Security
Stop one person from taking your server apart
Kirzen counts what each person does to your channels, roles, members and webhooks. Pass the limit inside the window and the protection acts.
How it counts
Every action is counted per person, inside a window. The default window is 15 seconds, and you can set it from 5 to 300. When one person passes the limit for one action, the protection acts.
A simulation with the default limits.
What it watches
These are the actions Kirzen counts, with the default limit inside the window. You can set every limit from 1 to 100.
| Action | Default limit |
|---|---|
| Channels | |
| Deleting channels | 3 |
| Creating channels | 5 |
| Editing channels | 6 |
| Roles | |
| Deleting roles | 3 |
| Creating roles | 5 |
| Editing roles | 6 |
| Members | |
| Banning members | 3 |
| Kicking members | 4 |
| Handing out roles | 2 |
| Pruning members | 1 |
| Webhooks and emoji | |
| Changing webhooks | 2 |
| Creating webhooks | 2 |
| Deleting webhooks | 3 |
| Deleting emoji | 5 |
Pruning is the exception. A prune is not dangerous in bulk, it is dangerous once, so the first one already counts.
What happens next
You choose what Kirzen does to whoever passes the limit.
- Alert only
- Post a warning and change nothing.
- Strip roles
- Remove their power and keep them in the server. This is the default.
- Kick
- Remove them from the server.
- Ban
- Remove them and keep them out.
Alerts go to a channel you pick. Without one, Kirzen acts quietly.
Who it leaves alone
The server owner is exempt by default, and you can exempt other people and roles. Bots are not exempt by default.
What it does not do
- It starts off. Only the server owner can turn it on or off. A compromised administrator switching the protection off is the first move of a competent attack.
- It needs View Audit Log. Kirzen reads the audit log to know who did what. Without that permission the protection has almost nothing to go on.
- It waits for the limit. A few ordinary changes never trigger it. The protection acts when one person reaches the limit inside the window.
- It does not rebuild what was deleted. After an attack, the denuke command recreates the channels and roles that are missing and shows a preview first.
Questions
Who can turn Anti-nuke on or off?
Only the server owner. People with the Administrator permission can change the limits, the response and who is exempt, but not switch the protection on or off.
Is Anti-nuke on by default?
No. It starts off, and the server owner turns it on.
What does Strip roles do?
It removes the roles of whoever passed the limit, so they lose their power, and it keeps them in the server. It is the default response.
Can I exempt a person or a role?
Yes. The server owner is exempt by default, and you can add other people and roles. Bots are not exempt by default.
How do I recover after an attack?
Use the denuke command. It recreates the channels and roles that are missing, and it shows a preview before it changes anything.