Built for the worst day your server has.
Attacks on Discord servers are fast. OVERLORD responds in seconds, records what happened, and tells you plainly what it did.
Protection modules
Anti-raid
Watches for a spike in joins, then alerts, locks the server down or removes new accounts, whichever you choose.
Anti-nuke
Reads the audit log for one account deleting channels or roles, banning, kicking or creating webhooks at speed, then alerts or removes that account's power.
Anti-spam and flood
Tracks message rate, repeated messages and sheer volume of text per person.
Phishing and link checks
Scores links for lookalike domains, punycode, raw IP addresses, shorteners and scam wording, and explains every verdict.
Invites and mentions
Catches unapproved invites and mass mentions, including attempted @everyone pings.
Change alerts
Reports channel and role deletions, roles gaining dangerous permissions, new webhooks and bot additions.
Emergency lockdown
Stops @everyone from speaking in every text channel, and remembers each channel's previous state so unlocking restores it exactly.
False-positive controls
Monitor mode, per-module thresholds and actions, trusted lists for people, bots, roles, domains and invites, and an appeals process.
What no bot can do
- Deleted messages cannot be recovered by anyone, including OVERLORD.
- Recreated roles and channels get new IDs, so links to the old ones stop working.
- The bot cannot act on the server owner, or on anyone whose top role is above its own.
- Link scoring is a heuristic. It can miss a new scam or flag a safe site, which is why trusted lists and monitor mode exist.
How your data is protected
- Registered bot tokens are encrypted with AES-256-GCM and are never sent to your browser.
- Share links and API keys are stored only as hashes, and are shown once.
- Every server's records are scoped to that server's ID, and backups refuse data belonging to another server.
- Uploaded file names never become filesystem paths, and executable files are refused.