We publish how our analysis works, not just what it found. Understanding the method is the only way to judge a result — including ours.
4 articles
The real trade-offs between reading code and running it, why we chose static analysis for FXScan, and where each approach genuinely fails.
Review a FiveM resource's fxmanifest.lua before installing it: which scripts run server-side, risky globs, provide, remote ui_page and other red flags — with examples.
What any FiveM anti-cheat can realistically detect, where client-side detection stops, and the server-side validation you still need — from the team behind Titan AC.
The engineering behind FXScan's detections — sources, sinks, propagation, constant folding, and why the evidence path matters more than the verdict.
Report threats, contribute detections, participate in research or build open-source tooling with the Titan community.