Keep safe
Security audit
Your server’s permissions scored, with what to fix first.
The audit reads the roles, the bots, the webhooks and every channel’s permission overwrites, and scores what it finds: 100 minus 25 per critical finding, 10 per high, 5 per medium.
It flags roles with dangerous permissions (Administrator; Manage Server, Roles, Channels or Webhooks; Ban, Kick, Mention Everyone), members and bots holding Administrator, @everyone with any of them, webhooks whose owner left, public channels that grant too much, an admin role above the bot’s, and whether Discord’s 2FA requirement for moderators is on.
Plan: Free, on every plan
Five scopes
Quick scan reads roles, bots, webhooks and the 2FA setting; Full audit adds every channel’s overwrites; Permissions, Bots and Webhooks look at one area.
Findings you can act on
Sorted by severity, each names the role, bot, webhook or channel and what to change. Recommendations put them in order.
A report to hand over
Download JSON for a record, or the text report for a co-owner. The same audit runs from Discord with /security-audit.
How it works
The dashboard’s tour walks you through these same steps on the page itself, one setting at a time.
- 1
Pick a scope and run
A full audit fetches every member first and can take a minute on a large server.
- 2
Read the findings
Critical, high, medium, info. The bot’s own role, set up least-privilege by the blueprint, is skipped like every managed role.
- 3
Fix, then run again
The score follows.
What you control
- Scope
- Quick, full, permissions only, bots only, webhooks only.
- Downloads
- JSON and text report.
Commands
The slash commands this feature registers in Discord, with the permission a member needs to use them. The full reference lists every command.
/security-audit
Perform a comprehensive security audit of the server
Administrator
/security-fix
Automatically fix security issues found in the audit
Administrator
Questions people ask
Why did my new server score low?
Usually an admin role above the bot, a role with Administrator held by many, or a channel that lets @everyone manage webhooks. The findings say which; the blueprint’s own design avoids all three.
Does it change anything?
No. The audit reads and reports; you decide what to change.
Add the bot, run the tour, invite your members
It takes one afternoon. The captcha, the roles and the welcome are waiting for them.