A Wick alternative for anti-nuke, anti-raid and server security

What a Wick alternative needs to cover

Servers that pick a security-first bot usually want the same things: stop a compromised admin or rogue bot from deleting channels and roles, stop waves of fake accounts from flooding chat, keep scam links out, and get back to normal quickly when something still slips through.

In BotGG those jobs are split across Moderation (anti-nuke, anti-raid, phishing protection, AutoMod and the panic button), Verification, Backups, Logs and Ban appeals. The console’s Protection tab shows a protection score with suggested fixes, the incident log and quarantined members in one place.

Anti-nuke: per-user limits, quarantine and auto-restore

With the View Audit Log permission, anti-nuke counts destructive actions per person within a time window: channel and role deletions or creations, bans, kicks, unbans, webhooks and emoji or sticker deletions — each with its own threshold. Some events trigger instantly: a role gaining dangerous permissions, a bot being added, or the server name or vanity URL changing.

• Trusted users and roles — the owner and people you trust are never punished; a trusted role only counts after it has been held for a while, and handing it out is itself a trigger.
• Responses — quarantine (roles removed and a locked-down Quarantine role added, restorable later), strip roles, kick, ban or alert only.
• Revert — dangerous permissions are taken back and bots the attacker added are kicked; undoing a server rename or deleting their webhooks needs extra permissions, and the alert says what couldn’t be reverted.
• Auto-restore (free on every plan) — deleted channels and roles are recreated from the newest backup taken before the attack.
• Actions through BotGG count too — bans and kicks someone makes the bot perform are attributed to them, not to the bot.

Anti-raid, phishing links, verification and recovery

Anti-raid detects a burst of joins by rate or by a smart raid score built from account age, default avatars, similar usernames and a shared invite. A raid locks the chosen channels, sends newcomers through a captcha (with Verification on), can kick or ban the suspicious cluster and posts an alert with Ban all / Kick all buttons; it ends by itself after a calm period. A join gate can turn away very new or avatar-less accounts at any time, and /panic start locks every channel and pauses invites in one step.

Phishing protection checks links against public phishing lists refreshed every few hours, a lookalike check for fake Discord and Steam domains, and your own block and allow lists (20 entries on Free, 500 on Pro). Verification offers a button, rules, an image captcha or questions, with an account-age gate and a staff review queue. Backups snapshot roles, channels and permissions (/backup create, scheduled on Pro) and restore them with a dry run first; Logs record what happened, and Ban appeals give wrongly banned members a fair way back.