Next Nova Malware Scanner
Find the malware that other scanners miss.
A free WordPress security plugin from a team that cleans up hacked websites for a living. It looks for the tricks modern infections use to hide, and to come back after you clean up.
Modern malware hides where scanners don't look
Today’s WordPress infections are built to slip past traditional scanners, and to come straight back after a cleanup.
Fake "verify you're human" pop-ups
Injected scripts show visitors a fake CAPTCHA that tricks them into running malicious commands on their own computer (ClickFix).
Blockchain-hosted loaders
The payload is fetched from a blockchain contract, so it can't simply be taken down. The infected file on your site is the only place to catch it (EtherHiding).
Hidden reinfection
Backdoors and scheduled tasks in the database quietly reinstall the malware after you've cleaned up.
Everything you need to find an infection
Free for everyone. No account, no licence key, no limits.
Malware scanner
Signature and heuristic scanning of plugins, themes, mu-plugins, drop-ins and uploads. Results name the malware family it found.
WordPress.org integrity check
Every file in your WordPress.org plugins is compared with the official release. Untouched files are verified clean; modified ones are flagged.
Lockdown
One click stops plugin and theme installs and edits, and blocks PHP from running in the uploads folder.
Login security
Move the login page to a private address and send bots probing wp-login.php to a 404.
Database cron cleaner
Removes known malicious scheduled tasks and option keys that reinstall malware after a cleanup.
Activity log
Records security events such as suspicious scheduled tasks, with export to JSON.
You stay in control. The free plugin never deletes or changes files on its own. Scans only report what they find, and nothing changes unless you click a button.
Next Nova Malware Scanner Pro
For when you want threats fixed, not just found. Pro is a separate add-on: you never need it to use the free plugin.
What Pro adds
- One-click malware removal
- Restore modified plugin files from WordPress.org
- AI verification of findings
- Blocks malware call-home (C2) connections
- Daily scheduled scans with email alerts
Built from real clean-ups
Next Nova Technologies has been building and repairing WordPress websites since 2017. The scanner’s detections come from infections we have found and removed on real client sites, not from a generic signature list.
- Detections based on real-world infections
- Fewer false alarms, thanks to the WordPress.org integrity check
- Support from the team that wrote the code
Be the first to know
Next Nova Malware Scanner is coming soon to the WordPress.org plugin directory. Leave your email and we’ll tell you the day it’s available.
Questions
Soon. The plugin is in review for the WordPress.org plugin directory. Join the list above and we’ll email you on launch day.
Yes. The scanner, integrity check, lockdown, login security, database cleaner and activity log are free, with no limits and no licence key. The optional Pro add-on adds automatic removal and daily scans.
No. The free plugin only reports what it finds. Nothing on your site changes unless you click a button.
Yes. It doesn’t run a firewall, so it won’t conflict with other security plugins.
Yes. Our team cleans up hacked WordPress sites. Email support@nextnova.tech and we’ll take a look.