Scam and phishing links
On by default. Lyx deletes links to about 40,000 known scam sites, refreshed every six hours, and lookalikes such as "dlscord-gift.com" or "steamcommunlty.ru" that no list has yet. Real Discord, Steam and well-known Discord sites are never flagged.
The poster is timed out for 24 hours by default; change it with /automod scam or on the AutoMod tab. Staff accounts only lose the message, and you get an alert, because a staff account posting a scam link is usually a hacked account.
Anti-raid
When a set number of members join within a set time (default 10 in 15 seconds), Lyx starts raid mode for a while (default 15 minutes).
Lockdown raises Discord's server verification level to the highest setting (a verified phone number is needed to talk) and restores it when raid mode ends. Other choices: kick or time out everyone who joins during the raid, or alert only. End it early with /security raid-end.
Anti-nuke
Watches the audit log. When one member or bot deletes channels or roles, bans or kicks members, or creates webhooks too fast (default 3 in 10 seconds), Lyx removes their roles, kicks or bans them. A misbehaving bot is always removed.
The server owner is never touched; add other trusted members with /security trust. Lyx needs View Audit Log, and can only act on members whose highest role is below Lyx's, so keep the Lyx role near the top.
Account age
Accounts younger than a minimum (default 7 days) are kicked, timed out until old enough, or sent to staff review.
Warning escalation and temporary bans
Escalation punishes automatically when warnings add up, for example 3 warnings: 1 hour timeout, 5: kick, 7: ban. Set the steps with /security escalation or on the Security tab. Cleared warnings do not count.
/ban user:@x duration:7d bans for a while; Lyx unbans automatically and records it as a case. Durations: 30m, 12h, 7d, 2w, up to 365 days.
Alerts
Raids, nukes, account age and verification are posted to your log channel. Turn on "Raids, nukes and verification" on the Logging tab.