Protection Systems
Warden Engine protects in four independent layers.
1. Detection (checks)
| Category | Protections |
|---|---|
| Movement | Fly, Speed, NoFall, Timer, Phase, Elytra, GroundSpoof, Sprint (physics prediction) |
| Combat | Reach, Hitbox, KillAura, AutoClicker, AntiKB (Velocity), Criticals, AttackRate, WallHit, Aim |
| Blocks | FastBreak, Nuker, Scaffold, invalid placement |
| Packets | BadPackets, Rotation, Transaction, inventory movement |
Full list: Checks.
2. Instant mitigation
Cheats are neutralised before any punishment: movement → setback, combat → hit cancelled, blocks → break/place cancelled.
3. Punishment ladder
punishments.yml groups run alert → on-screen warning → kick → ban:
Combat:
checks: [combat.reach, combat.killaura]
commands:
- "3:3 [alert]"
- "8:0 [warn]"
- "15:0 [kick]"
- "30:0 [ban]"
Thresholds scale with the security level. Low-confidence evidence only triggers [alert], [log] and [webhook].
Plus / Business: [banwave] queues bans and executes them together once approved on the Night Watch page.
4. Packet & crash protection (PacketGuard)
Oversized or deeply nested NBT, books, signs and chat, packet floods and unknown plugin-message channels are dropped before processing. Limits live under config.yml → guard.
Anti-ESP (Plus / Business)
With entity-culling.enabled: true players behind walls are not sent to the client, so ESP/Tracers have nothing to show (Paper/Spigot, not Folia).
Replay (Plus / Business)
The evidence viewer replays the suspect's movement and rotation step by step.
Licence protection
The plugin only protects with a personal jar downloaded from the panel and an active subscription, verified every 30 minutes with Ed25519 signatures, one machine at a time. See Licensing.