Nova Scan - WordPress Malware Scanner

Enterprise-grade malware detection built for shared hosting realities. 4 dedicated NDE engines with industry-leading detection, near-zero false positives, two-mode firewall, and real-time threat intelligence. Free forever on one site.

The NDE Detection Engine

Nova Scan's NDE (N-Dimensional Engine) is a custom detection architecture built from 341,000+ verified threat samples. Unlike signature matching, NDE uses N-dimensional code analysis to detect novel variants, obfuscated payloads, and zero-day malware. 4 dedicated engines: PHP malware, JavaScript injection, database payloads, and WAF pattern classification.

Key Features

NDE Detection Engine - 4 purpose-built engines for PHP, JS, database, and WAF threat surfaces
Two-Mode Firewall - Passive monitoring or active blocking with pre-boot WAF capability
950,000+ Verified Hashes - Continuously updated threat database across 20+ malware families
20,000+ CVE Database - Known WordPress plugin and theme vulnerabilities
Deep Database Scanner - Scans wp_options, wp_posts, and cron jobs for injected payloads
Repository Integrity - Compares core, theme, and plugin files against wordpress.org originals
Auto-Clean and Rollback - Quarantines threats and restores clean files automatically
Brute-Force Protection - IP-based rate limiting with configurable lockout thresholds
Geo-Blocking - Country-level traffic blocking with whitelist support
Canary Tripwire Sentinels - Monitors critical files like wp-config.php for unauthorized modification
Community Feed Network - Opt-in threat intelligence sharing across the Nova ecosystem
JavaScript Malware Model - Dedicated NDE model for ClearFake, crypto injection, and JS-based attacks
Forensic Analysis - Deep entropy analysis and behavioral scoring for flagged files
REST API - Programmatic control for CI/CD integration and custom workflows
WP-CLI Support - Run scans and manage firewall rules from the command line

Performance Stats

Industry-leading detection rate in published validation
Near-zero false positive rate in published validation
950,000+ verified malicious hashes
20,000+ CVE vulnerability database entries
45 total features across security, firewall, and intelligence
Supports 23 languages

Free Forever

Nova Scan is completely free on one site. No credit card required. No trial period. No feature gating on the core scanner or firewall. Register and your divine key is generated instantly.

Built for Shared Hosting

Works within 32MB PHP memory limits, without shell access, without root permissions. Most enterprise security plugins assume VPS or dedicated server access. Nova Scan was built for the 70% of WordPress sites running on shared hosting.