HEXAM vs NoonElite Audit Engine

HEXAM is a fast, secure and modern quiz and exam plugin for WordPress. Build engaging quizzes, graded exams, knowledge checks, surveys and online assessments in minutes — then drop them into any page or post with a block or shortcode. Whether you run an e-learning site, a membership community, a school or a corporate training portal, HEXAM gives you a professional quiz experience with zero configuration headaches. Version 2.0 is a complete, ground-up rewrite: a beautiful mobile-friendly frontend, a drag-and-drop question builder, real question types, scheduling, enrolment control, live scoring and per-quiz statistics — all following current WordPress security and coding best practices. Why choose HEXAM? Question bank — a central, reusable question library (with draft/pending/private/publish statuses and tags) that feeds any quiz. Add from bank & forking — drop bank questions into a quiz as read-only linked copies that stay in sync with the bank, or fork them into local, editable questions with one click. AI question generation (WordPress 7.0+) — describe the questions you need and let the WordPress AI Client draft them: straight into the quiz editor, or into the question bank as drafts for review. Works with any provider configured under Settings → Connectors. Modern quiz UI/UX — clean, responsive, accessible quizzes that look great on any device and adapt to light or dark mode. Drag-and-drop quiz builder — reorder questions by dragging, add or remove answers instantly, no page reloads. Real question types — single choice (radio), multiple choice (checkboxes) and open text answers. Two display modes — show every question in one list, or present them one-by-one as slides with a progress bar. Scheduling — set a start date (with a friendly “not started yet” notice) and a deadline for each quiz. Enrolment control — make a quiz public, restrict it to specific user roles, or limit it to named individual users. Automatic scoring — instant grading with an optional passing percentage, pass/fail messaging and a score meter. Negative marking (penalty for wrong answers) — optionally deduct a configurable percentage of a question’s points for each wrong answer (default 25%), just like real certification and competitive exams. Unanswered questions are never penalised, so guessing carries a genuine risk. Statistics dashboard — attempts, average score, best score, pass counts and every individual submission per quiz. Images in questions & answers — insert pictures straight from the WordPress media library into any question or answer option, with a live preview while you build. Gutenberg block + shortcode — insert any quiz with the “Hexam Quiz” block or the classic [hexam id=1] shortcode. CSV import with column mapping — bulk-create quizzes from a spreadsheet and map your own column names. Fully translatable (i18n) — every string is translation-ready, and every on-screen message is customisable per quiz. Secure by design — nonces, capability checks, prepared statements, and full input sanitisation / output escaping throughout. Safe upgrades — existing 1.x installs are automatically migrated to the new database structure on activation. Perfect for Online courses and e-learning (LMS-style knowledge checks) Schools, teachers and students Employee training and onboarding assessments Membership sites and communities Lead-generation quizzes and marketing Certification and practice exams Coming soon We are actively building the next generation of HEXAM. On the roadmap: Payment paywalls — sell access to premium quizzes and certification exams, with per-quiz pricing and coupons. Certificates — auto-issue downloadable PDF certificates when a learner passes. Randomised question subsets — draw a random subset of bank questions per attempt. Timed exams — countdown timers with auto-submit. Detailed analytics & CSV export — per-question breakdowns and exportable reports.

NoonElite Audit Engine lets you build professional, branded audit quizzes that engage your visitors, score their responses, and capture qualified leads — all without writing code. Core Features (Free) Unlimited audit quizzes with multi-category scoring Customisable branding (accent colours, logo, agency name) Shortcode embedding: [noon_audit type="your-slug"] Lead capture with GDPR-compliant consent and marketing opt-in Risk-band scoring (Critical / High / Moderate / Low) Honeypot anti-spam on all forms Full lead management dashboard with pagination Quiz theme mode (auto-detect, force dark, or force light) Glass morphism background effect option Branded “Powered by” credit (opt-in only) Pro Features (available via NoonElite.com) Salesforce CRM integration (auto-sync leads as Salesforce Leads) HubSpot CRM integration (auto-sync leads as HubSpot Contacts) Cloudflare Turnstile anti-spam (invisible CAPTCHA for lead forms) CSV lead export Bulk CRM re-sync for missed leads Source Code This plugin uses React in the frontend to process forms and score leads interactively. To comply with WordPress.org guidelines, the uncompiled source code for these features is bundled directly within the plugin structure. You can find the uncompiled frontend code and package configuration inside the frontend/ directory. To build the project development assets for review: 1. Navigate to the frontend directory: cd frontend/ 2. Install dependencies: npm install 3. Compile the production assets: npm run build The built assets will map directly to the files present in frontend/dist/. External Services This plugin connects to the following third-party services under certain conditions. Please review the details below. Cloudflare Turnstile (Pro) When Cloudflare Turnstile is configured in Settings → Security, the plugin uses it to verify form submissions as a spam prevention measure. A challenge token is sent to the Cloudflare Turnstile API for server-side verification before a lead is saved. Service: Cloudflare Turnstile — https://www.cloudflare.com/products/turnstile/ Data sent: Challenge response token and visitor IP address When: On every lead form submission (if Turnstile keys are configured) Terms of Service: https://www.cloudflare.com/website-terms/ Privacy Policy: https://www.cloudflare.com/privacypolicy/ Salesforce API (Pro) When Salesforce integration is enabled in Settings → Salesforce Integration, the plugin authenticates with the Salesforce REST API using OAuth 2.0 client credentials and creates Lead records for each captured lead. Service: Salesforce — https://www.salesforce.com Data sent: Lead name, email, company, audit score, risk band, and category scores When: After a lead is submitted on the front end, or during a manual bulk sync from the admin Leads page Terms of Service: https://www.salesforce.com/company/legal/agreements/ Privacy Policy: https://www.salesforce.com/company/privacy/ HubSpot API (Pro) When HubSpot integration is enabled in Settings → HubSpot Integration, the plugin uses the HubSpot CRM API to create or update Contact records for each captured lead. Service: HubSpot — https://www.hubspot.com Data sent: Lead name, email, company, audit score, risk band, and category scores When: After a lead is submitted on the front end, or during a manual bulk sync from the admin Leads page Terms of Service: https://legal.hubspot.com/terms-of-service Privacy Policy: https://legal.hubspot.com/privacy-policy Freemius This plugin uses the Freemius SDK for license management and to offer optional premium upgrades. Freemius collects non-sensitive usage data (with opt-in consent) to help improve the product. Service: Freemius — https://freemius.com Terms of Service: https://freemius.com/terms/ Privacy Policy: https://freemius.com/privacy/