Guide · for Players

AACGuard Live Explained: What It Checks While You Play

How Live works, how often it checks, what the public Live page shows, verified and not verified statuses, and how to turn it off.

Updated October 19, 2026 · 2 min read · by the AACGUARD team

A scan shows the state of a PC at one moment. AACGuard Live covers the time after that: while AACGUARD is running, it keeps an eye on what runs with your game. This guide explains what Live does, what it doesn't do, and what other people can see.

What Live checks

Every minute, Live looks at what is running on the PC right now.
Every 30 seconds while a game is open (CS2, CS:GO, CS 1.6 or another Valve game such as Team Fortress 2, Dota 2, Deadlock or Left 4 Dead), it checks what is running with the game: code injected into the game process, other programs that have the game's memory open, windows drawn over the game, proxy DLLs in the game folder, known cheat programs and loaded drivers.

Live never reads history. It does not look at Prefetch, browser traces or old files; that is what a full scan is for. This keeps it light enough to run in the background without affecting your game.

Your public status

Everyone running Live appears on the Live page with their status (CLEAN, SUSPICIOUS or CHEAT DETECTED), the game, the server and how long the session has run. Sessions stay visible for a short time after they end. A status can only get worse during a session: if something is found at 21:05, closing it at 21:06 does not turn the session back to CLEAN.

Verified or not verified

If you signed in with Steam in the app, your Live status is marked verified: it really is your account. If you did not sign in, Live lists you under the Steam account that is logged in on the PC and marks the status not verified. Admins should give verified statuses more weight.

Turning Live off

Use the tray menu (the AACGUARD icon next to the clock): Live turns it off until AACGUARD restarts. To stop everything, choose Exit in the tray menu and turn off Start with Windows. A server that requires Live will then see that you are not running it.

Live and full scans work together

A full scan finds traces of what happened before; Live shows what happens while you play. Admins often ask for a full scan once and rely on Live during matches. Neither one starts a full scan by itself: full scans only run when you press Start.