Built to catch what the others miss.
Threat model sourced from interviews with active raiders. Detectors tuned to the patterns they actually use, not theory. No user whitelisting — every member is subject to every detector, including admins.
Over 20 detectors run on Discord events. These are the highlights — each tuned to threshold values set from real raid patterns.
Channel-delete, channel-create, role-remove, member-rename, member-ban, member-kick, invite-create. Each on its own threshold and bans/kicks the actor as soon as the line crosses.
15+ destructive actions over an hour, even if no single burst trips. Catches actors pacing themselves to dodge per-event detectors.
Creation rate, message volume, role-ping velocity. Abused webhooks are deleted and the creator gets banned.
Any role gaining Administrator, Manage Server, Manage Roles, Ban, Kick, Manage Channels, or Manage Webhooks gets reverted within seconds.
If anyone moves a role above Cerberus, the owner gets DM'd. Auto-lockdown is intentionally disabled here — that path produced too many false positives.
Only the server owner can add bots. Anyone else adding one triggers an auto-kick. Eliminates the most common compromised-admin attack vector.
When a member who's been flagged in 3+ other Cerberus-protected guilds joins yours, you get an alert with their full incident history. Premium guilds auto-ban on join. Free tier is alerts only.
Severity-based action. Banning includes a DM to the user with the reason and your appeal URL — set via /cerberus mod appeal-info.
Disables Send Messages, Add Reactions, threads, and Speak for @everyone across every channel. Snapshots taken before the lock, rolled back atomically via /cerberus unlock. A pre-lockdown full backup is also auto-saved.
/cerberus raid-mode drops every detector's threshold to zero — fires on first action. Auto-fires when 4+ high/critical incidents happen in 60 seconds. Premium guilds can define custom triggers via /cerberus raid-mode trigger-add.
/cerberus hardening-run runs the full strip in one shot: revert @everyone, strip dangerous perms from non-managed roles, demote recent joiners, purge untrusted webhooks, lock channels.
All destructive owner-only commands gated to the server owner — staff with Manage Server can read but not change posture.
Most commands require Manage Server. Anything that changes security posture (lockdown, unlock, trust, hardening, role menus, threshold tuning) is owner-only. Premium-gated commands marked in amber.
Perm escalation, mention spam, and hierarchy checks still fire — even on trusted actors.
Auto-backup runs daily (3-deep free / 100-deep premium). Pre-lockdown auto-saved.
Free forever for the defensive layer. Upgrade any server to Premium when you need the active layer — no per-bot install, no migration.