
Free browser protection
ClickNix™
A preemptive security extension that blocks ClickFix content before it is shown and alerts the wider security community to compromised websites. It is our gift to the internet community, especially those not yet protected by Zero Trust Connectivity.
ClickNix™: The ClickFix Destroyer
What is ClickFix?
ClickFix attacks use convincing prompts with unsafe instructions
ClickFix is an online attack that imitates a familiar CAPTCHA or “prove you are human” prompt. Instead of verifying the visitor, it instructs them to run commands that can install malware or give an attacker access to their device.
This is effective because verification prompts are common on trusted websites, and ClickFix can appear when a legitimate site is compromised without its owner's knowledge. ClickNix™ identifies and blocks the false prompt before its instructions are shown.
How it works
How ClickNix responds to an attack
ClickNix™ checks for signs of a ClickFix attack as a page opens. When one is found, the extension blocks the unsafe content before it is displayed, warns the visitor, and reports the compromised website so other defenders can respond.
- Prevents a ClickFix attack from being able to execute in the browser and warns the user about the danger.
- Notifies a central database used by a community of defenders to help protect other users from websites newly compromised by ClickFix attacks. The community can notify site owners that their sites have been compromised to allow them to fix it.
- The central database service runs tests against the compromised site to let the community know when the site has been fixed and is safe to use again.

Without protection
A false verification prompt
The visitor is asked to complete familiar-looking steps that can result in malware being installed or the device being compromised.

With ClickNix™
An unsafe-site warning
ClickNix™ blocks the ClickFix content and tells the visitor that the website may be unsafe.
Wider benefits
Benefits beyond the initial warning
ClickFix content is often placed on legitimate websites without the owner's knowledge. Reporting a detection helps protect the visitor while also giving website owners and other defenders information they can act on.
Protects people
Visitors do not need to identify the scam themselves. ClickNix™ blocks the false instructions before they can lead to malware, stolen information, or a compromised device.
Helps website owners
Website owners may not know that ClickFix content has been added to their site. Early reporting allows them to investigate, remove the threat, and restore safe access sooner.
Strengthens the community
Each reported website gives other defenders an earlier warning. They can use that information to limit access to the compromised site while the threat is still active.
Licensing & Terms of Use
ClickNix™ is available for Chrome, Microsoft Edge, and other Chromium-based browsers. It is free for individual use, with custom enterprise licensing options available to organizations.
Enterprise License available. Organizations requiring custom licensing, modified builds or to route threat telemetry directly to their own SIEM can contact our team.