We've found that Strongbox works really good for AVS/AEN sites, but that Pennywize is the best choice for our paysite. We get tons of BruteForce attacks and password sharing and Pennywize shuts them down like clockwork. The reporting is really good and you can really tweak it to do exactly what you want it to.

The $30 per month will handle up to about 1000 members we found. That is for 300 unique logins per day. If a surfer logs in 10 times in a day, that username is only counted once toward the 300. Most site visitors don't visit the site every single day...even on a site updated daily.