Appearance
WhatsApp DirectStart a Project
Authentication + WordPress Security
Coming SoonInternal Build · v1.0.13Production-proven internally

Protect access. Harden WordPress.

Nelx DualGuard Pro brings frontend authentication, two-factor security, identity policy, user access controls, WordPress hardening and application-level request protection into one coordinated security system.

Email OTP + TOTP15 Elementor widgets22 shortcodesPHP 7.4+
Nelx DualGuard Security Control Center
2FA healthyFirewall active
Protected Users184+12 this month
2FA Enabled93%policy healthy
Blocked Requests327last 7 days
Trusted Devices61active records
Identity postureLIVE
AK
Amina K.Administrator · Last active 2 min ago
TOTP
BO
Brian O.Editor · Trusted device
TRUSTED
CW
Carol W.Staff · Verification required
EMAIL OTP
Security postureHARDENED
H
Security headersHSTS · X-Frame · Referrer
ON
F
Request filteringCore + custom patterns
ON
G
GeoIP controlsCountry-level rules ready
READY
X
XML-RPC controlsPingback & brute-force protection
ON
Recent security activityAUDIT + FIREWALL
TimeEventSourceStatus
20:41Blocked suspicious query pattern197.***.22.10Blocked
20:38Administrator TOTP verificationNakuru, KEVerified
20:33Trusted device recognizedChrome · WindowsAllowed
Layered 2FAEmail OTP, TOTP & backup codes
Frontend authenticationLogin, signup & password flows
Security operationsUsers, audit trail & reports
WordPress hardeningHeaders, endpoints & firewall rules
Nelx DualGuard by design

Two defensive layers. One security system.

Nelx DualGuard protects both sides of the problem: who is allowed through the door, and how WordPress behaves once the door exists.

Identity & Access

Control how users authenticate.

Build complete login and registration experiences, enforce stronger verification and keep account-security workflows on the frontend.

Frontend login & signupEmail verificationEmail OTP & TOTPBackup codesTrusted devicesRole-based redirectsPassword managementSocial login
Hardening & Firewall

Reduce WordPress exposure.

Apply practical hardening, control public surfaces and filter suspicious request patterns without stitching together several unrelated settings plugins.

Security headersXML-RPC controlsSecure WordPress pathsPublic endpoint controlsRequest filteringIP & User-Agent rulesGeoIP blockingMapping & obfuscation tools
Authentication experience preview
Interactive: click around to experience it.
Nelx DualGuardRegistration experience • preview
Registration
marymcjoe
mary.mcjoe@example.com
Mary
McJoe
Human verificationRegistration respects the configured human-check layer.
✓
Email confirmation first.The account is only created after the user confirms the registration request. Nelx DualGuard then sends a temporary password that can be changed later.
Preview only — fields are read-only.
Authentication experience

Security that users can actually complete.

Nelx DualGuard supports a two-step sign-in flow, an optional enhanced WordPress login experience and a flip-card registration flow that keeps authentication cohesive on the frontend.

Two-step login flow

Users provide their username or email first. Password entry and the human check appear only after the identity step is completed.

Flexible verification channels

Email OTP, authenticator-app TOTP, backup codes, SMS OTP and WhatsApp OTP can be used according to your configured authentication policy.

Login + registration in one interface

The registration side flips into the same authentication card. Registration begins with account details and email confirmation; the actual account and temporary password are created only after confirmation.

Security operations

See who is protected—and who still needs attention.

Nelx DualGuard includes an administrative security layer for managing users, reviewing authentication posture, tracing events and producing reports.

  • 2FA User Management with live per-user method and activity visibility.
  • Audit Trail and security event tracking.
  • Generate Reports area for operational review and exports.
  • User-level controls such as block user, reset secret key and deactivate 2FA method.
  • Tabbed security operations that keep user management, audit and reporting close together.
◴Dashboard
▤Audit Trail
♙User Management
▣Generate Reports
User 2FA Management
Show
20 ▾
entries
Search:
User
Active 2FA Method
Success Attempts
Failed Attempts
Last Activity
Block User
Status
Reset Secret Key
Deactivate 2FA Method
Amina K.a•••@example.com
Email
61
3
Oct 03, 2026
Active
Jin Y.j•••@example.com
Off
0
0
No activity
Active
Nelx Demod•••@example.com
TOTP
218
11
Sep 24, 2026
Active
API Usern•••@example.com
Off
0
0
No activity
Active
Rincor•••@example.com
TOTP
61
4
Sep 22, 2026
Active
Advanced WordPress security

Harden the application—not just the login form.

The Pro build includes a second security layer for reducing exposed WordPress surfaces, filtering hostile request patterns and making reconnaissance harder.

Core Hardening

Reduce default WordPress exposure and tighten browser-facing security behavior.

Security headersHSTSX-Frame-OptionsReferrer-PolicyPermissions-PolicyHide generatorSecure WP pathsXML-RPC control

Request Filtering & Firewall

Screen requests for suspicious patterns and maintain a record of what gets blocked.

SQL injection patternsSuspicious eval()Custom regexCookies poisoningBlocked request logsURL exclusions

Contextual Blocking

Apply access controls based on where traffic comes from and how it identifies itself.

IP rangesUser-Agent blockingGeoIP countriesExcluded IPsLog retention

Endpoints, Mapping & Obfuscation

Control public WordPress endpoints and reduce obvious CMS fingerprints.

REST guest controlsUser enumerationFeed protectionadmin-ajax mappingTheme/plugin pathsURL mappingText mappingCMS simulation
Communication & recovery

Security messages should feel like part of your site.

Nelx DualGuard includes the communication layer needed around authentication: branded email, SMTP delivery, email logging, password workflows and verification messages.

Email branding & templates

Style registration verification, welcome messages, login 2FA, password events, technical notices and selected WordPress system emails from one interface.

SMTP & email logs

Configure SMTP, test delivery, enable debug mode and review logged emails when you need to diagnose an authentication message.

Password lifecycle

Provide reset requests, reset forms, change-password flows, expiry rules, forced changes and security notifications without falling back to a disjointed experience.

Frontend builders & developer access

Build the authentication experience where you need it.

v1.0.13 includes fifteen Elementor widgets plus twenty-two registered shortcodes covering authentication, 2FA, account recovery, trusted devices and login-status output.

15 Elementor widgets

Login, signup, 2FA selection, TOTP verification, email verification, password change/reset, login/logout controls, login tracker and trusted-device management are available as widgets.

22 shortcodes

Drop core account-security experiences into non-Elementor layouts, block content, templates or custom frontend dashboards.

Hooks, mappings & integrations

Action/filter hooks, configurable redirects, custom pages, provider credentials and system-level controls keep the product adaptable to complex WordPress builds.

// Frontend authentication & security shortcodes in v1.0.13
[-nd_pro_login_form]
[-nd_pro_signup_form]
[-nd_pro_email_verification_form]
[-nd_pro_totp_verification_form]
[-nd_pro_2fa_settings]
[-nd_pro_2fa_grace_notice]
[-totp_qr_code]
[-user_backup_codes]
[-user_email_backup_codes]
[-nd_pro_whitelisted_devices]
[-nelx_password_change_form]
[-nelx_password_reset_request]
[-nelx_password_reset_form]
[-nelx_lost_password_link]
[-nd_pro_login_button]
[-nd_pro_logout_button]
[-nelx_logout_button]
[-nd_pro_registration_success]
[-nd_pro_registration_failed]
[-nd_pro_current_user_login_info]
[-nd_pro_queried_user_login_info]
[-nd_pro_debug_tracking]
Release status

Working now. Public launch later.

Nelx DualGuard Pro is already running inside Nelx Studio systems. We are keeping the public release deliberately separate from the product’s internal readiness so onboarding, packaging refinements and commercial decisions can be finished properly.

COMING SOONNelx DualGuard Pro

Internal production build

Current internal version: 1.0.13. Public availability, final pricing tiers and licensing details are not yet announced.

Core productWorking
Internal useActive
Public releasePending

What to expect at launch

  • Integrated authentication, 2FA, user access control and WordPress hardening in one coordinated product.
  • A cleaner launch package with smoother onboarding for optional libraries and provider-specific integrations.
  • Helpful setup guidance for providers, authentication methods and optional supporting services.
  • Final pricing tiers and licensing details will be announced closer to launch.
FAQs

Before Nelx DualGuard goes public.

Is Nelx DualGuard Pro available to download now?
Not publicly. v1.0.13 is a working internal build currently used by Nelx Studio, but the public package, onboarding and commercial model are still being finalized.
Is Nelx DualGuard only a two-factor authentication plugin?
No. Two-factor authentication is one part of the product. Nelx DualGuard also includes frontend login and registration workflows, password management, trusted devices, social authentication, security operations, WordPress hardening, endpoint controls and request filtering.
Which 2FA methods are included?
The current build includes email OTP, authenticator-app TOTP, backup codes and email backup codes. SMS and WhatsApp OTP modules are also available when their gateway settings are configured.
Does it work with Elementor?
Yes. v1.0.13 includes fifteen Elementor widgets for key authentication and account-security experiences, alongside twenty-two registered shortcodes for non-Elementor layouts.
Will there be a free version?
That decision has not been finalized. The public product page will be updated when final pricing tiers, licensing details and edition structure are ready to announce.
Coming from Nelx Studio

A stronger WordPress login is only half the job.

Nelx DualGuard is being prepared as a broader security layer for teams that want authentication, account protection and practical WordPress hardening to work together.