Security

Counts members joining in a sliding time window — placed by when each one actually joined, and each member counted once (an account leaving and rejoining over and over is still one member), so a reconnect that delivers a backlog of joins all at once doesn't look like a raid. When the number of members inside the window reaches your limit, Diski treats it as a raid: it posts an alert (pinging your alert roles) with the join numbers, how many of the accounts are brand new and who joined, then does what you picked — alert only, lock down, kick or time out. Bots added by an admin never count. Detection pauses while a lockdown or raid period is running and re-arms when it ends; in Alert only mode it alerts at most once every 5 minutes.

A raid is "this many joins within this many seconds" (3–100 joins, 5–300 seconds; 10 in 10 seconds by default). Pick a limit comfortably above your busiest normal moment — a big announcement, a giveaway or a server-list bump — so genuine members never set it off. Large, busy servers usually want a higher number; small servers can go lower.

Alert only posts the alert and nothing else. Lock down starts a lockdown for the length you set (see Lockdowns). Kick and Time out act on every member who joined in the burst, then keep acting on anyone who joins during the raid period (the same length setting). Kick also removes real members if a wave of genuine joins trips the limit, so Lock down is the safer choice for most servers. Timeouts last the timeout length you set (up to 28 days, Discord's maximum) — a member who already has a longer timeout keeps it. Every kick and timeout is recorded as a moderation case (Moderation → Cases).

A lockdown raises your server's verification level to Highest — members without a role must have a verified phone number to chat — and times out new members while it runs. Diski remembers the previous level and puts it back when the lockdown ends, unless you changed it yourself in the meantime (then yours is kept). A lockdown ends on its own after the length you set, from the End lockdown button on the Security page, or with /lockdown end; it survives Diski restarts. Members timed out during a lockdown keep their timeout for its full length — if it was a false alarm, lift them from the member list — and a member who already has a longer timeout is never cut short. Diski needs the Manage Server permission to change the verification level and Timeout Members to time people out — without them it still runs and tells you what it couldn't do.

/lockdown start [minutes] locks the server down right away (1–1440 minutes; the default is your Security lockdown length, normally 15) — it works even with raid protection turned off. /lockdown end ends the current lockdown or raid period. Both are for members with Manage Server by default; you can open them to moderator roles on the Slash Commands page.

The channel where Diski reports raids, lockdowns starting and ending, and account-age gate actions. Up to 10 roles can be pinged, and only raid alerts ping them — lockdown and account-age messages are posted quietly, and nobody else is ever mentioned. For a role ping to notify people the role must be mentionable, or Diski needs the Mention All Roles permission. Account-age actions are batched into one message every few seconds, so a raid of new accounts doesn't flood the channel.

Checks every joining account's creation date against your minimum (1–365 days, 7 by default). Accounts younger than that get the action you choose the moment they join — before raid detection — and aren't sent your welcome message. Brand-new accounts are the usual sign of alts, ban evasion and raid bots. Bots added by an admin are never checked. Like raid protection it is off until you turn it on and save — Security never switches a protection on by itself, and the Security status at the top of the page (and the sidebar dot) is on while either protection is on.

Kick removes the account; it can rejoin once it is old enough. Time out keeps them but mutes them for the length you set. Quarantine role gives them a role you restrict (Diski's own role must sit above it; Diski never removes it automatically) — until you pick that role the gate does nothing at all, so you can save the rest first. Ban removes them for good — they can't come back even once their account is old enough unless you unban them. Diski needs the matching permission (Kick Members, Ban Members, Timeout Members or Manage Roles) and a role above the member. Kicks, bans and timeouts are also recorded as moderation cases (Moderation → Cases), and a timeout never shortens a longer one the member still has.

An optional private message (up to 500 characters) sent to accounts the gate acts on — before a kick or ban, since Diski can no longer reach them afterwards. It is only delivered if the member accepts DMs from server members. Leave it empty to send nothing.

When this is on (AutoMod page → Global Settings), Diski keeps one Discord AutoMod rule called "Diski — banned words" in sync with your enabled Banned Words rules, so Discord blocks those messages before anyone sees them — even while Diski is offline. Whole-word rules become whole-word keywords and the rest match anywhere in a word. Discord allows up to 1000 keywords of up to 60 characters each; words over those limits are simply left to Diski's own filter, and the page tells you when that happens. Global exempt roles and channels (and roles with moderation permissions) are exempt from the native rule too, up to Discord's limit of 20 roles and 50 channels; with an AutoMod log channel set, Discord also posts its own alert there. Messages Discord blocks never reach Diski, so the rule's own action (warn, timeout, kick, ban) does not apply to them. Diski needs the Manage Server permission; turning the switch (or AutoMod) off deletes the rule, and edits made to it inside Discord are replaced on the next sync.

A switch on AutoMod Links rules. Every link in a message is checked — including links hidden inside other links — against a community-maintained list of known phishing and scam domains that Diski refreshes every 6 hours; a match (or any subdomain of a listed domain) gets the Links rule's action and is logged as a phishing link. It works in every mode; for phishing-only protection use "Block only listed domains" with an empty list. Domains you explicitly allow are never flagged, and neither are Discord, YouTube, Google, GitHub, Twitch, X/Twitter, Reddit, Imgur, Tenor, Giphy, Spotify and Steam links — including every subdomain of those — whatever the list says. New Links rules have it on; rules created before it existed stay off until you switch it on. If the list can't be downloaded, nothing is blocked because of it until it can.