🔒 Maximum Security

A switch that reserves a short list of critical actions to you, the owner (and your trusted owners). If anyone else does one, even an administrator, Vaqun reverts it and punishes them within about a second. The classic case: only you add bots; if another admin adds one, Vaqun kicks the bot and punishes the admin.

Be clear about what it is: Discord gives bots no way to block an administrator beforehand, so this is detect-and-reverse, not prevention. The real protection is having very few administrators; Maximum Security is the safety net under that.

Turn it on

Security → Maximum Security in your server's settings, or /security max on in Discord. Only the owner can turn it on or off or change it; turning it off is logged, and if a trusted owner does it you get a DM. By default it observes its first 24 hours (alerts only), so you can see what it would do first.

Make sure Vaqun's role is above every admin's: it can't act on anyone above it.

The checklist

Each item can be ticked, with its own punishment (or one for all: removing all roles by default; time out, kick and ban too) and whether to revert:

Adding bots: the bot is kicked and whoever added it punished.
Dangerous permissions: creating or editing a role with them, or giving one to someone (the old permissions are put back, or the role taken back).
@everyone's permissions: any change to them (set back).
Deleting channels or roles (recreated on Premium).
Premium: banning (unbanned), kicking or pruning, creating webhooks (deleted), integrations (a new one removed), server settings (name, icon, verification level, 2FA requirement, vanity URL, system channels: set back), invites (a new one deleted), and taking roles or permissions from Vaqun (given back where possible).

Who's allowed

You, your trusted owners (Premium) and Vaqun. Anti-Nuke's whitelist doesn't count here: the point is that even trusted admins can't do these.

For routine work there are permits (Premium): let one person do one action once, for 5 to 60 minutes (say, adding a bot you approved), from the dashboard or with /security permit. Used once, or it expires; logged either way.

Safety nets

Observe mode, the circuit breaker (it never punishes more than 3 different people in a minute without stopping to tell you) and Vaqun staff's kill switch all apply. You, your trusted owners and Vaqun are never punished. If someone removes Vaqun's roles or permissions you're alerted; if Vaqun is removed from the server it tries to DM you, but then it can't do anything else.

Commands

/security (or /security status): what's protecting the server and what Vaqun is missing (Manage Server to see it).
/security max on|observe|off|status: Maximum Security (owner only, with a confirmation that lists what will be enforced).
/security antinuke on|observe|off: Anti-Nuke (owner only).
/security permit <member> <action> [minutes]: a permit (owner only, Premium).