Advanced detections
Behavioral Engine
Play is scored against each player’s own baseline rather than a global average, so the outliers in your game stand out within seconds - not after the raid is over.
Server authoritativeShadow firstBuilt for Roblox
Roblox anti-cheat & moderation platformSerious detection.
Provable bans.
waves.ac scores behavior on your game's own servers, against each player's own baseline. Evidence is attached to every verdict. Start in shadow mode, watch it work, then enforce on your terms.
Command center
Live Console
A real-time operations room for your game: streaming events, the review queue, ban history and audit trail. One dashboard, every decision in context.
Alias monitoring
Evasion Graph
Recursive identity linkage connects returning offenders across accounts using legitimate platform signals, surfacing suspected alts as reviewable cases.
Network protection
Global Bans
A cheater confirmed across the network is banned from every waves.ac-protected experience at once, so being caught in one game is not a free move to the next. The bar to reach the network is corroborated machine evidence - no single owner can push a name onto it.
WaveTrust
Trust Scoring
Every player carries a private standing that decides how much benefit of the doubt the engine gives before it reacts. Fair players get trusted; cheaters do not. You choose the minimum standing your game admits - the score itself, and what feeds it, stay with waves so they can’t be farmed.
Moderate anywhere
Discord Bot
Ban, warn, look up and decide anti-cheat flags right from your Discord server, with role permissions you control on the dashboard. Every action lands in the console instantly, and live flags post to your channel with one-click decisions.
See it run before you trust it.
Launch the demo console: browse the review queue, identity cases, configuration and audit log, and click through every page. No account needed.
Designed for developers
Wire waves into your experience in minutes.
The Luau SDK runs in a server Script only, never on the client, and streams HMAC-signed behavioral events through a fail-safe queue. Its guard modules (SpeedCheck, RemoteGuard, EconomyGuard) report through the same pipeline. A typed REST API lets you pull events and cases into your own tooling. Strict TypeScript on the backend, typed Luau in the SDK: the contract cannot drift.
Waves.server.luau
Detection engine
A detection engine that shows its work.
Every verdict carries the signals, baselines and confidence behind it. Reviewable before anything is enforced, auditable forever after.
Inside every verdict
signalswhat fired, and how much each one countedbaselinemeasured against this player, not a global averageconfidencean honest probability - a heuristic is labelled a heuristiccontextthe session, server and history around the momentevidencemachine-readable, exportable, kept for the recordoutcomewhat waves did, and how to undo it
How a response escalates
- 1One signal is never enougha lone anomaly is capped at a flag and can never reach a ban on its own
- 2Independent signals must agreeescalation needs corroboration from measurements that do not share a cause
- 3The response is sized to the confidenceuncertainty always downgrades the action, never upgrades it
- 4Every rung below a network ban is reversibleand every one is audit-logged with the evidence that produced it
Live Monitor
Watch your game like an operations room.
Streaming events, the review queue and the ban stream arrive over WebSocket the moment they happen, so staff act on live state instead of stale exports.
Identity Cases
The whole story behind every suspect.
Suspected evasion opens a case: how strong the link is, what it rests on, and the banned account it points back to. Evidence laid out for a human decision.
Remote Protection
Stop exploit remotes at the source.
Remote traffic is judged on the server, where an exploiter cannot forge what we read. Sensitivity is yours to tune per game from the console.
Staged Response
Escalate with confidence, not guesswork.
The response is sized to the confidence behind it, and uncertainty always downgrades it. Every rung below a network ban is reversible, and every one is audit-logged.
Plans
Coverage that grows with your game.
Every tier includes audit logging, the global auto-ban network and the shadow-first rollout. Want to try it first? The live demo is one click away, no account needed.
Ripple
Turn on enforcement, with every action reversible and logged.
$14.99/ month
Billed monthly.
Get startedFeatures including
- 1 game · 3 staff seats
- Advanced behavioral engine
- Auto-enforcement, reversible and gated
- Network-ban consume
- 30-day event retention
Surge
The full identity graph, premium heuristics and live ops.
$19.99/ month
Billed monthly.
Get startedRipple included, plus
- 3 games · 10 staff seats
- Full identity evasion graph
- Premium heuristics
- Contribute to network bans
- Config versioning · 90-day retention
Tsunami
Unlimited scale with advanced identity tooling.
$29.99/ month
Billed monthly.
Get startedSurge included, plus
- Unlimited games & staff seats
- Advanced identity graph
- Recency-tuned network bans
- Webhook routing · multi-game monitor
- 180-day event retention
0
false-positive tolerance
A lone weak signal is capped at a flag and can never reach a ban. Escalation takes corroboration, uncertainty always downgrades the response, and every rung below a network ban - a kick, then a short local ban - you can lift yourself.
100%
of bans carry evidence
Every enforcement ships with a machine-readable reason and the signals behind it. Reviewable and audit-logged, forever.
Global
auto-ban network
A cheater confirmed across the network is banned from every protected experience at once, so they can’t simply move to the next game. Reaching the network takes corroborated machine evidence, so no single owner can abuse it.
Questions & answers
Frequently asked questions
Everything you need to know about waves.ac.
Start in shadow mode today.
Full visibility from the first event, and nothing is enforced until you flip the switch yourself.