Protection

Anti-nuke

Stops mass deletions by a hijacked admin account and helps restore what was lost.

What happens

Anti-nuke

Anti-nuke watches the audit log for destructive administrator actions — deleted channels, deleted roles, mass bans, new webhooks, added bots. When one account does too many of them too quickly, Defendr removes that account's dangerous roles, times it out and posts a card with the whole story. The server owner is never stopped; other bots are, because a compromised bot is the usual way a server is destroyed. Defendr's own role has to sit above the administrator roles, otherwise Discord refuses to remove them.

Example

A moderator account deletes four channels in a minute and loses its Administrator role before it reaches the fifth.

Arming anti-nuke

Until the server owner confirms the trusted list, anti-nuke only alerts — it never removes anyone's roles. That is deliberate: Defendr does not know yet which of your administrators are supposed to restructure the server. Open the trust page, add the people and roles that may, and press Confirm trusted list.

Example

You add your two co-owners and the Staff role, confirm the list, and the response changes from Alert only to Remove dangerous roles and time out for 7 days.

Restore assist

Defendr keeps a snapshot of your channels and roles and a copy of everything that was deleted in the last 14 days. After a nuke it can recreate the channels and roles with their names, types, categories and permission overwrites; overwrites that pointed at a deleted role are pointed at the recreated role. Messages cannot be restored, and webhooks have to be recreated by hand because Discord never returns a webhook address again. Channels whose names hide them are never recreated.

Example

Twelve channels and three roles come back with their permissions two minutes after the card appeared.

What your team sees in Discord

Every action posts a card like this in your log channel.

Example

in #defendr-logs

Mass deletion stoppedCritical

Member: @helper_alt
What Defendr did: The account's roles were removed; restore offered
Why: 5 channels deleted within 10 seconds

34 settings you can change

Each one starts with a sensible value. You can change them in the dashboard or in Defendr's setup in Discord.

Anti-nuke6

Anti-nuke: Stop members who delete channels or roles in bulk.
Response: What happens to a member who nukes.
Bot response: What happens to a bot that nukes.
Delete executor webhooks: Delete webhooks created by the nuking account.
Structure snapshots: Keep daily snapshots of channels and roles.
Restore assist: Offer to recreate deleted channels and roles.

Trusted list2

Trusted users: Users anti-nuke never acts on. Owner only.
Trusted roles: Roles anti-nuke never acts on. Owner only.

Limits26

Channel deletes: count: Actions of this kind that trigger anti-nuke.
Channel deletes: seconds: Time window of the count.
Channel creates: count: Actions of this kind that trigger anti-nuke.
Channel creates: seconds: Time window of the count.
Role deletes: count: Actions of this kind that trigger anti-nuke.
Role deletes: seconds: Time window of the count.
Role creates: count: Actions of this kind that trigger anti-nuke.
Role creates: seconds: Time window of the count.
Dangerous permission grants: count: Actions of this kind that trigger anti-nuke.
Dangerous permission grants: seconds: Time window of the count.
Bans: count: Actions of this kind that trigger anti-nuke.
Bans: seconds: Time window of the count.
Kicks: count: Actions of this kind that trigger anti-nuke.
Kicks: seconds: Time window of the count.
Prunes: count: Actions of this kind that trigger anti-nuke.
Prunes: seconds: Time window of the count.
Webhook creates: count: Actions of this kind that trigger anti-nuke.
Webhook creates: seconds: Time window of the count.
Bots added: count: Actions of this kind that trigger anti-nuke.
Bots added: seconds: Time window of the count.
Integrations added: count: Actions of this kind that trigger anti-nuke.
Integrations added: seconds: Time window of the count.
Vanity or security changes: count: Actions of this kind that trigger anti-nuke.
Vanity or security changes: seconds: Time window of the count.
Emoji deletes: count: Actions of this kind that trigger anti-nuke.
Emoji deletes: seconds: Time window of the count.

Compare protection levels