Riot's Vanguard anti-cheat can now run on demand
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Riot Games launched "Vanguard Pre-Check," an optional on-demand mode that keeps the kernel-level driver from launching at system boot and only runs it while a Riot title is active
- Riot built the feature with Microsoft's Xbox OS Security Team, which made Windows kernel improvements that lock out the driver and memory exploits behind wallhacks, aimbots, and triggerbots
- Riot uses Windows' new "Runtime Driver Attestation Report" to scan drivers loaded since boot, letting it detect cheats without running 24/7
- Vanguard Pre-Check requires at least Windows 11 25H2, plus UEFI Mode, Secure Boot, TPM 2.0, Virtualization-Based Security, HVCI, and IOMMU enabled
- About 35% of players already meet the requirements and can switch to on-demand mode with their next update; the other 65% must reconfigure their systems first
- Riot head of anti-cheat Phillip Koskinas said on-demand mode is entirely optional and that players who don't want to change settings can keep the original always-on Vanguard
Why it matters: Privacy-conscious players no longer need a kernel-level driver running from boot, but the on-demand toggle is gated behind a Windows 11 25H2 + Secure Boot + VBS + HVCI + IOMMU stack that 65% of players don't currently meet, so the opt-in is real but narrow — and Riot's anti-cheat ceiling now depends on Microsoft's kernel security roadmap, not just Riot's own code.
Ask SkimNews
