WP Security: Plugins, Server or htaccess?

I´ve always used ithemes before, but now looing into better alternatives. What security configs would you setup with plugins, and what would you setup at htaccess and server level?

---