HeimdallX Protect HeimdallX ProtectEverything to protect your Discord server: start in five minutes, understand every module, find every command. 100% free.
1. Invite HeimdallX with administrator permissions.
2. Place its role at the very top of the hierarchy, or it can neither punish nor restore.
3. On join, HeimdallX posts a setup message: pick your language (🇬🇧/🇫🇷/🇪🇸/🇩🇪), run /configuration or the dashboard guided setup.
4. Pick the system channel (/system-channel) to receive alerts.
Each protection reads like a sentence: “A trap link arrives in the channel: HeimdallX deletes it before anyone reads it.” Enable everything in one click (master switch) or one by one. Severity sets the punishment: Watch (logs and deletes, never punishes), Balanced (timeout, kick), Strict (ban). And riposte (🥊 on each protection card, or /config sanction) picks the sanction per module — your choice wins over severity.
Owners: configure HeimdallX (added by the server owner, Access page). Whitelist: immune members, protections skip them. Staff: role exempt from anti-@everyone. Config commands require an owner; moderation (ban, kick, warn…) requires Staff permission — and every sanction needs a reason.
Every action stays tracked: dashboard Logs page (local date & time, channel, applied action, CSV export) and Discord log channel (/logs autoconfig creates one). Without a log channel, protections act but nobody is notified. Anti-tamper: if someone weakens the system (master OFF, module disabled, severity → watch), the owner gets a DM: who, what, when.
The captcha (Tools page) checks every newcomer: button, delay, on-failure sanction (kick, ban or nothing). Anti-raid closes the door after 8 joins in 15 seconds and kicks new accounts; manual raid mode locks everything (Settings › Emergency, or /raidmode on). In panic, /lockdown on <reason> locks all channels at once, /lockdown off <reason> reopens. Any member can alert staff with /report @member <reason>.
Overview (active protections, to-fix, coverage), Protections, Scan, Whitelist, Blacklist, Roles & members (sensitive roles, inspect a member), Tools, Logs, Settings, Access. On login, pick your server: if HeimdallX is missing, a dedicated page says so and offers install. Server info (members, channels, roles) is retained, even after leaving. Only servers you can manage (Manage Server) appear; writing requires an owner.
Bot doesn’t punish? Check /check-permissions and role hierarchy.
Legit member punished? Whitelist them.
Raid ongoing? /lockdown on raid in progress, then /lockdown off raid over (or /raidmode on/off).
Server destroyed? Anti-nuke counts destructions per author (tunable quota: 3 in 30s by default), bans the culprit and restores name, channels, categories, permissions and icon.
Suspicious webhook? Anti-webhook deletes it and punishes its author.
/ban /kick /timeout /mute /jail /unjail /unmute /tempban /softban /unban /hide /unhide /warn /unwarn /warnlist /history /note /unnote /clear /lock /unlock /lockdown /report /slowmode /snipe (moderation, reason required — /report open to all with 1-click buttons, tunable warn escalation, tunable warn expiry, persistent timed jail) · /export /stats (CSV journal, 7-day activity) · /backup create|restore|list|delete (owners) + hourly auto backup · /appeal (slash only, DM OK) · /config … (everything centralized: modules, thresholds, riposte, phishing, EN/FR/ES/DE language, channels, roles, permissions) · /configuration /raidmode /lockdown /honeypot /whitelist /blacklist /scamlens /scan /check-permissions (protection) · /all /audit /bot /captcha /dashboard /help /info /logs /support (info). Equivalent + prefix.
Anti-spam (flood → riposte, 1h by default) · Anti-link (loops → riposte) · Anti-@everyone (loops → riposte, except Staff) · Anti-token grab (image text read locally — casino, withdrawals, promo codes —, fingerprint memorized, copies blocked at once, author not punished) · Anti-webhook (rogue webhook deleted, author punished — kick/ban at choice) · Local anti-toxicity, free with no API key (deleted, repeat in 10 min → riposte) · Improved Anti-NSFW (leet-speak, spoilers, embed previews + Discord explicit filter at max, free no API) · Opt-in anti-caps (70%+) · Anti-homoglyphs (punycode, mixed alphabets) · Personal info leak (deleted + DM, no punishment) · Anti-doxxing (1h timeout) · Dangerous files blocked · Username check (sexual+minor = soft-ban, porn = renamed) · Fake invites (join-and-leave farming → deleted) · Anti-wall (1500 chars/15 lines) · Anti-duplicate (×3/30s) · Anti-emoji (10/msg) · Anti-sticker (3/30s, free) · Honeypot (trap channel: post = kicked, banned on Strict) · Anti-raid (auto-strict during raid) · Anti-bot (unverified → banned) · Anti rogue-admin-bot (bot with Admin permission → kicked + memorized, whitelist = allowed) · Anti-events (bursts → deleted, author punished) · Anti role-spam (sensitive roles in bursts → stripped, author kicked) · Anti-thread-spam (burst threads → deleted) · Anti-file-spam (same file → copies deleted) · Auto slowmode (flood → temporary slowmode) · Protected roles (deleted/emptied → restored identically) · Log protection (recreated + owner warned by DM) · Opt-in critical alerts (owner DM: nuke, raid, role-spam) · Opt-in anti-hoist (tricky name → renamed) · Opt-in anti-phishing (community blocklist) · Warn escalation (timeout/kick/ban thresholds, 0 = off) · Captcha · Abusive anti-admin (new account + Admin role → removed, author kicked) · Anti-nuke + identical restore (tunable per-author quota, permissions restored).