UltimateAntiCheat
github.com
What it is
UltimateAntiCheat is an open-source usermode anti-cheat project for Windows, described by its maker as an educational reference rather than commercial software. Its listed checks cover memory integrity, manually mapped and unsigned modules, debugger activity, process creation, and handles opened to a protected process. Prevention options include remapping protected sections, limiting certain new threads, hiding threads from debuggers, and applying mitigation policies. A client-server option can send a heartbeat to clients every minute; networking can be switched on or off in settings. The maker says the project avoids file-system scanning and instead checks byte patterns in processes that are already open or created while it runs. The README recommends integrating it into a game or other software as source code or a static library, rather than using a standalone DLL. It is written in C++ and supports CMake. A hybrid kernelmode and usermode approach is available, but users must supply or make their own driver. Settings are compiled into the program, and some features need newer Windows versions. The project uses AGPL-3.0, and the README says projects using its code must also be open source.
Spec sheet
- Purpose
- UltimateAntiCheat is an open-source, educational usermode anti-cheat system designed to detect and prevent common game-hacking attack vectors.Read 8 Oct 2026 · github.com
- Privacy
- The maker says the project avoids privacy-invasive techniques and does not rely on file-system scanning; it scans byte patterns in processes already open or created while the anti-cheat runs.Read 8 Oct 2026 · github.com
- License
- The repository uses the GNU Affero General Public License, and its README says projects using its code must also be open source.Read 8 Oct 2026 · github.com
- Configuration
- Settings are compiled into the program rather than stored in an external file, and can be changed in main.cpp or Common/Settings.hpp.Read 8 Oct 2026 · github.com
- Detection coverage
- Its listed checks include memory integrity, manually mapped modules, debugger activity, unsigned modules, process creation, and handles opened to the protected process.Read 8 Oct 2026 · github.com
- Integration
- The README recommends integrating the project into a game or software as source code or a static library instead of using a standalone DLL.Read 8 Oct 2026 · github.com
- Intended use
- The maker describes it as a generic reference for educational purposes rather than commercial software.Read 8 Oct 2026 · github.com
- Kernel option
- A hybrid kernelmode and usermode approach is available through settings, but users must make or provide their own driver.Read 8 Oct 2026 · github.com
- Known limitation
- The detections page says checking process window names and text is not recommended in live use because of a large false-positive risk.Read 8 Oct 2026 · github.com
- Networking
- An optional client-server mechanism sends a simple heartbeat to clients every minute, and networking can be enabled or disabled in settings.Read 8 Oct 2026 · github.com
- Platform and build
- The project is written in C++ for Windows and supports CMake; an LLVM/clang-cl option is available on a branch that the maker cautions may lag or contain errors.Read 8 Oct 2026 · github.com
- Prevention features
- Listed preventions include remapping protected sections, blocking certain new threads, hiding threads from debuggers, and applying mitigation policies.Read 8 Oct 2026 · github.com
- Windows versions
- Windows targeting is configurable at compile time, and the README gives Windows 10 and Windows 7 or later as examples; some features require newer Windows versions.Read 8 Oct 2026 · github.com
Plans and prices
Strong points and limits
Strong points
- Checks memory integrity, modules, debuggers, and process handles
- Optional client-server heartbeat can be disabled
- Uses C++ and supports CMake
- Avoids file-system scanning
Limits
- Hybrid kernelmode use requires a user-supplied driver
- Settings are compiled into the program
- Some features require newer Windows versions
- AGPL-3.0 requires projects using the code to be open source
Who it suits
It may suit developers seeking an educational reference for Windows anti-cheat techniques. The maker recommends integrating it as source code or a static library, not treating it as commercial software.
Verdict
UltimateAntiCheat provides a configurable set of usermode checks and prevention options as an educational code project. Consider the integration work, Windows feature requirements, and license terms before using it.
Where Specifiction places it
- Game Anti-Cheat Software#18 of 227.1