First and off keep it updated.
Enable the firewall.
sudo ufw enable
sudo ufw status verbose
A good read.
https://easylinuxtipsproject.blogspot.com/p/security.html
The most import part of security is common sense web habits.
Rough duty for some users.
No there ain't a download for...