Checking your connection…

FiveM Security · Open Source · Cloud

hoaxeye

Because security matters to us.

Switching from another anti-cheat? →
3.2M+indexed signals · as of 07/2026
20+detection modules
100%advisories & research open
<0.2 msFiveM server load
hoaxeye dashboard
Built for FiveM

One resource.
One API key. Done.

Cheats are an ecosystem — security should be one too. hoaxeye scores every join against identity, network, and behavioural signals. You get a risk score, a flag list, and a verdict — what happens next is up to you.

Read the docs
</>server.lua
 
open-source

What helps the scene
gets published.

We build hoaxeye in the open. Vulnerabilities get documented and patched, the research is reproducible.

HXA-2026-001Severity: high

Unvalidated client events in common server resources

Patch ready — ships with the repo

Advisories & patches

We document security vulnerabilities in FiveM resources — and ship the patches with them. To install, not to fear.

Research

We publish our behavioral-analysis methodology — insights belong to the scene, not the vault.

Detection stays protected

We show what we detect and why — not how. Open detection code would be a manual for evasion.

What goes public, and when
  1. 01Security advisories & patchesAugust 10, 2026
  2. 02Behavioral-analysis researchongoing
Advisories are published on an ongoing basis. Advisories →

The client, detection signatures and cloud models stay closed — anything that directly helps cheaters will not be published.

research preview

Cheats give themselves away
through behavior.

Signatures detect what is known. Behavioral analysis detects what stands out. We are building an analysis layer for anomalies in play behavior — and we publish the methodology.

In development

Menu-overlay behavior

Behavioral patterns consistent with third-party menu overlays — detected by behavior, not by name.

Camera anomalies

Freecam signatures and frozen perspectives — correlated with movement and input instead of judged in isolation.

Movement anomalies

When rendered movement and server-side telemetry drift apart, that becomes a signal.

Pattern correlation

Single signals never decide alone — only recurring patterns across time windows raise the score.

hoaxeye produces verdicts — the operator makes the decision. Always.

01 · Signals02 · Rules03 · Action
The pipeline

One join.
Three layers. One verdict.

Advisories & research: open · detection & cloud: protected

01

Signals

hwid_reuse
ban_linked
vpn_detected
velocity_anomaly
nui_mismatch

Every join fires 29 identity tokens across 5 persistence layers.

02

Rules

identity correlation+38
partner intelligence+25
behavioral anomaly+14
account age penalty+6
risk score0/ 100

Weighted scoring across 20+ detection modules. Tuned by you.

03

Action

observe
score
enforce
verdicthigh_risk — auto-kicked

Observe, score, or enforce. Your rule, your choice.

The product

Everything you need.
Nothing you don't.

Interactive demo with synthetic data — the live dashboard is part of every cloud plan.

Interactive demo
01

Overview

Live signals, risk scores, and enforcement activity — at a glance.

02

Rule Engine

Tunable per rule — granular thresholds, escalation, and cooldowns.

03

Network Intelligence

16 sources, classified. Every VPN, datacenter, and residential IP — checked on every join.

04

HoaxAI Assistant

Ask why anyone was banned. Every flag, every history, explained in plain language.

Trust, not guesswork

Four principles
that keep every detection in check.

Hoaxeye was developed as an anti-cheat operations platform, not as an automatic ban mechanism. No detection results in a ban without context—you remain in control.

Observe Mode is the default

Just installed? Hoaxeye flags suspicious cases but doesn't ban anyone until you enable the thresholds and auto-actions for each rule.

Every decision can be explained.

The risk score displays each signal component—HWID, VPN, movement profile, linked identities—individually and with a weighting. No black box.

Staff review queue

Suspected cases are placed in the review queue and a notification is sent; they are not automatically banned. An automatic action is only triggered if you explicitly enable it for each rule set.

Appeal Export with Supporting Evidence

A player files a appeal? With just one click, you can export the timeline, signals, and server context for your mod team—all neatly documented and GDPR-compliant.

Pricing

Open for everyone.
Cloud from €9.99.

Everything we publish stays free. The cloud costs a one-time €99 activation per account — then from €9.99 per server and month, by slot size.

per server
Cloud
from €9.99/ month
+ €99 activation · one-time per account

The platform for operations: dashboard, detection network, behavioral analysis.

  • Operations dashboard & rule engine
  • Detection network & anti-VPN
  • Global ban context
  • Behavioral analysis (research preview)
  • EU hosting, DPA, GDPR TOMs
See plans

Prices in EUR, incl. VAT. Cancel monthly. No lifetime licences, no strike-through prices.

Questions

Answers.
No fluff.

An open security platform for FiveM. We publish security patches and detection research — and build a cloud platform on top with dashboard, detection network and behavioral analysis.

Start protecting
your server.

Get startedJoin the Discord