Anticheats
Hackers, begone.
Vulcan [Paid]
Vulcan is a cheat detection plugin that operates at the packet level. It is capable of detecting combat, movement, and even miscellaneous hacks. Vulcan also comes with BungeeCord support.
Setup
Start by downloading Vulcan on their Spigot page, before uploading the JAR file into your plugins folder and restarting your server. If you want to use this plugin with BungeeCord, check out the instructions on Vulcan's Bungee Page for details.
Spartan [Paid]
Spartan is an anticheat similar to Vulcan. However, it is notorious for having a large performance hit, and is thus generally not recommended over the alternative options on this page. Nevertheless, it has some unique features which may be of use depending on the server.
Setup
Start by downloading Spartan on their Spigot page, upload the JAR file into your plugins folder, and restart your server! If you want to use this plugin with bungeecord, then you're in luck: Spartan has BungeeCord functionality built-in.
GrimAC [Free]
Grim is a bit different: it's a prediction-based anticheat. This means that it simulates all possible vanilla movements, meaning it's also theoretically 'unbypassable'. However, it should be noted that it does not extensively cover combat detections at time of writing.
Setup
Download Grim on their Spigot page, before uploading the JAR file into your plugins folder and restarting your server.
Themis [Free]
Themis is a well-known lightweight & free anticheat that has been around for quite a while. It's currently one of the best check-based free anticheats around! What makes Themis stand out even more is the fact that it actually checks Bedrock players who have connected through Geyser - instead of simply ignoring them like the other anticheats listed on this page.
Setup
Download Themis on their Spigot page, before uploading the JAR file into your plugins folder and restarting your server! Please remember you will need Protocollib to run this plugin, and floodgate if you want proper Bedrock compatibility.
Tips
It's best practice to have a test server (even a local one if getting a hosted one isn't an option) to test your anti-cheat configuration before deploying it on your production server. It is important that you are aware of the settings and punishments enabled in your anticheat!
Finally, as with all anticheats, expect false positives. Please obtain as much information as possible to aid with fixing the broken detection, and then report the bug on each respective anticheat's Discord or GitHub.
By @icewaffles
Last updated