to look for potential security issues
An overview of the Hardening feature found within the Sucuri WordPress Security plugin.
CloudProxy is a cloud-based protective layer, so you will not need to install anything on your server. It will protect your website from brute force attacks, malware, DDoS, blacklisting and many other issues that webmasters face every day.