FiveM anticheat with forensic PC checks

A FiveM anticheat is software that keeps cheaters off a FiveM server. Some anticheats run with the server and react to what a player does in game. A forensic PC check, like Ocean's, scans the player's computer for the traces a cheat leaves, including the ones they tried to hide, so staff ban with evidence.

Ocean Anti-Cheat is a forensic screenshare tool for game server staff: staff send a player a scan pin, the player runs the Ocean scanner, and the report shows what the scan found on their PC. This page explains what each kind of FiveM anticheat can see, and where a PC check fits.

Two places a FiveM anticheat can look

In the game session. An in-game anticheat runs with your server and reacts to what a player does while they play: an action that should not be possible, a weapon or vehicle that appears from nowhere, an event the server did not expect. It works in real time, for every player, and it can kick or ban on the spot. What it sees is the session.

On the player's PC. A PC check, also called a screenshare, happens when staff suspect someone. The player runs a scanner, and the scanner reads the Windows records of what ran on that computer, not only what is running now. A cheat that was closed five minutes before the check, or deleted, still leaves traces there. That is where Ocean works.

The two answer different questions. The in-game anticheat asks "is this player doing something impossible right now?". The PC check asks "is there a cheat on this computer, or was there one?", and its answer is a report you can keep.

What a PC check finds on FiveM

Ocean's FiveM detect logs are its confirmed FiveM detections:

• Injections into the game: Generic Cheat Injection, Game Hooking and Possible Loaded Cheat flag code from outside the game loaded into it. The docs note that Possible Loaded Cheat can be a false positive with ReShade on FiveM.
• Cheat menus drawn over the game: Generic Cheat Render and Generic Game Cheat Render flag a GUI or render module injected into the game.
• Ban evasion: Active Spoofer and GlobalBan Patching flag attempts to get around a CitizenFX or server ban, the kind of player an in-game ban alone does not keep out.
• Tampering: Folder Modification flags files created, deleted or edited in the folders that matter in a screenshare, and Suspicious Unloaded Module flags a DLL unloaded from the game process.

Detect logs are the confirmed detections. Warning logs are modifications that can be used to evade detection but are not proof on their own, and your server decides the penalty. The report also rates signs that the PC was cleaned before the scan and exports a complete report you can keep as proof.

How a FiveM PC check runs with Ocean

Staff create an eight-character pin in the dashboard, the player downloads the scanner from the downloads page and enters it, and a typical scan takes about 60 seconds. Ocean runs as a protected process, so the player cannot close it from Task Manager while it scans. The full walkthrough, with what to look at in the report, is in how to PC check a player on FiveM.

Before your first check, read whether PC checking is against the FiveM ToS: the player starts Ocean and accepts its terms, and your server's own rules say what follows a refusal.

What it costs

On the pricing page, a personal FiveM licence costs $10 a month, and paid licences come with unlimited pins. One licence covers one game; Enterprise plans add seats for a staff team. Ocean is free only for Minecraft Java.

If you are comparing PC check tools, see how Ocean compares with Detect.ac and Echo.