Riot's Vanguard is a kernel-level anti-cheat that starts before Windows fully boots. It monitors every process, scans memory, and blocks known cheat drivers. Internal cheats get detected fast. But external pixel-based tools operate entirely outside Vanguard's monitoring scope.
What Vanguard Monitors
- Process memory for injected DLLs and hooks
- Running drivers for known cheat signatures
- System calls for suspicious patterns
- Hardware IDs for previously banned machines
What Vanguard Cannot Monitor
- Screen pixel values (DXGI Desktop Duplication)
- Standard mouse input (SendInput, NtUserInjectMouseInput)
- USB HID devices (Pico W, Makcu, Arduino)
- Audio output analysis (WASAPI capture)
Skyrant operates exclusively in the second category. It reads pixels, analyzes them with AI, and moves the mouse — all using standard Windows APIs that thousands of legitimate applications use daily.
5+ Years Undetected
Skyrant has never been detected by Vanguard because there's nothing to detect. No injection, no memory reading, no drivers. The only risk is behavioral — which is why humanization features like reaction time randomization, miss chance, and natural delay are built in.