Security Gateway Mesh
Platform Architecture|Discord Anti-Raid Gateway

Architected for zero friction. Hardened against raids.

Discover the comprehensive security infrastructure powering GGID — from cryptographic Cloudflare Turnstile token validation to real-time AI OCR scam eradication and automated burst-join quarantine.

< 150ms
Role Provisioning
100%
Zero Puzzle Captchas
0 Bytes
Plaintext IPs Saved
99.95%
Edge Gateway SLA

Interactive Telemetry & Feature Explorer

Inspect how the gateway handles live verification payloads, catches proxy networks, and neutralizes malicious attachments.

Core Verification

Cryptographic proof-of-humanity with zero puzzles

Members verify through an interactive, browser-based gateway powered by Cloudflare Turnstile. No distorted characters, no traffic light tiles, and zero invasive third-party tracking cookies.

< 150ms
Role Provisioning
0%
Puzzle Frustration
TLS 1.3
OAuth Handshake
  • Stateless challenge tokens validated directly at Cloudflare Edge nodes
  • Instant role assignment via dedicated high-priority Discord bot gateway shards
  • Dedicated customizable portal slug (/v/:slug) with your server branding and logo
  • Fallback quarantine role support for unverified or pending members
ggid-gateway-worker // live telemetry
200 OK · Role Assigned
$POST /api/v1/gateway/verify-turnstile
[00.012ms] Received client payload via TLS 1.3 session
[00.045ms] Cloudflare Turnstile token attestation validated: HUMAN
[00.082ms] Discord OAuth2 snowflake mapped to guild_id: 118492049182
[00.114ms] Bot shard dispatch -> guildMemberRoleAdd(role_id: 11928374)
[00.142ms] Completed in 142ms. Audit hash 9e8a71b written to queue.
Gateway Shards Active: 12/12
Latency: 18ms
Modular Shield Stack

Six layers of automated defense

Each security module operates in isolation to keep your community secure without introducing bottleneck latency.

Human Attestation

Cloudflare Turnstile Verification

Provide frictionless member onboarding without distorted text or traffic light puzzles. Turnstile evaluates non-interactive cryptographic proof of humanity directly in the browser.

  • Sub-150ms role assignment upon challenge pass
  • Zero third-party advertising cookies or trackers
  • TLS 1.3 encrypted handshake with Cloudflare Edge nodes
  • Configurable custom vanity URL slug (/v/:slug)
Role Provisioning<150ms
Content Defense

AI OCR Image & Phishing Inspector

Inspects image attachments, screenshots, and embeds in real time. Optical character recognition extracts hidden text to detect fraudulent Nitro giveaways, scam QR codes, and malicious links.

  • Real-time OCR extraction across PNG, JPG, and WebP
  • Detection of fake Discord Nitro promotions and scam QR codes
  • Automated deletion of malicious messages within 38ms
  • Instant moderator webhook alerts with flagged image context
Scan Latency38ms
Network Intelligence

Datacenter ASN & VPN Radar

Examines incoming connection metadata against 75,000+ datacenter ASN blocks and commercial VPN egress pools. Stops automated proxy rotation scripts before they ever enter your channels.

  • Blocks hosting providers (AWS, OVH, Hetzner, DigitalOcean)
  • Residential proxy and Tor exit node intelligence
  • Hardware entropy & canvas rendering heuristics
  • Prevents banned users from bypassing bans with burner alts
Monitored ASNs75,000+
Velocity Controls

Automated Raid Burst Shield

Rolling-window velocity algorithms measure join bursts in real time. When incoming joins exceed safe baselines, GGID engages quarantine mode to hold suspect tokens in isolation.

  • Exponential moving average join spike detection
  • Configurable minimum account age requirements
  • Automatic quarantine channel holding during active raids
  • Rich staff webhook broadcasting with incident telemetry
Raid Lockdown<250ms
GDPR Compliance

Zero-Knowledge Privacy Vault

Engineered according to European privacy and data minimization standards. Plaintext member passwords and chat logs are never stored, and verification hashes expire automatically.

  • Cryptographically salted one-way IP hashing
  • Automated partition purges after 24 hours or 90 days
  • No persistent advertising cookies or tracking pixels
  • GDPR Article 25 & 32 architecture compliance
Plaintext IP Data0 Bytes
Infrastructure

Dedicated Shard Fleet & API Webhooks

High-availability bot cluster with dedicated sharding ensures rate-limit isolation from other communities. Direct Discord gateway socket dispatch delivers unthrottled reliability.

  • 99.95% uptime SLA backed by geo-distributed edge nodes
  • Rate-limit isolated bot shards for large servers
  • Direct webhook event stream into your staff channels
  • Centralized multi-guild management dashboard
Gateway SLA99.95%
Verification Lifecycle

How a member traverses the gateway in 4 steps

High-throughput Discord gateway events processed end-to-end in less than a quarter of a second.

01Step 1

Join & Quarantine Role

A new account enters your Discord server. GGID automatically applies your configured unverified guest role, restricting channel visibility and DM interaction.

Discord Gateway Event · <50ms
02Step 2

Turnstile Attestation

The member navigates to your custom verification link (/v/:slug). Cloudflare Turnstile transparently validates genuine human interaction without puzzle friction.

Edge Challenge · Zero Puzzles
03Step 3

Threat Heuristic Analysis

The gateway cross-references connection signals against datacenter ASN blocks, commercial VPN lists, canvas fingerprints, and your minimum account age rules.

Radar Evaluation · Salt Hashed
04Step 4

Instant Role Provisioning

Once cleared, the dedicated bot shard dispatches guildMemberRoleAdd in under 150ms. The guest role is stripped, the verified role is assigned, and audit logs are recorded.

WebSocket Dispatch · <150ms

Technical Capability Matrix

Detailed breakdown of features across Standard Community, Pro Guild Shield, and Enterprise tiers.

Feature & CapabilityFree CommunityPro Guild Shield (€4.99/mo)Enterprise Shield (€19.99/mo)
Cloudflare Turnstile Verification
Role Provisioning Latency< 300ms< 150ms< 100ms
Supported Discord Servers1 ServerUp to 3 ServersUnlimited
Custom Vanity URL Slug (/v/:slug)GenericCustom BrandedCustom Domain / Apex
Datacenter ASN & Proxy BlockerBasicFull IntelligenceEnterprise Custom Rules
Hardware & Canvas Alt Detection
AI OCR Image & Giveaway FilterDedicated AI Queue
Automated Raid Burst ShieldBasicConfigurable Age & RatePriority Lockdown & Bypass
Audit Log Retention24 Hours90 DaysUnlimited / Custom
Bot Fleet ShardingShared FleetHigh-Priority ClusterDedicated Shard Cluster
SLA GuaranteeBest Effort99.9%99.95% Guaranteed
Discord Webhook DispatchStandardReal-Time VerboseCustom Webhook Routing

Frequently Asked Technical Questions

Common questions from server administrators and security operators.

Why is Turnstile better than traditional captcha systems?▼

Traditional captchas force members to solve annoying image puzzles or type distorted text, resulting in high drop-off rates and poor onboarding experiences. Cloudflare Turnstile validates human interaction cryptographically in the background in less than a second without intrusive puzzles or third-party tracking.

Does GGID cause Discord API rate limiting during high-volume raids?▼

No. GGID utilizes an edge queue architecture with dedicated bot shards and intelligent request batching. During large token raids, burst joins are throttled into memory queues and quarantined, preventing your server from hitting Discord rate limits.

What bot permissions are required for GGID to operate?▼

GGID requires Manage Roles (to assign your verified and guest roles), View Audit Log (to track moderation events), and Manage Messages (if you enable the AI OCR image scanner to delete malicious phishing embeds). We never ask for Administrator or ownership rights.

How does the hardware & canvas fingerprinting catch alt accounts?▼

When an attacker switches to a fresh Discord account and uses a VPN, their browser rendering engine, GPU instruction set, and canvas drawing behavior often remain identical. GGID computes a salted hash of these hardware attributes to recognize previously banned individuals without storing personal data.

Is GGID compliant with European privacy regulations (GDPR)?▼

Yes. GGID operates under strict data minimization rules. We do not store member passwords, email addresses, or chat messages. IP addresses are cryptographically hashed and automatically expunged following the configured retention period.

Ready to secure your Discord server?

Connect GGID in less than 2 minutes and eliminate token raids, fake Nitro scams, and proxy alt-accounts forever.