SafeGuard

Staff tools

In-game menu (F10)

Staff open the menu with F10 (rebindable in Settings → Key Bindings → FiveM, "SafeGuard staff menu"). It looks like the dashboard and shows:

  • Players: everyone online, sorted by risk, with health, armour, ping and whether SafeGuard runs in their game. Actions: spectate, screenshot, message, warn, heal, revive, slay, freeze, go to, bring, eject from vehicle, delete vehicle, clear entities, remove weapons, quarantine, reset risk, kick and ban (1 hour to permanent). Destructive actions ask for a second click.
  • Detections: the latest ones on the server.
  • Staff tools: for yourself: - Player ESP: name, id, health, armour, distance and risk colour above every player, also through walls and far away; - Players on the map: a blip for every player on the map and minimap, coloured by risk; - Noclip, Invisible and Godmode (detections ignore you while they are on); - Teleport to waypoint and Repair my vehicle.
  • Server: players, detections in the last 15 minutes, active bans, blocked events and the cloud connection.

Every action is checked on the server: a player without permission who opens the menu only gets a notice.

Commands (console and game)

sg is short for safeguard.

CommandWhat it does
sg statusMode, players, detections, queue
sg player <id> · sg riskSession and risk of a player · the 10 highest-risk players
sg detections [id]Recent detections
`sg ban <id> <hours\perm> <reason> · sg kick <id> <reason>`Manual punishments
sg bans · sg unban <ban id>List and revoke bans
sg screenshot <id>Screenshot of the player's screen
sg spectate <id> · sg spectate offWatch a player in game
sg freeze <id> · sg unfreeze <id>Freeze / unfreeze
sg goto <id> · sg bring <id>Go to / bring
sg heal <id> · sg revive <id> · sg slay <id>Heal, revive, kill
sg cleanup <id>Delete the vehicles, peds and props the player spawned
sg strip <id>Remove all weapons
sg warn <id> <message>Red warning on the player's screen
sg quarantine <id> · sg release <id>Restrict without kicking
sg clear <id>Reset risk, quarantine and freeze
sg test <id> <category.type> [confidence]Dry run: scores a fake detection without punishing
sg reloadRead config.lua again

In the dashboard

In Live and on each player's page you have the same actions, plus:

  • Spectate: the player's screen live next to the server-verified state (health, armour, speed, vehicle, weapon, position, ping). Pick Smooth (~15 frames/s), Balanced (~8) or Detail (2, sharper). Frames are never stored.
  • Screenshot: saved in the player's Evidence.
Pictures come from the player's computer, so they are evidence, not absolute proof: a modified client can fake them. Important decisions rest on what the server verifies.

Multi-view

In Live → Multi-view you can watch up to 8 players at once, at about 5 pictures per second each. Fill with the riskiest picks them for you. Each server accepts at most 8 views at a time, and all of them go to the audit log.

Replays

Turn them on in Settings → Privacy → Replays (needs SafeGuard 1.3.0 or newer). From then on:

  • Serious detections proven by the server and bans create a replay automatically, at most one every 3 minutes per player (bans always get theirs).
  • Players with risk of 40 or more, or on the watch list, are captured about once every 0.75 s (at most 6 players per server). That is why the replay also shows the seconds before the detection. Only the latest pictures stay in the server's memory.
  • Staff can record one from Actions → Record replay or the spectate window.

A replay is pictures without sound, not continuous video: up to 10 pictures per second after the detection, depending on the player's game and connection. It appears on the detection, the player's profile and Evidence, and follows the screenshot retention. Each organization stores at most 200 per day.

Trust Score

Every player has a value from 0 to 100, with the factors that explain it: time in the community, hours played, days without serious detections, recent detections, staff verdicts, bans and linked accounts. Everyone starts at 50 and an active ban caps it at 10. Detections weigh more when the server proved them, and false positives marked by staff stop counting. The score is informational only: it never punishes or changes risk.

Ban network

In Punishments → Ban network, each server picks its mode:

ModeWhat it does
OffNeither shares nor reads. This is the default
Alert staffThe player joins and staff is alerted. Shares this server's automatic bans
Refuse entryRefuses players banned by the number of communities you choose (2 by default). Below that, staff is alerted. Shares this server's automatic bans

Only automatic permanent bans count, from organizations with a paid license, 24 hours after they are issued. Manual bans, IP addresses and hardware tokens are never used. A revoked ban or an accepted appeal leaves the network at once. Exceptions let any player in. Someone already refused stays blocked locally for up to 1 hour, so an exception or a revocation can take that long to reach them.

When you join the network, tell your players in your server rules or privacy notice.

Turn it on in Settings → Privacy → Cheat menu search. SafeGuard reads the text of recent screenshots and, within about 5 minutes, alerts staff if it finds the name of a known menu. The screenshot is marked with the name found. This never adds risk or punishes: a player can type those names in chat, so always check the picture. Menus that do not show in screenshots, such as those drawn over the game, are not found.

Possible alternate accounts

Anyone connecting with the same hardware token or account as a banned player is refused. If only the IP matches, staff is alerted and the player joins, because a household or a gaming café can share an IP. With IP addresses set to not stored, this alert does not work.