Recommendations for security testing a Drupal site?
Here's some slides on automated security reviews using Drupal tools
Here are some manual steps for a review
You can try to improve password strength
And to make all passwords stronger, Two Factor Authentication is helpful
Security Review is a good call
As is Paranoia
And Cracking Drupal is a good resource (disclosure, I wrote it)