ExploitShield vs GuardAC

ExploitShield is a free, open-source Minecraft server plugin that guards against packet exploits, crash attempts, invalid NBT data, malicious payloads, and duplication methods. It filters and validates packets, limits their rate, detects malformed traffic, and checks payloads and plugin messages. NBT checks cover oversized content, invalid UTF-8, illegal characters, and invalid stack sizes. Listed crash protections address books, signs, payloads, chat overflow, TabComplete, and invalid packet cancellation. Duplication defenses cover inventory, creative, hoppers, containers, pistons, minecarts, boats, and vehicles, alongside chunk detection and item signature tracking. Administrators can configure protection modules, thresholds, packet and rate limits, alert messages, and punishments. Responses include alerts, cancellations, kicks, bans, IP bans, and custom commands. It supports Minecraft 1.17.x–1.21.x on Paper, Spigot, and Folia, and requires Java 17+, PacketEvents 2.13.0+, and ProtocolLib 5.4.0+. The license is GPL-3.0; modified distributions or projects incorporating its source must use that license and publish their complete source code.

GuardAC is a cloud anti-cheat for Minecraft servers that looks for KillAura, aim assist, and unusual combat crosshair movement. It runs server-side, so players install nothing. During fights, the plugin sends a short set of crosshair-movement numbers to the cloud rather than video. The system learns a player's usual mouse movement and can flag changes in that style during a session. Staff receive alerts with a player name and score, and can handle punishment manually or automate it. Configurable thresholds range from alert-only operation to automatic bans. Listed enforcement actions include logs, kicks, bans, broadcasts, console commands, and optional combat suppression; replay analysis is also listed. The plugin supports Paper, Spigot, Purpur, and Folia servers running Minecraft 1.16 or newer. Supported servers require Java 17 or newer; Minecraft 26.1 and 26.2 require Java 25. The service combines a server plugin with a cloud API accessed using an API key. The free plan is listed at free, and a trial key is issued after sign-up without a card.