Mod menus
A menu can hide on the client, but what it does still reaches the server. That's where Ironveil looks.
Server-side FiveM anticheat · Web dashboard
Ironveil checks what players do on the server, where a mod menu can't switch it off. You watch, kick and ban from a live dashboard in your browser.
Each check runs on your server. Clients can't hide from it or turn it off.
A menu can hide on the client, but what it does still reaches the server. That's where Ironveil looks.
Impossible movement, measured on the server. Legit teleports from your scripts are allowed automatically.
Health and armor that don't go down when they should.
Explosion spam and blacklisted explosion types, stopped before they hit anyone.
Entity firewall with allowed models and zones. Vehicles and props can't flood your server.
Blacklisted weapons, modified damage and impossible hits.
Tracks cash and bank changes on QBCore and ESX out of the box, and flags ones no script explains.
Log-only mode: see every detection first, turn on kicks and bans when you trust it.
The web dashboard shows your server live. Your staff log in with their own accounts and roles.
The resource appears in your Cfx.re Keymaster under Granted Assets. Download it there.
Right here, with the transaction ID from your receipt. No ticket, no waiting.
Put the key in config.lua, add the lines from the README to server.cfg, restart. Done.
…
Secure checkout by Tebex. You sign in with your Cfx.re account.
Your key runs on one server at a time. Moving to a new machine? Free the seat in your dashboard and start it on the new one.
Enter the transaction ID from your Tebex receipt email (it starts with tbx-) and the email you paid with.
Your license key
Put it in config.lua as Config.LicenseKey, then create your dashboard account with the same key.
No. Admins can get a bypass per detection: noclip allowed, everything else still checked. Teleports done by your own scripts are recognised by the automatic inject.
No. Ironveil injects itself into your resources so legit teleports, safe zones and money changes are known. You can also call its API from your own scripts.
Your server keeps running on its last confirmed license for up to 72 hours. Bans and enforcement are stored on your own server.
Yes. Log-only mode records every detection without punishing. Switch to enforcement when you're happy with it.
No. The dashboard gets names, server IDs and detections. Player IP addresses stay on your server.
Use "Get your key" above with your transaction ID, any time.