Protection and security score

How it works

The health check reads your server settings and gives a score out of 100: dangerous permissions on @everyone (including Use External Apps), the verification level, how many roles and bots have Administrator, webhooks, and which protection rules are on. Each safe problem has a Fix button.

Five rules then watch the server. Every rule starts off, and the ones that could hit a real person only alert staff until you pick a stronger action.

Set it up

1. Open Safety, then Protection on the dashboard, or run /security health in Discord.
2. Press Fix on the safe items, or Fix all.
3. Pick a staff channel for alerts (/security alerts), so every catch lands in one place with Restore, Kick and Ban buttons.
4. Turn on the rules you want. Each card on the Protection page has its own settings.

The rules

Hacked-account shield

The same message or link in 3 channels within 2 minutes: every copy is deleted, the member is timed out for 60 minutes and DMed steps to secure their account. Staff restore them with one button (or let the member press "I'm safe").

Scam links

Deletes links that pretend to be Discord, Steam or Nitro (lookalike letters, punycode, fake gift pages), plus any domains you block. Your allowed domains are never touched.

Fake staff

Flags members whose name copies a staff member, or who put Admin, Moderator or Support in their name without the role. Alert only by default.

Alt accounts

Checks new members against account age (7 days by default), the default avatar and names close to someone banned here. Public info only, never IPs.

Raid mode

10 joins in 30 seconds turns it on: verification goes up, and new joins can be timed out or kicked. It ends by itself after 15 minutes, or with the End raid button.

Commands

/security health

The score and Fix buttons. Needs Manage Server.

/security selfbot

The hacked-account shield.

/security scamlinks

The scam link filter and your own blocked or allowed domains.

/security impersonation

The fake staff check.

/security alts

The alt account check and what happens to a match.

/security raid

Raid mode: how many joins, how fast, and what happens to new joins.

/security alerts

The staff alert channel and roles to ping.

Good to know

Admins are skipped

Server admins are never caught by the link rules.

Exempt channels

Each rule can skip channels, a whole category or threads in it (Security page, Exemptions).

Permissions

Timeout Members for timeouts, Manage Messages to delete copies, Kick or Ban Members for those actions, and Manage Server to raise verification in a raid.

Records

What a rule caught is kept 90 days, then deleted.