Question 1

What is server-side anti-cheat and how does it work?

Accepted Answer

Server-side anti-cheat validates what your server already knows instead of scanning the player's computer. Position, tick rate, packets, reach and block state all live on the server, so movement that outruns the vanilla cap or an attack landing through a wall is visible without trusting the client. Nothing is installed on player machines.

Question 2

How does it catch a cheat client it has never seen?

Accepted Answer

It doesn't look for the client. A renamed or recompiled build defeats signature lists, but it still has to make the player move, hit or place blocks in ways the server can rule out. We judge the behaviour, so a new client is caught by what it does the first time it does it.

Question 3

What does Thorium actually check?

Accepted Answer

Eighteen checks across four classes. Movement: Speed, Fly, NoFall, GroundSpoof, Timer, Step, Jesus, Velocity. Combat: Reach, HitAngle, MultiAura, AutoClicker, NoSwing. Packets: BadPackets. World: Scaffold, FastBreak, Nuker, InventoryMove. Each one can be switched on or off per network from the dashboard.

Question 4

Why run the analysis off my server?

Accepted Answer

An on-server anticheat plugin spends your TPS budget on its own checks, which is why deep checks and full servers usually trade against each other. Our plugin captures and forwards; the heuristics, history and correlation run on our infrastructure and come back as a verdict.

Question 5

Which server software is supported?

Accepted Answer

Paper, Spigot and Bukkit, plus forks that keep those APIs. Drop the jar into plugins/, paste your network key into config.yml, restart once, and detections start streaming to the dashboard.

Question 6

Do players need to install anything?

Accepted Answer

No. No mod, no resource pack, no launcher check. Players join exactly as they did before, on any client or platform that can reach your server.

Question 7

Does it work alongside my existing plugins?

Accepted Answer

Yes. It reads server state and events rather than taking over combat or movement handling, so it runs next to your existing anticheat, combat and world plugins. If you already run an on-server anticheat you can keep it while you compare results.

Question 8

Can I run several servers under one account?

Accepted Answer

Yes. Servers are grouped into a network, settings apply per network, and detections are correlated per player across every server in it, so someone hopping between servers reads as one case. Plans are priced by how many servers you cover.

Question 9

Does it add lag to my server?

Accepted Answer

The plugin captures telemetry and sends it; it does not run detection logic in your tick loop. Analysis happens on our side and a verdict typically returns in under a second, so detection depth does not come out of your TPS.

Question 10

What about false positives?

Accepted Answer

Checks are tuned against real gameplay, and three of them (Velocity, AutoClicker and Scaffold) are flag-only by default: they raise a flag for an admin to review rather than acting on their own. Every check can be disabled per network, and each detection keeps its context and a replay link so a ban is a decision you can look at rather than take on faith.

Question 11

How do new checks reach my server?

Accepted Answer

Detection logic lives on our side, so a retuned or new check reaches every connected server without a jar swap or restart window. You update the plugin only when the capture side changes.

Question 12

What happens if my server loses connection to Thorium?

Accepted Answer

Your server keeps running normally. The plugin queues what it can and resumes streaming when the connection returns; gameplay never waits on us.

Question 13

What data do you collect?

Accepted Answer

Gameplay telemetry from your server: player identity (UUID and username), positions, actions, timings and the events a check needs. No scanning of player machines, no system information, and nothing from anyone who isn't on your server.

Question 14

Who owns the data, and is it sold?

Accepted Answer

You do, and no. Data is encrypted in transit and at rest, never sold or shared, and you control what your servers collect. We are compliant with GDPR and comparable privacy regulations.

Question 15

What's included in each plan?

Accepted Answer

Every plan runs every detection. The tier changes how many servers you cover, how fast support answers and how deep the analytics go, from $4.99 a month for a single server up to custom Enterprise deployments. All new accounts get 14 days free with no card required.

Question 16

Do you help with setup?

Accepted Answer

Yes. Setup is a jar and a key, but if something is odd about your stack, ask in Discord and an engineer will answer. Higher tiers add priority routing and, at the top, a dedicated channel.

Question 17

What about FiveM and Hytale?

Accepted Answer

FiveM is in development and next after Minecraft; Hytale is queued behind it, ready for its launch. Both have waitlists, and waitlist servers get keys before general availability.

How the detection actually works

How it works

Setup and compatibility

Accuracy and performance

Data and privacy

Pricing and support

Still have questions?