The Discord security bot real members never notice.

Zero IP. No web page. No ads. Free for every server, open source.

Why it exists

Most verification bots send every new member to a web page that records their IP address, browser and device. In October 2026 one of the largest leaked IP-derived locations for millions of Discord accounts. Data you never collect cannot leak.

zipguard works only from what Discord already sends every bot when someone joins, plus what happens inside your server afterwards. Nobody clicks a link. Nobody switches off a VPN.

How it works

Every join: silent scoreAccount age, avatar, public badges, the invite used, timing against other joins, creation-date clustering. Low risk passes with zero clicks.

Medium risk: one clickThe member sees one button inside Discord. Click it and they are in. A click faster than a person can click is held instead.

High risk: a human decidesHeld in a quarantine role until a moderator approves, kicks or bans with one button. The member can appeal from inside Discord.

After the join: anti-nukeThree channel or role deletes by one account inside a minute get reverted, and that account loses its roles. The server owner is never touched.

Every verdict lists the rules that fired, in plain words. Moderator overrides feed the false-positive rate in /zipguard stats. New servers run in shadow mode for 7 days: everything is logged, nothing is enforced, so you can see what it would have done before it does anything.

What we store, what we never store

Stored (90 days, deleted on request)	Never stored
Your Discord user ID and when you joined	IP addresses
The risk score and the reasons	Browser or device fingerprints
Moderator actions and appeals	Email or phone
Server settings	Connections, other servers, message content

Members run /my-data to see their rows and /forget-me to delete them at once. The data statement is generated from the database schema, so it cannot drift from what the code stores.

Honest limits

Without IP addresses or fingerprints, zipguard will not unmask a patient person on a five-year-old second account. Nobody does that without invasive data. zipguard raises the cost of alts and raids; it does not identify people. Servers that want more can turn on Discord's own verified-phone level. Discord holds the phone number; zipguard never sees it.

Setup

Invite the bot.
Run /setup. It creates #zipguard-log, #verify and a quarantine role, and hides your channels from that role. Under 60 seconds.
Drag the zipguard role above the quarantine role in Server Settings, Roles.
Watch #zipguard-log for a week. End shadow mode early with /zipguard shadow on:false.

Commands

Command	Who	What
`/setup`	Admin	Safe defaults in one step
`/zipguard shadow`	Manage Server	Log only, or enforce
`/zipguard thresholds`	Manage Server	Scores for the challenge and the high action
`/zipguard action`	Manage Server	High risk: flag, timeout, kick or ban
`/zipguard antinuke`	Manage Server	Anti-nuke on or off
`/zipguard stats`	Manage Server	Zero-click rate, completion, false positives, time to verdict
`/my-data`	Anyone	Everything zipguard holds about you
`/forget-me`	Anyone	Delete it now
`/privacy`	Anyone	Link to the data statement

Pilot

zipguard is in a private pilot with a small group of servers before the public launch. Invites open as the hosted bot comes online. If you run a server and want in, email help@myagents.email with your server name and size.

The source code becomes public at launch, so anyone can check what zipguard collects. There is no paid tier and there never will be ads on a security flow.