Learn Mark Defender

From invite to fully armed in about five minutes, plus what to do on the worst day your server has.

Getting started

  1. Invite the bot with Administrator. If you prefer exact permissions: Manage Roles, Manage Channels, Manage Webhooks, Moderate Members, Kick, Ban and View Audit Log.
  2. Move its role to the top. Server Settings, Roles, drag Mark Defender above every staff role. It cannot strip a role that sits above its own.
  3. Run /autoconfig and pick a language. It creates #logs-defender, a #verification channel and an Unverified role.
  4. Whitelist your trusted admins on the dashboard so their normal moderation is never scored. See Whitelisting staff.
Protection starts the moment the bot joins. The steps above make alerts readable and keep your own staff out of the way.

How scoring works

Every destructive action adds points to the person who did it. Points reset after 10 seconds of no activity.

Channel deleted+2
Role deleted+2
Member banned+1
Member kicked+1

At the trip threshold (default 8) the operator loses every role, gets the quarantine role if you set one, and your log channel receives a card with a ban button. Deleted channels and roles are rebuilt as they happen, even before the threshold.

Change the threshold under Anti-nuke on the dashboard. 2 is very strict; 20 lets a moderator clean up a spam wave without being stopped.

The server owner and the bot itself are never scored. Anyone else can be, including admins, unless you whitelist them.

Whitelisting staff

Dashboard, your server, Whitelist. Paste a Discord ID (turn on Developer Mode in Discord settings, then right-click a user or role and choose Copy ID).

  • Tier 0, owner level and tier 1, trusted admin: never scored.
  • Tier 2, approved bot: allowed to join without quarantine and skipped by the swarm detector.

Keep this list short. A compromised whitelisted account is the one thing the sentinel cannot stop.

Verification gate

After /autoconfig, new accounts that look risky (very new, no avatar, random-looking name) get the Unverified role and only see #verification. They press Verify to get in.

For a real human check, turn on Cloudflare Turnstile under Verification on the dashboard. The Verify button then sends a personal link that expires in 15 minutes. Members can also run /verify at any time.

Set a Verified role ID if you want passing members to receive a role as well.

Raids and lockdown

More than 10 joins in 5 seconds triggers the surge lock: new joins get the quarantine role automatically.

If a raid is already underway, engage Emergency lockdown from the dashboard Overview or with /security lockdown active:true. Every join is quarantined until you lift it.

Running a giveaway with a big expected wave? Set the mode to Event and enter your promo invite code under Posture, so legitimate joins from that invite are not locked out.

After a nuke

  1. Check #logs-defender. The alert names the operator and shows their score. Press Execute Permanent Ban if it was not a mistake.
  2. Review rebuilt channels. They come back with the same name, category, position, topic and permissions, and recent messages are replayed.
  3. Re-check permissions on restored roles. A rebuilt role gets a new ID, so channel overwrites that pointed at the old role need to be added again.
  4. Rotate access. If an admin account was compromised, ask the owner to reset their password and remove their sessions in Discord settings.
  5. Read the Incidents tab on the dashboard for the full timeline.

Premium

Buy

Open a ticket in our support server and choose Monthly or Yearly. After payment you receive a license key by DM, tied to your Discord account.

Activate

Run /premium activate license_key:YOUR-KEY in the server, or use Premium on the dashboard. The period starts at activation. Activating a second key on the same server extends it.

Move to another server

Run /premium move license_key:YOUR-KEY in the new server, or press Move on the dashboard. You can move once every 30 days; for an earlier move, contact support. The old server returns to Standard Core and its custom branding is reset.

Check

/premium status shows this server's licenses and expiry. /premium keys lists every key you own.

Custom branding

Premium servers can give the bot their own display name, avatar and accent color. It changes only in that server.

/security branding name:Night Watch color:#5B8DEF avatar:(upload)

Or use the Branding tab on the dashboard, which shows a live preview. reset:true restores the defaults.

Command reference

CommandWhat it does
/autoconfigCreates log channel, verification channel and Unverified role
/security configureMode, language, tone, promo invite code
/security set-rolesQuarantine role, verified role, log channel
/security whitelist-botApprove a bot ID
/security lockdownTurn emergency lockdown on or off
/security brandingPremium: custom name, avatar, accent color
/premium pricingPlans and how to buy
/premium statusThis server's Premium status
/premium keysLicenses you own
/premium activateActivate a key on this server
/premium moveMove your license to this server
/backupPremium: back up and restore roles and channels
/verifyPersonal Turnstile verification link

Stuck? Ask in the support server.