Using BPS Pro (commercial but one-off payment for unlimited sites - there is also a free version) and seems fine on three sites I’m running under ClassicPress.
The plugin author seemed willing to look at issues with ClassicPress when I contacted him (see thread and link at https://forums.classicpress.net/t/bulletproof-security-pro-and-classicpress/289