All featuresServer Guard (Anti-Nuke & Recovery)

Server Guard (Anti-Nuke & Recovery)

Anti-nuke protection that stops mass bans, channel wipes and role attacks on your Discord server — and puts back whatever got through.

Add Sylon to your server

Overview

A single compromised admin can wipe a Discord server in minutes. Server Guard watches every destructive audit event — mass bans and kicks, channel and role deletion, mass renaming, permission escalation, webhook abuse, message purges — and steps in the moment an account crosses a safe limit. Whatever it cannot reverse live, it can rebuild afterwards: Sylon keeps periodic snapshots of the whole server, and the dashboard walks you through putting each piece back.

See it in action

Watch on YouTube

How it works

Per-actor limits

Every destructive action type has its own rolling per-minute allowance, counted per account: bans, unbans, kicks, channel create/delete/edit, role create/delete/edit, server updates, webhooks and message purges.

Immediate reversal

Crossing a limit strips the actor's roles and times them out, then undoes the action — deleted channels and roles are recreated, edits are reverted, spam channels and webhooks are removed.

Snapshots of everything

Every few hours Sylon records your roles, channels, categories, permission overrides and server identity, who holds which role, and who was last speaking in each channel.

Guided recovery

The dashboard compares a snapshot against your live server and offers each difference back on its own, in an order it enforces: roles before the permissions that name them, categories before the channels inside them.

Key capabilities

Mass ban, unban and kick protection

Channel create, delete and mass-edit protection

Role create, delete and mass-edit protection

Permission escalation and dangerous-role detection

Webhook abuse and mass message deletion detection

@everyone and role-mention spam blocking

Server identity protection (name, icon, vanity URL)

Emoji rename and deletion protection, restored from the image or the latest snapshot

Automatic server snapshots, kept for 30 days

Step-by-step recovery of channels, roles, permissions, role members and the last conversation

Setup

1.Open the dashboard, go to the Guard tab and enable it.

2.Set a log channel so every intervention is visible.

3.Add trusted roles for the people who legitimately perform bulk administration.

4.Adjust the per-minute limits under Rules to match how your staff actually works.

5.Leave automatic snapshots on, and take one by hand after any large restructure.

6.Give Sylon a role above the roles and channels you want it to be able to restore.

How it works in detail

What it watches

Guard counts destructive administrative actions per account per minute: bans, unbans and kicks; channel creation, deletion and editing; role creation, deletion and editing; server updates; webhook creation; and message purges. Crossing a limit is treated as an incident rather than routine work.

Automatic reversal

Deleted channels and roles are recreated, edits are reverted to the state the gateway saw before them, server updates are undone and permission escalations are rolled back. The point is that a compromised account cannot make lasting changes faster than Guard can put them back.

Snapshots

Every few hours Sylon stores the whole shape of the server: every role with its colour, permissions and members; every channel and category with its topic, type and per-channel permission overrides; and the server's own name, icon and settings. Snapshots pause for two hours after Guard fires, so an attack cannot rotate the last good copy out of retention.

Guided recovery

Recovery is deliberately not one button. The dashboard shows eight steps in the order they have to be done, each holding the individual items that differ, and refuses to run a step whose prerequisites are still outstanding — restoring channel permissions before their roles exist would silently drop half of them.

Trusted roles and panic mode

Trusted roles are exempt, so a genuine administrator doing genuine cleanup is not fought. Panic mode drops every limit to zero: the first destructive action of any kind is stopped, whoever makes it.

What comes back as a copy

Messages. Discord has no way to undelete one, but a webhook may post under any name and avatar, so Sylon replays the last conversation it stored into the recreated channel under the original authors' names and pictures — labelled as copies, and only once per channel. Attachments, embeds, reactions, replies, edit history and the original timestamps are not part of that, and the dashboard says so before you press the button.

Settings

Log ChannelThe channel where the bot will send log messages for this feature.

Trusted RolesMembers with these roles are trusted and won't be affected by guard limits.

Trusted MembersIndividual members who are trusted and won't be affected by guard limits.

Panic ModeWhen enabled, all destructive actions are immediately blocked regardless of limits.

Anti-Ban Limit/minMaximum number of bans allowed per minute before guard takes action.

Anti-Kick Limit/minMaximum number of kicks allowed per minute.

Anti-Channel Delete Limit/minMaximum number of channel deletions allowed per minute.

Anti-Channel Create Limit/minMaximum number of channel creations allowed per minute.

Anti-Channel Edit Limit/minMaximum number of channel edits — renames, topic changes, category moves, slowmode — allowed per minute before guard reverts them.

Anti-Role Delete Limit/minMaximum number of role deletions allowed per minute.

Anti-Role Create Limit/minMaximum number of roles one account may create per minute. Extra roles are deleted, whatever permissions they carry.

Anti-Role Edit Limit/minMaximum number of role edits allowed per minute. Edits past the limit are reverted to what the role was before.

Anti Dangerous Role CreatePrevents creation of roles with dangerous permissions like Administrator.

Anti-Guild Update Limit/minMaximum number of server setting changes allowed per minute.

Anti-Message Purge Limit/minMaximum number of messages one account may delete per minute. Guard stops the account and records what was lost — the messages themselves come back only as replayed copies, from Nuke Recovery.

Anti-Webhook Create Limit/minMaximum number of webhooks one account may create per minute. A webhook keeps posting after its creator is banned, so extra ones are deleted.

Emoji deletions per minuteHow many emoji one person may delete per minute before Guard steps in. Sylon re-uploads them from the image Discord still serves, or from its latest snapshot. Set 0 to reverse the first deletion.

Emoji edits per minuteHow many emoji one person may rename or restrict per minute before Guard puts the old name back. Set 0 to reverse the first edit.

Sticker deletions per minuteHow many stickers one person may delete per minute before Guard steps in. Sylon re-uploads them from the file Discord still serves, or from its latest snapshot. Set 0 to reverse the first deletion.

Sticker edits per minuteHow many stickers one person may rename per minute before Guard puts the old name back. Set 0 to reverse the first edit.

Event deletions per minuteHow many scheduled events one person may delete or cancel per minute before Guard recreates them. An event that has already started cannot be recreated. Set 0 to reverse the first one.

What counts as a dangerous permissionThe permissions the two dangerous-role rules judge — creating a role with one, or granting one to a role that already exists. Turning every switch off means "use Sylon's list", never "nothing is dangerous".

Anti @everyone MentionBlocks unauthorized @everyone and @here mentions.

Anti Role Mention SpamDeletes messages that mention six or more roles at once and restricts the sender.

Automatic SnapshotsTake periodic snapshots of the server's structure so a nuke can be undone from the dashboard. Snapshots pause for two hours after guard fires, so an attack cannot overwrite the last good copy.

Snapshot Interval (hours)How often a snapshot is taken. Shorter means less is lost to an attack, at the cost of more stored copies.

Snapshots KeptHow many scheduled snapshots to keep. Snapshots taken during an attack are always kept on top of this number.

Store Recent Message SendersStore who was last speaking in each channel. Messages are never restored — Discord has no way to do that — but knowing who a deleted channel belonged to is what makes recreating it worth anything.

Messages Stored per ChannelHow many recent messages to remember per channel. Set to 0 to store none.

Good to know

Guard needs high-level permissions to reverse actions — it can only restore what Sylon itself is allowed to create.

Reversal relies on the audit log, so Sylon needs View Audit Log to attribute an action to an account.

Limits are per minute, so a slow deliberate change by one admin will not trigger anything.

A recreated channel or role gets a new Discord ID. Sylon tracks the change so later recovery steps still work, but bots or integrations that stored the old ID have to be pointed at the new one.

A bot added by somebody who should not be adding bots is not Guard's department: that is handled at the door by the Join Gate, before the bot has done anything at all.

A deleted emoji is the one thing Guard cannot always bring back: Discord does not un-delete emoji, so Sylon re-uploads the image — from Discord's own CDN while it is still served, otherwise from the latest snapshot. If neither has it, the log says so instead of claiming a restore.

Frequently asked questions

What is a 'nuke'?

A rapid destructive attack — mass-deleting channels, mass-banning members, renaming everything or handing out admin roles — usually from a compromised or malicious staff account.

Does it protect against insiders?

Yes. Limits are counted per account regardless of role, so even a trusted admin cannot exceed the safe threshold. People who legitimately do bulk work go on the trusted list.

Can it undo damage?

Live, it reverses the action that crossed the limit. Afterwards, the dashboard restores channels, categories, roles, channel permissions, role membership and the server's own settings from a snapshot, one item at a time.

Can deleted messages be recovered?

Not the originals — Discord has no endpoint that undeletes a message. What Sylon can do is replay the copies it stored: a webhook may post under any name and avatar, so the last conversation goes back into a recreated channel under the original authors' names and pictures. Attachments, reactions, replies and the original timestamps do not come back, and Discord marks every webhook post with an app badge, so nobody is misled into thinking they are the originals.

Will restoring undo my own recent work?

Only if you tell it to. Nothing is applied automatically: every difference is listed with exactly what would change, and you tick the ones you want. Anything created after the snapshot is flagged separately, so genuine work is not mistaken for raid damage.

Related features