Security System

1. Feature Brief

The Security System is a complete server defense suite covering real-time raid prevention, active attack mitigation, and automated server restoration. All settings can be configured through an interactive dashboard or quick slash commands.

1. Anti-nuke protection - monitors bans, kicks, channel deletes, and webhook spam in real time; takes immediate action when thresholds are exceeded
2. Heat tracking - tracks rate-of-change per moderator using a sliding-window accumulator to catch rapid malicious actions before major damage occurs
3. Quarantine system - isolates compromised accounts by stripping high-privilege roles into secure database storage and applying an isolation role
4. Micro-rollback engine - automatically re-creates deleted channels and roles with identical permissions during an active raid
5. Just-In-Time (JIT) staff elevation - grants temporary elevated moderation roles with automatic revocation and audit tracking
6. Member role passes Premium - grant self-expiring roles to members with automatic cleanup (1 hour to 30 days)
7. Interactive backup diff - inspect live differences between your current server setup and a saved backup before restoring
8. Automated rolling backups Premium - daily automated 30-day rolling server snapshots alongside manual backups

Who can use this?

Most /security commands require Administrator permission. Co-Owner management requires the Server Owner. Active staff can use /security elevate to request temporary privileges.

---

2. Sub-Systems

Anti-Nuke & Defense

Anti-nuke runs passively on every Discord event. When any non-whitelisted member exceeds configured thresholds, the defense engine acts immediately.

Core Defense Engines:

• Heat Tracker: Uses a sliding window to measure how fast a moderator triggers actions, preventing slow-burn nuke attempts
• Micro-Rollback: Detects deleted channels or roles during an attack and instantly re-creates them with their original permissions
• Quarantine Manager: Strips administrative permissions from offenders and applies a quarantine role. Use /security unquarantine <user> to restore their previous roles once safe
• Rogue Bot Defense: Intercepts actions from unverified or non-whitelisted bots and quarantines them
• Server Edit Defense: Detects unauthorized changes to server name, icon, vanity URL, or verification level

Response actions (configurable via the dashboard):

Action	Behaviour
remove_perms (default)	Strips all roles with Administrator, Ban, Kick, Manage Channels, Manage Guild, or Manage Roles
kick	Kicks the offending account immediately
ban	Permanently bans the offender and alerts the server owner

Role Position Matters

Anti-nuke can only moderate members whose highest role is below the bot’s highest role. Place Utilara’s role at the top of your role hierarchy in Server Settings.

Co-Owners & Staff JIT

Delegate trusted administrative rights and implement least-privilege security workflows.

Extra Co-Owners (/security extra-owner):

• Configured trusted users who completely bypass anti-nuke restrictions and can manage security settings
• Standard servers can configure up to 2 Extra Co-Owners
• Premium servers can configure up to 10 Extra Co-Owners

Just-In-Time (JIT) Elevation (/security elevate):

• Staff members can request temporary high-privilege roles for an active maintenance window (between 5 and 60 minutes)
• Requires a reason; all activations are permanently logged
• Staff can release their elevation early using /security elevate-release
• Roles are automatically revoked when the duration expires

Member Role Passes (/security pass) Premium:

• Grant temporary self-expiring roles to any member (e.g. 1h, 48h, 7d, 30d)
• Subcommands: /security pass grant, /security pass revoke, /security pass list
• Automatically cleans up expired passes in the background

Backups & Diff

Backups save full snapshots of your server structure to the database.

What is captured:

• Server name and icon URL
• Roles (name, color, permissions, position, hoist, mentionable flags)
• Channels (categories, text, voice, topic, slowmode, permission overwrites)
• Custom emojis and active server bans

Comparison & Restoration:

• Run /security diff backup-id:<id> to preview differences between the current server state and a snapshot before committing to a restore
• Run /security restore backup-id:<id> to restore saved structure

Tier Allocations:

• Standard (Free): Up to 3 manual backups
• Premium: Up to 25 manual backups + Automated 30-day daily rolling snapshots

Restore Confirmation Required

Restoring a backup deletes existing channels and roles before re-creating them from the snapshot. Always run /security diff first and confirm the prompt carefully.

Verification & Lockdown

CAPTCHA Verification:

• Gated entry: new members are placed in a verification queue until completing a 6-character CAPTCHA challenge
• Persistent “Click Here to Verify” button in your configured verification channel
• Modal challenge expires after 5 minutes

Server Lockdown:

• /security lockdown action:Lock revokes Send Messages and Connect across all channels for the target role
• If a verified role is configured, that role is locked; otherwise @everyone is locked
• Channel overrides are saved before locking and restored exactly when /security lockdown action:Unlock is run

Whitelist

The whitelist determines which members, roles, or channels bypass anti-nuke detection.

Scope	Behaviour
Users	Specific trusted accounts that bypass all threshold checks
Roles	Members holding these roles bypass detection
Channels	Webhook spam detection is ignored in these channels

Manage trusted entries via /security dashboard or quick CLI commands using /security whitelist action:Add/Remove.

---

3. Setup Guide

1. Initialize the system - run /security setup with an optional log-channel to receive real-time security alerts.

2. Open the control dashboard - run /security dashboard to adjust thresholds for bans, kicks, channel deletes, and webhook spam.

3. Designate extra co-owners - if you have co-founders or lead administrators, run /security extra-owner action:Add user:@user so they bypass automated flags.

4. Take a baseline backup - run /security backup name:InitialSetup to create a clean restore point of your server configuration.

Complete Command Matrix

Command	Permission	Description
/security setup	Administrator	Initialise security and set alert channel
/security dashboard	Administrator	Interactive GUI for anti-nuke, whitelist, and settings
/security lockdown	Administrator	Instant lock or unlock across all channels
/security whitelist	Administrator	Add or remove users, roles, or channels from whitelist
/security stats	Administrator	View 7-day security event counts and pending verifications
/security backup	Administrator	Create a named server backup snapshot
/security backups	Administrator	List all available backup snapshots
/security diff	Administrator	Preview differences between live server and a backup snapshot
/security restore	Administrator	Restore a backup snapshot (requires confirmation)
/security delete-backup	Administrator	Delete a saved backup by ID
/security unquarantine	Administrator	Restore roles and lift quarantine for an isolated member
/security extra-owner	Server Owner	Add or remove trusted Co-Owners
/security elevate	Staff Member	Request temporary JIT role elevation (5 to 60 mins)
/security elevate-release	Active Lease	Relinquish active elevated staff role early
/security pass grant	Manage Roles	Grant a self-expiring role pass [Premium]
/security pass revoke	Manage Roles	Revoke an active member role pass early [Premium]
/security pass list	Manage Roles	View all currently active member role passes [Premium]