There is no program that will give 100% protection, but they work well enough to deny general hackers.
A full licensed version of internet security software nowadays has a wide range of security features including firewall, vulnerability check, system change control, secure keyboard and extra security layer when accessing bank sites etc.
Paid versions are better than free versions. Often the free versions will tell you there is a virus or issue, but not fix it.
One needs to go over each item listed in the settings and select what is required instead of just accepting the default settings. It is no good when you have the key to lock things up, and let the key stay in the keyhole or door handle.
One other layer you can add is by becoming a "User" of your own laptop. If you are the only person using the device, then you are the "Administrator" by default. You have privileges to add other "User" accounts. You create a password for the Admin account, and then create a User account with another password. So now there are 2 accounts. (User and Administrator)
When you boot up the laptop, it will ask you sign in as either one. You log in to the User account and go on. When there is a need to install a new program or to access network settings, etc the system will ask you to type he Administrator password. Being a User gives another layer of protection against a program installing itself unknowingly, or from a hacker who doesn't know that you are both the admin and user on the same laptop.
By default the browsers will save your passwords in its memory. Do not let it do that, and do type in the access passwords manually each time. One can find the passwords easily in the settings for Chrome and Firefox. In this case one doesn't need a tech savvy hacker to usurp your laptop, just simply letting another person exploit your human weakness or laziness.
Avoid using add-ons for browsers as much as possible, except the antivirus add-on.
Password lengths of 16 and above are better than 8/10/12 character ones – there are programs available online that will bust these up quickly; the longer and complex the password, the longer it takes to get busted. Complex passwords include letters, capitals, special characters, and words not found in a dictionary.
Facial recognition and fingerprint scan access can be bypassed also, so use complex passwords as much as possible until things improve.
Network settings of your modem – do change the default names and passwords. The defaults are available online easily, so change it completely so a neighbor cannot tell whether you have BSNL or DLink or TPLink or whatever modem model.
To be in a better secure position, do not use social networking in the laptop. Keep a separate phone, email and SIM number dedicated for that. You'd gain from keeping your work and lifeline away from channels that will lead hackers into your life. Never mix the two. This may not be possible for some but definitely worth it if you can manage it.
Most of all, be alert to any warning pop-ups that come up and don't ignore them, else the computer will think for you without your permission.
I would recommend Kaspersky Internet Security - it seems to be at the top of list and has a wide range of security settings.