> _
Nothing to inject, no kernel drivers, no client to maintain: just a resource protecting your server from the inside.
No launcher, no external client for your players to download. root.xxx is a FiveM resource: drop it in resources/, add it to server.cfg and you're done.
The detection engine runs on FiveM's C# runtime: heuristic event analysis, rate-limiting, pattern matching and a compiled ban engine — not interpreted.
Lua layer for native hooks, trigger event protection and public APIs. Ready-made exports for ESX, QBCore or your custom framework.
Signs and validates every TriggerServerEvent. Spoofed events, mass-triggers and cheat menu injections are blocked before they touch your economy.
Godmode, noclip, teleport, speed-hacks, blacklisted weapon and vehicle spawns: detected server-side by comparing player state against expected physics.
Explosion filtering, entity spam, mass particles and sounds. Per-event thresholds with whitelists for legitimate resources.
Captures a screenshot via screenshot-basic at detection time and attaches it to the log: every ban ships with proof.
Real-time web panel: detections, bans, online players, suspicious event heatmaps. Discord webhooks included.
Opt-in shared ban database across servers running root.xxx, with multiple identifiers (license, steam, discord, HWID-token).
The detection core is compiled C# on FiveM's runtime. The Lua layer gives you readable config, exports and framework integration.
[Detection("GODMODE", Severity.Critical)]
public class GodmodeDetection : DetectionBase
{
public override async Task OnTick(RootPlayer p)
{
var health = p.GetHealthSnapshot();
if (health.DamageTaken == 0 &&
health.IncomingHits >= Config.HitThreshold)
{
await Flag(p, new Evidence {
Type = "godmode",
Hits = health.IncomingHits,
Window = health.WindowMs,
Screenshot = await Capture(p)
});
}
}
}Root = {}
Root.Config = {
Framework = "qbcore", -- esx | qbcore | standalone
BanSync = true,
Screenshots = true,
Detections = {
Godmode = { enabled = true, action = "ban" },
Noclip = { enabled = true, action = "ban" },
WeaponSpawn = { enabled = true, action = "ban" },
ExplosionSpam = { enabled = true, action = "kick",
threshold = 3, windowMs = 5000 },
EventSpoofing = { enabled = true, action = "ban" },
},
Whitelist = { "qb-core", "ox_lib", "es_extended" },
}
exports("IsPlayerFlagged", function(src)
return Root.Internal.flagged[src] ~= nil
end)Every server event flows through the root.xxx engine: heuristics, rate-limiting and signature validation, with less than 0.4ms of overhead per tick.
One license, continuous updates. Switch to annual and save 20%.
For growing servers.
Billed Monthly
For serious communities.
Billed Monthly
For multi-server networks.
Billed Monthly
No. root.xxx is a resource that runs entirely inside your FiveM server (C# runtime + Lua scripts). Players join normally — no launcher, no external software.
Yes. The Lua bridge ships with exports and configs ready for ESX, QBCore and standalone frameworks. Framework event whitelists come precompiled.
The C# core works asynchronously and off the main thread wherever possible: in production we measure under 0.4ms of overhead per tick even with 200+ players.
After purchase you receive the resource via Cfx.re keymaster/escrow (or direct licensed download), plus access to the dashboard and the support Discord.
Install root.xxx in under five minutes and watch detections hit your dashboard in real time.