When I create a new installation of WordPress there are certain plugins that I always install. These are my essentials that offer usability and security to my build.

• Activity Log
  This is a good plugin that allows you to keep a track of changes in WordPress. It will log activity for logins, posts and plugin changes.
• All In One SEO Pack
  If you are concerned about how Google searches your site than you need this plugin. It does a good job of creating a XML Sitemap to submit to Google through the Search Console of the Webmaster Tools.
• Contact Form 7
  It is the one form plugin that I have reached for consistently. It builds your forms using short codes which should be familiar to regular users of WordPress. Not too difficult to learn and master. Once you create your form you can insert into any page or post through each form’s unique short code.
• Disable Comments
  Does what it says. Will disable the comments capabilities on pages, posts, etc.
• InfiniteWP – Client
  In conjunction with a server running the InfiniteWP Admin Panel this gives me the ability to update plugins and make backups to client sites.
• Plugin Vulnerabilities
  Another security plugin to offer peace of mind. This plugin checks your installed plugins against a list of vulnerable plugins. I don’t know how many times I can type plugins. It will alert you if one of these plugins has been compromised. A compromised plugin can be used to install malware on your site.
• Really Simple CAPTCHA
  If you are using forms then you should be using CAPTCHA. Those are the annoying requests when you submit forms that ask you to type in the words or letter you see or pick out all the photos that have cars in them. A layer of security that prevents bots from spamming your inbox through an online form.
• Wordfence Security
  I tried iThemes Security before this and Wordfence is by far the superior plugin. It has a premium paid license but if your site is not under constant attack it is not necessary. The plugin gives you a firewall and has automatic and permanent blocking of IP Addresses that attempt hostile actions. It also has a file scanner to search for any malware that may have been uploaded or installed to your site.
• WP All Backup Plus
  This plugin allows the backup and restoration of your WordPress site. It also allows the remote backup by FTP or a cloud service such as Dropbox.

If you have any questions or suggestions for plugins email me at john@panolatech.com.