ClickFix
Fake “verify you’re human” pop-ups
Injected scripts show visitors a fake CAPTCHA that tricks them into running malicious commands on their own computer.
How N² Security stops itClickFix detection blocks the fake verification pop-up.
N2 Securityby Next Nova
WordPress malware scanner / Launching 30 November 2026
The WordPress security plugin that stops what others miss
N² Security is a WordPress malware scanner and security plugin. It looks for the tricks modern infections use to hide, and to come back after you clean up. Built by a team that cleans up hacked WordPress sites for a living.
Launches 30 November 2026
Built to stop what others miss
- AI malware analysis
- C2 beacon blocker
- DB cron cleaner
- ClickFix detection
- EtherHiding defense
- Activity logger
01 The problem
Modern malware hides where scanners don’t look
Today’s WordPress infections are built to slip past traditional scanners, and to come straight back after a cleanup.
EtherHiding
Blockchain-hosted loaders
The payload is fetched from a blockchain contract, so it can’t simply be taken down. The infected file on your site is the only place to catch it.
How N² Security stops itEtherHiding defense blocks blockchain-loaded payloads.
Reinfection
Hidden reinfection
Backdoors and scheduled tasks in the database quietly reinstall the malware after you’ve cleaned up.
How N² Security stops itThe DB cron cleaner finds and removes hidden reinfection tasks in the database.
02 What’s inside
Everything you need to find an infection
Free for everyone. No account, no licence key, no limits.
Malware scanner
Signature and heuristic scanning of plugins, themes, mu-plugins, drop-ins and uploads. Results name the malware family it found.
WordPress.org integrity check
Every file in your WordPress.org plugins is compared with the official release. Untouched files are verified clean; modified ones are flagged.
Lockdown
One click stops plugin and theme installs and edits, and blocks PHP from running in the uploads folder.
Login security
Move the login page to a private address and send bots probing wp-login.php to a 404.
Database cron cleaner
Removes known malicious scheduled tasks and option keys that reinstall malware after a cleanup.
Activity log
Records security events such as suspicious scheduled tasks, with export to JSON.
03 How it works
Find it, lock it down, keep it out
Four steps, all in the free plugin.
Step 1
Scan
One scan covers plugins, themes, mu-plugins, drop-ins and uploads, using signatures and heuristics.
Step 2
See what it found
Each result names the malware family. Plugin files that match the official WordPress.org release are verified clean.
Step 3
Lock it down
One click stops plugin and theme installs and edits, and blocks PHP from running in the uploads folder.
Step 4
Stop it coming back
The database cron cleaner removes the scheduled tasks and option keys that reinstall malware after a cleanup.
You stay in control. The free plugin never deletes or changes files on its own. Scans only report what they find, and nothing changes unless you click a button.
04 Free and Pro
Free to find it. Pro to fix it
The free plugin finds the infection and helps you lock the site down. Pro is a separate add-on for when you want threats fixed, not just found.
Free plugin
No licence key
Free
for everyone
Everything you need to find an infection. No account and no limits.
Malware scanner
WordPress.org integrity check
Lockdown
Login security
Database cron cleaner
Activity log
Pro add-on
Coming soon
6 months
free with early access
For when you want threats fixed, not just found. You never need it to use the free plugin.
One-click malware removal
Restore modified plugin files from WordPress.org
AI verification of findings
Blocks malware call-home (C2) connections
Daily scheduled scans with email alerts
Early access
Launch list
Get it first
Join the launch list and we’ll email you the day N² Security is available, with 6 months free at launch.
Launches 30 November 2026
05 Who builds it
Built from real clean-ups
Next Nova Technologies has built and repaired WordPress websites for 8 years. N² Security comes out of that work.
Real infections
Detections from real clean-ups
The scanner’s detections come from infections we have found and removed on real client sites, not from a generic signature list.
Fewer false alarms
Verified against WordPress.org
Untouched plugin files are verified clean against the official release, so the results point at what was really changed.
Support
From the team that wrote the code
Your questions go to the people who built the plugin.
- 1,500+
- projects shipped
- 1,100+
- happy clients
- 8 yrs
- in business
- 100s
- of infected sites cleaned
Site hacked right now? Our team cleans up hacked WordPress sites: see WordPress security, or email support@nextnova.tech and we’ll take a look.
See website repair06 Coming soon
Be the first to know
N² Security launches on 30 November 2026. Leave your email and we’ll tell you the day it’s available.
Launches 30 November 2026
07 Questions
Straight answers
Still unsure about something? Message us. A real person replies.
Ask on WhatsAppWhen will it be available?
N² Security launches on 30 November 2026. The plugin is in review for the WordPress.org plugin directory. Join the early-access list and we’ll email you on launch day.
Is it really free?
Yes. The scanner, integrity check, lockdown, login security, database cleaner and activity log are free, with no limits and no licence key. The optional Pro add-on adds automatic removal and daily scans.
Will it delete anything automatically?
No. The free plugin only reports what it finds. Nothing on your site changes unless you click a button.
Can I use it alongside my current security plugin?
Yes. It doesn’t run a firewall, so it won’t conflict with other security plugins.
What are ClickFix and EtherHiding?
ClickFix is a fake “verify you’re human” pop-up that tricks visitors into running malicious commands on their own computer. EtherHiding loads malicious code from a blockchain contract, so it can’t simply be taken down. N² Security is designed to catch both.
My site is hacked right now. Can you help?
Yes. Our team cleans up hacked WordPress sites (see WordPress security). Email support@nextnova.tech and we’ll take a look.
How do I report a security issue in the plugin?
Please email support@n2security.io rather than posting it publicly. We’ll respond as quickly as we can.