Nexura Security — Malware Scanner, Firewall, 2FA & WordPress Security
| 开发者 |
prokashsarker2026
freemius nexurasecurity |
|---|---|
| 更新时间 | 2026年7月13日 18:46 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Zero Database Bloat — Smart micro-batching runs scans quietly in the background without overloading your server.
- No Performance Hit — Your visitors will never experience slowdowns during or after a security scan.
- One-Click Setup — No technical knowledge required. Get protected in under 60 seconds.
- 100% Free Core — Every essential security feature is included at no cost, forever.
安装:
- Go to Plugins → Add New in your WordPress dashboard.
- Search for "Nexura Security".
- Click Install Now, then Activate.
- Navigate to the Nexura Security menu in your sidebar and run your first free security scan.
- Download the plugin
.zipfile from this page. - Go to Plugins → Add New → Upload Plugin.
- Select the downloaded zip file and click Install Now.
- Activate the plugin.
屏幕截图:
常见问题:
Is Nexura Security really free?
Yes, 100% free. All core security features — malware scanning, file integrity monitoring, 2FA, brute-force protection, WAF, hardening, and more — are completely free with no usage limits. The Pro version adds advanced automation and enterprise features for sites that need maximum protection.
Can it clean a hacked WordPress site?
Yes. The built-in malware scanner detects backdoors, obfuscated code, web shells, and known malware patterns. You can remove detected threats with a single click. For fully automated, zero-touch cleanup, upgrade to Nexura Security Pro.
Will it slow down my WordPress website?
No. Nexura Security uses a micro-batching architecture that runs all scans in small, non-blocking chunks in the background. Your visitors will never experience any slowdown, even during a full site scan of 50,000+ files.
How does Nexura Security compare to Wordfence?
Nexura Security offers comparable malware scanning, firewall, 2FA, and brute-force protection — but with a significantly lighter performance footprint. Unlike Wordfence, Nexura Security does not insert blocking rows into your database during normal operation, and its WAF uses auto_prepend_file to intercept threats at the PHP level before WordPress even loads.
How does it compare to Sucuri Security?
Sucuri's core plugin on WordPress.org primarily offers activity auditing and basic hardening. Nexura Security provides a more complete free feature set including a built-in malware scanner, 2FA, brute-force protection, and automated security alert emails — all in one plugin.
Does it work with WooCommerce?
Yes. The free version fully protects WooCommerce sites. The Pro version adds WooCommerce-specific protections including anti-card-testing on checkout pages and customer account takeover prevention.
Does it send my data to external servers?
Only when you explicitly enable a cloud feature such as Threat Intelligence, Pwned Passwords, or Safe Browsing. All external connections are fully documented in the Third-Party Services section above. By default, everything runs on your own server.
Is it compatible with other caching plugins?
Yes. Nexura Security is compatible with all major caching plugins including WP Rocket, W3 Total Cache, LiteSpeed Cache, and WP Super Cache. The WAF and scanner operate at the PHP level and do not interfere with caching behavior.
Is it compatible with Cloudflare?
Yes. Nexura Security is fully compatible with Cloudflare proxied sites. The WAF and brute-force protection correctly identify and handle traffic passing through Cloudflare.
What PHP version is required?
PHP 7.4 or higher is required. PHP 8.1+ is recommended for the best performance.
Is it multisite compatible?
Yes. Nexura Security can be network-activated on WordPress Multisite installations.
Can I use it on client sites?
Yes. There are no restrictions on the number of sites you can protect with the free version.
更新日志:
- Critical Fix: Fixed HTTP 500 error (Maximum execution time exceeded) during plugin activation by delaying the initial File Integrity Monitoring (FIM) and Google Safe Browsing scans by 1 hour.
- Critical Fix: Fixed HTTP 500 error after plugin deactivation. The Web Application Firewall (WAF)
auto_prepend_filedirective is now correctly removed from.htaccessand.user.iniduring deactivation.
- New Feature: Automated HTML security alert email when malware or threats are detected during a scan.
- Enhancement: Email is rate-limited to max 1 per 24 hours to prevent inbox flooding.
- Enhancement: Nexura Security branding logo added to alert email header.
- Enhancement: Upgraded all alert notifications from plain text to fully styled HTML with CTA button.
- Fix: Minor stability improvements and code hardening.
- New Feature: Automated HTML security alert emails — when malware is detected, the site admin receives a beautifully branded email with a full threat summary and dashboard link.
- Enhancement: Security alert emails are rate-limited to a maximum of 1 email per 24 hours to prevent inbox flooding.
- Enhancement: Upgraded all alert notifications from plain text to fully styled HTML with Nexura Security branding.
- Fix: Minor stability improvements and code hardening.
- Stability improvements and performance optimizations.
- Updated scanner signature database.
- Improved compatibility with PHP 8.2.
- Initial release.
- Deep recursive malware scanner with micro-batching architecture.
- WordPress core file integrity monitoring.
- Root directory integrity checker.
- Two-Factor Authentication (2FA) with TOTP support.
- Passwordless Magic Link login.
- Brute-force attack protection with IP lockout.
- Pwned Password checking via HaveIBeenPwned API (k-Anonymity).
- Anti-spam protection with Cloudflare Turnstile and Google reCAPTCHA.
- Cloud-based Threat Intelligence sync.
- Google Safe Browsing integration.
- One-click security hardening.
- Database security scanner.
- Database backup tool.
- Real-time upload scanning.