ESN Guardian › Guides

Security check

Grade your Discord server's security

Answer 13 quick questions about your server's settings and get a letter grade from A+ to F, with the exact fixes that would raise it. Takes about 2 minutes. No login, and your answers stay in your browser.

Already use ESN Guardian? Log in to the dashboard and open your server's Security grade to see Guardian's real audit of your server.

0 of 13 answered

1.Does your server require 2FA for moderator actions?

Server Settings → Safety Setup → Require 2FA for moderator actions. Only the owner can switch it on.

Yes, it's on No Not sure

2.What is your server's verification level?

Server Settings → Safety Setup → Verification level.

None Low (verified email) Medium or higher Not sure

3.Is the explicit media filter on?

Server Settings → Safety Setup → Explicit image filter.

Yes, scans everyone's media Only some members / off Not sure

4.Does @everyone have any dangerous permission server-wide?

Administrator, Manage Server, Manage Roles, Manage Channels, Ban, Kick, Manage Webhooks or Mention @everyone on the @everyone role.

No, none of those Yes, at least one Not sure

5.Do any channel overrides give @everyone Manage Channel, Manage Webhooks or Mention @everyone?

Check each channel's Permissions tab for green ticks on the @everyone row.

No Yes, in one or two channels Yes, in several Not sure

6.How many people have Administrator?

Count humans with a role that has Administrator, owner included.

1 to 3 4 to 6 7 or more Not sure

7.Do big member roles (Members, Level 10, Booster…) have Ban, Kick, Manage Roles or Manage Channels?

Any role held by lots of people that carries a moderation or management permission.

No Yes Not sure

8.How many bots have Administrator or other dangerous permissions?

Server Settings → Integrations, or check each bot's role.

None, or only our security bot One or two well-known bots Three or more, or bots I don't recognise Not sure

9.When did you last review your webhooks?

Server Settings → Integrations → Webhooks.

In the last month Never / can't remember Not sure what that means

10.Do you run an anti-nuke bot that limits mass deletes and bans?

A bot that automatically stops an account deleting channels or banning members in bulk.

Yes, with limits set Yes, but never configured No

11.What happens when 50 new accounts join in a minute?

Join-raid protection: a captcha or verify gate, or a bot that locks the server during a join wave.

A bot or gate catches it Mods handle it by hand Nothing stops them

12.Could you rebuild your channels and roles if they were deleted right now?

A backup or snapshot of your server's structure and permissions.

Yes, we have a recent backup Only partly / old backup No

13.Do you have a private security or mod log channel?

A staff-only channel where bans, kicks, deletes and bot alerts are posted.

Yes No

Get my gradeSkip it: add Guardian

How the grade works

Every server starts at 100 points. Each risky answer takes points off, weighted by how often that setting is how servers actually get raided or nuked: dangerous permissions on @everyone cost the most, then risky channel overrides, missing anti-nuke, bots with too much power and so on. The letter uses the same thresholds as ESN Guardian's /audit run: A+ at 97, A at 90, B at 80, C at 70, D at 60, below that F.

This quick check only knows what you tell it. Guardian's /audit run reads your server's real settings (2FA requirement, verification level, every role, channel override, bot and webhook) and can fix what it finds with /audit fix, which /audit undo reverts.

Questions

More guides