Catch the cheaters.
Keep the real players.
A confidence-based, packet-level anti-cheat that flags on evidence, not on a hunch. Every detection is weighted, logged, and replayable, so a lag spike never bans someone who didn't earn it.
Built like the anti-cheats that actually hold up.
A packet engine for the checks that need raw data, stable server events for the rest, and a scoring core that refuses to act on a single flag.
Packet-level engine
Built on PacketEvents. Timer (balance-counter), BadPackets, attack-order checks and crash/oversized-packet protection that drops exploit payloads before they ever reach your server.
Confidence-based bans
Every detection adds weighted, decaying evidence to a hidden suspicion score. Kick, tempban, and ban thresholds are separate, with an "overwhelming evidence" rule before any permanent ban.
Self-hosted record store
A bundled SQLite database logs every player who joins: IP, brand, alerts, peak suspicion, and ban code. Query it with /ac lookup, export a CSV, or open the built-in dashboard.
Lag-compensated
Checks suspend below 17.5 TPS and above 400 ms ping, widen above 120 ms, and grant grace after join, teleport, knockback, and damage. The server verifies world state itself instead of trusting the client.
Staff tooling + AI dashboard
Live alerts, verbose mode, freeze, per-player evidence logs, appeal-code resolution, replay viewer, and a full web intelligence dashboard with AI-powered investigations. Everything a mod team needs to verify before acting.
World & economy guard
X-ray exposure scoring, anti-ESP/freecam occlusion, dupe watermarking, bot-flood connection throttling, and name-entropy scoring. Coverage well past just movement and combat.
What Sentinel catches
93 checks across six layers. Combat and movement are buffered; world and aim checks are advisory by design to keep false positives at zero.
Combat
- Reach (hitbox raytrace + ping leniency)
- KillAura A–D: state, angle, multi-target, raytrace
- AutoClicker (CPS + click-interval + pattern)
- Criticals, Velocity, VelocityV (partial anti-KB)
- NoSwing, AutoBlock, AimSnap, AimGcd
- BowSpam, BowAimbot, CrystalAura, AutoTotem
- BedAura, AutoAnchor, AutoPot, AutoWeapon, Honeypot
Movement
- Flight A (gravity prediction) + Flight B (hover/anti-kick)
- Speed A (rolling-window) + Speed B (friction prediction)
- NoFall, Jesus, Step, Spider A–B, HighJump, Strafe
- NoSlow, FastClimb, BoatFly, ElytraFly, ElytraSpeed
- Timer, Phase, VClip, Bhop, AutoWalk, SafeWalk, Glide
- LongJump, AutoJump, AntiVoid, Riptide, KeepSprint
Packet layer
- BadPackets: invalid rotation / position / slot
- Crash-book & sign-exploit protection
- Illegal creative-action drop
- GCD aim analyzer + rotation spoof (advisory)
- Blink/phase teleport detection
World & economy
- X-ray ore-exposure scoring
- Anti-ESP / freecam occlusion
- Dupe watermarking and audit
- Nuker, FastBreak, FastPlace, FastUse, Scaffold
- AutoFish, Tower, AutoEat, AutoInteract
- IllegalItems / NBT scan, GhostBlock
Infrastructure
- Bot-flood connection throttle
- Alt name-entropy scoring
- Client fingerprint with kick-then-ban ladder
- Cheat-client detection on join (Meteor, Wurst, Vape, etc.)
- Replay recorder — 10-second buffer saved at every flag
Chat & moderation
- Repeat / flood / caps control
- Link filter with unicode-bypass normalization
- Banned-word filter + cross-message fragment detection
- Configurable mute ladder + cheat-talk watch-words
- Webhook-ready punishment alerts
Evidence, not guesswork.
The reason Sentinel doesn't false-ban is architectural. One flag is never enough to act on.
Observe
A check spots something implausible and fills a per-check buffer first, so one-off artifacts never surface.
Score
Confirmed violations add vl × weight to a hidden, decaying suspicion score, logged with ping, TPS, and position.
Alert
Staff are notified past the alert buffer. Every flag is stored as replayable evidence for manual review.
Act
Only at thresholds: kick, then tempban, then ban. A permanent ban needs prior history and issues an appeal code.
Free to try. Simple monthly plans.
Start free, upgrade when you're ready. Cancel anytime. Checkout runs on a PCI-compliant processor.
Free
- 10 core checks — KillAura, Reach, Speed, Flight, NoFall, Scaffold, FastBreak, AutoClicker, Timer
- Confidence-based bans and evidence log
- Core staff commands
- No anti-ESP, dashboard, or advanced checks
- No updates after initial download
Pro
- All 93 detections and the full packet engine
- Client fingerprinting +
/sentinel mods - Player records,
/ac lookup, CSV export - In-game AI investigation reports (
/ac ai) - No web dashboard or replay analyzer
- No Discord alerts
- 1 server license, cancel anytime
Ultimate
- Everything in Pro
- Live web dashboard — watch your server from any browser
- Ban, kick and moderate remotely — no need to be in-game
- AI security assistant + replay analyzer
- Up to 10 servers on one license
- Discord alert webhooks + priority support
- Cancel anytime
Pro activates on 1 server; Ultimate covers up to 10. License key delivered by email right after checkout.
Your buyers' data, protected by design
The safest way to handle payment data is to never handle it. This store is built so there is nothing sensitive to steal.
No card data on the server
Checkout redirects to a PCI-DSS compliant processor (Stripe or a marketplace). Card numbers never reach this site, and are never stored on it.
Hardened API surface
Serverless functions with HMAC-hashed server IDs, rate limiting, signature-verified webhooks, and no-cache/no-index headers on every API route. Deployed with automatic HTTPS and a strict CSP.
Strict CSP, no trackers
A Content-Security-Policy, HSTS, frame-deny, and no-sniff headers ship in vercel.json. Zero third-party scripts, so nothing leaks about your visitors.
Player data stays on your box
The plugin keeps player records in your own local SQLite DB. IPs never leave your server, and the dashboard masks them by default.
Made to protect servers, not to farm bans
The things that matter when you're the one answering the appeals.
Every ban is defensible
Each punishment is backed by a timestamped evidence log and an appeal code your staff can look up in seconds. No "trust me, they were cheating."
It won't nuke your player base
Confidence scoring, buffers, lag compensation, and advisory-only world checks mean legit players don't get swept up in a bad tick.
You own everything
Self-hosted, no phone-home, no license server that can rug you. Your configs, your data, your database, all on your machine.
Running Sentinel on your server? Send us your honest review and we'll feature it here.
Paper and Purpur 1.21+ on Java 21. The packet engine bundles PacketEvents, so there's no extra plugin to install. Drop the jar in and restart.
The whole design exists to prevent that. No single flag punishes anyone: detections add decaying, weighted evidence, permanent bans require prior history, and checks back off during lag or high ping. World and aim checks are advisory (alert-only) by default.
Drop sentinel.jar into your plugins/ folder and restart. Configure everything in plugins/Sentinel/config.yml. Sensible, conservative defaults ship out of the box. Full steps for your specific host are in the install guide.
Free gives you 10 core checks (KillAura, Reach, Speed, Flight, etc.) to try Sentinel risk-free. Pro ($4.99/mo) unlocks all 93 checks, client fingerprinting, and player records for 1 server, running entirely on your machine. Ultimate ($12.99/mo) adds up to 10 servers, the live web dashboard, remote moderation, the AI assistant, Discord webhooks, and priority support. Pro and Ultimate have the exact same detections — Ultimate adds the tools to manage it all from anywhere. Cancel either plan anytime.
After checkout you receive a license key. Drop it into the plugin (run /sentinel activate <key> in console, or paste it into a license.key file) and it unlocks instantly. The key is bound to that server, and each key covers one server.
Yes. Payment data is handled entirely by a PCI-compliant processor and never stored on this site. Player records stay in your own local SQLite database, with dashboard IP-masking on by default.
Yes. Email sentinel.support.help@gmail.com any time. Pro licenses get priority replies.
Stop cheaters. Keep your legit players.
Drop the jar in, restart, and let the evidence do the talking.