Security
Know who is joining before they start posting
Kirzen gives each new member a risk score from 0 to 100 and notices when many people join at once. You choose what happens above the line.
How the score works
Every signal adds points, and every signal has an innocent explanation. A new account with no avatar is usually someone who just installed Discord. That is why no single signal is enough. Switch signals on and see when the line is crossed.
Account age
Profile and name
Context
Name match
A simulation with the default weights and threshold.
What you decide
- Threshold
- The score at which the action fires. The default is 50. At 0 it catches everybody, at 100 almost nobody.
- Minimum account age
- Refuse accounts younger than this many hours outright, whatever the score says. It is off by default.
- Alerts
- The channel where arrivals are reported.
Above the line, the action is the one you pick.
- Alert only
- Post it and let them in. This is the default.
- Hold for verification
- They stay, but unverified.
- Quarantine
- Park them in a role you choose.
- Kick
- Remove them from the server.
- Ban
- Remove them and keep them out.
Raid mode
By default, 8 people joining within 20 seconds starts raid mode. For the next 10 minutes every arrival is treated as high risk, which adds 30 points to each score.
You can set the number of joins from 2 to 100, the seconds from 5 to 300 and the minutes from 1 to 1440. One command ends raid mode early.
Returning accounts
Kirzen compares each new account name with people who just left and with people removed from the server. Someone coming back as pedro2 after pedro was banned is a match.
Names under four letters are never compared. Two people called ana are two people.
What it does not do
- It starts off. New arrivals are not scored until you turn it on, and the default action only posts an alert.
- It is inference, not proof. Discord gives bots no IP, device or email, so the score uses public account data. Treat it as a prompt to look.
- It needs a combination. No single signal reaches 50 on its own, so one odd detail never gets someone removed.
- It can look without acting. The check option scores a member and does nothing else. It does not count as a join.
Questions
What is the default risk threshold?
50, on a scale from 0 to 100. You can set any value: 0 catches everybody and 100 almost nobody.
Is Raid protection on by default?
No. It starts off, and its default action only posts an alert and lets the person in.
What counts as a raid?
Eight joins within 20 seconds, by default. You can change both numbers. During raid mode every arrival is treated as high risk for 10 minutes by default.
Can I see a member's score without acting on them?
Yes. The check option scores someone and does nothing else.
Who can set it up?
People with the Manage Server permission.