Vaqun
🛡️ Anti-Nuke
A "nuke" is someone with admin rights (a hacked account, a rogue admin, a malicious bot) wrecking a server in seconds: banning everyone, deleting channels and roles, adding bots, handing out Administrator. Anti-Nuke counts each person's dangerous actions and, when they go over a limit, punishes them at once and reverts what they did.
Set it up
Security → Anti-Nuke in your server's settings (only the owner can change it):
- Turn on Anti-Nuke with observe mode on: Vaqun detects and alerts, but punishes nobody.
- Watch the alerts for a few days. If something legitimate triggers, raise that action's limit or whitelist the person or role.
- Turn observe mode off.
Or from Discord: /security antinuke on|observe|off (owner only, with a confirmation).
What's watched
Each action has its own switch, limit ("more than N"), time window (seconds), punishment and whether to revert:
| Action | Default | Reverted |
|---|---|---|
| Banning members | more than 3 in 10 s | unbanned (only the ones in the attack) |
| Kicking or pruning | more than 3 in 10 s | can't be |
| Deleting channels | more than 2 in 10 s | recreated (Premium) |
| Creating channels | more than 4 in 10 s | deleted |
| Deleting roles | more than 2 in 10 s | recreated (Premium) |
| Creating roles | more than 4 in 10 s | deleted |
| Adding bots | more than 1 in 5 min | the bots are kicked |
| Giving dangerous permissions | more than 2 in 60 s | the old permissions are put back, or the role taken back |
| Creating webhooks (Premium) | more than 3 in 30 s | deleted |
| @everyone / @here pings (Premium) | more than 2 in 60 s | the messages are deleted |
| Changing the vanity URL (Premium) | any | set back |
| Changing the server's name, icon or banner (Premium) | more than 2 in 60 s | the name is set back |
| Deleting emojis or stickers (Premium) | more than 4 in 30 s | can't be |
| Deleting invites (Premium) | more than 5 in 30 s | can't be |
"Dangerous permissions" are Administrator, Manage Server, Manage Roles, Manage Channels, Manage Webhooks, Ban and Kick Members, Mention Everyone, Timeout Members and Manage Expressions: creating or editing a role with them, or giving someone a role that has them.
Punishments: remove all their roles (the default: it takes their power away without anything permanent), time out (7 days; Discord can't time out administrators, so for them it removes roles instead), kick or ban. A bot that goes over a limit is kicked or banned (you choose), and whoever added it can be punished too.
Whitelist
People and roles Anti-Nuke ignores, for every action or only some (up to 25 entries), and channels where @everyone pings are fine (an announcements channel). The owner, the trusted owners and Vaqun are always exempt.
Snapshots (Premium)
Every day Vaqun keeps a copy of your roles and channels (names, colors, permissions, positions, channel permission overwrites, topics), the last 5. When an attack deletes channels or roles, Vaqun recreates them, from what it saw when they were deleted or from the last snapshot. You can also take a snapshot by hand, preview what a restore would add, and restore: only missing things are added back, nothing that exists is touched.
Beast mode (Premium)
When many dangerous actions happen in a short time, the server is treated as under attack for an hour: every limit halves and every punishment gets one step stricter.
What it can't do
- Stop an action before it happens (Discord doesn't allow it): it reacts within about a second.
- Act on anyone whose highest role is at or above Vaqun's: keep Vaqun's role at the top.
- Bring back messages, kicked members, who had a deleted role, deleted emojis, invites, webhooks or integrations.
- See anything without the View Audit Log permission.
The Security page shows a green/yellow/red status of what Vaqun is missing.