Anti-Cheat Toolkit Review: Is ACTk Worth It for Unity Developers?

See if Code Stage Anti-Cheat Toolkit is worth it for Unity games that need local cheat protection.

By Tim UhlottFounder|Last updated: July 27, 2026|8 minutes read
cybersecurityunityanti cheat
Anti-Cheat Toolkit Review: Is ACTk Worth It for Unity Developers?
Cheating can hurt a Unity game's economy, leaderboards, reviews, and player trust. Anti-Cheat Toolkit, also known as ACTk, helps developers protect local game data from common tools such as Cheat Engine and GameGuardian. This review explains its main features, Unity support, limits, and value.

Quick verdict

ACTk is a good choice for Unity developers who want to protect currency, health, scores, timers, unlocks, PlayerPrefs, and save files. It brings several useful tools into one package and includes the full C# source code. It works best against casual and semi-skilled cheating. It cannot promise perfect security, and online games should still validate important actions on a server. For indie, mobile, idle, and progression games, ACTk can save a lot of development time.

What is Anti-Cheat Toolkit?

Code Stage has maintained ACTk since 2013. The current 6.9 line supports Unity 2022.3 and newer, including Unity 6. It works with major Unity targets such as Windows, macOS, Linux, Android, iOS, WebGL, UWP, and consoles. ACTk runs inside your game. It does not replace a server-based or system-level anti-cheat service. Instead, it makes common client-side attacks harder and reports suspicious changes so your game can respond.

Main ACTk features

Obscured types protect values in memory

ACTk provides types such as ObscuredInt, ObscuredFloat, and ObscuredVector3. They hide values in memory and check for tampering. This makes it harder to scan for a coin count, health value, or score and change it. They are designed to feel familiar to Unity developers, so they can replace normal fields with few changes. Use obscured types for sensitive fields that stay in memory. Normal C# types are still better for short calculations, large arrays, and hot loops.

Secure PlayerPrefs and save files

ObscuredPrefs works much like Unity's PlayerPrefs, but it encrypts values and checks if they were changed. ObscuredFile and ObscuredFilePrefs provide similar protection for save files. Data can also be linked to a device or your own user ID to reduce save sharing. The included Prefs Editor helps developers view and debug regular and protected preferences inside Unity.

Cheat detectors

ACTk includes detectors for:
  • Memory value tampering
  • Speed hacks
  • System time cheating
  • Wallhacks
  • Foreign managed assemblies in Mono builds
Each detector can call your own code. You can log the event, warn the player, restore a value, limit online features, or flag an account for review. Logging detections before taking action is a good way to find false positives.

Build and mobile tools

The Code Hash Generator checks whether game code or files changed after a build. It currently supports Windows Standalone and Android. ACTk can also check app installation sources on Android and iOS. Android developers get an option that can discourage screenshots and screen recording on sensitive screens.

Does ACTk support IL2CPP?

Yes. Obscured types, protected storage, and most detectors work with IL2CPP. The Injection Detector only supports managed Mono builds because IL2CPP does not load managed assemblies in the same way. Code Stage recommends IL2CPP where available because it also reduces the managed attack surface.

Performance and build impact

Basic protection is quick to add because obscured types and preferences follow familiar Unity and C# patterns. More advanced detectors need testing and tuning. Speed checks should be tested around ads, pauses, and changes to Time.timeScale. Wallhack detection also needs the correct scene and shader setup. ACTk adds some memory and CPU work because protected values must be hidden, checked, and restored. The impact should stay small when you protect only important long-lived values. Normal types are a better choice for hot loops, large arrays, and short calculations. Test detectors in a release build because Editor results may not match a real device. Build size and setup depend on the features you enable. Mobile developers should test Android minification, device locking, and screen recording protection on real devices. The Code Hash Generator only supports Windows Standalone and Android.

Does ACTk support WebGL?

Yes, ACTk supports Unity WebGL builds. Obscured types, secure storage, and compatible detectors can add useful protection. However, browser code and local data remain under the player's control, so WebGL protection has clear limits. The Injection Detector and Code Hash Generator are not available for WebGL. Important online values should still be checked by your server.

ACTk vs Easy Anti-Cheat and other alternatives

ACTk and Easy Anti-Cheat solve different problems. ACTk runs inside a Unity project and focuses on memory values, save files, timers, wallhacks, and build checks. Developers get the full source and choose how the game responds. Easy Anti-Cheat and BattlEye are larger anti-cheat services aimed mainly at competitive online games. They provide wider process and system-level monitoring, but they do not replace ACTk features such as ObscuredInt or encrypted PlayerPrefs. They may also require more platform, account, and release setup. For many indie and mobile games, ACTk is the simpler match. A competitive multiplayer game may use Easy Anti-Cheat, BattlEye, or another major service together with server checks. ACTk can still add local data protection as another layer.

Pros and limitations

ACTk offers broad Unity support, full C# source, regular updates, secure saves, protected memory values, and several detectors in one package. It is flexible and fits normal Unity workflows. Its main limitation is that it runs on the player's device. A skilled attacker can study or change client code. Some tools are also limited by platform, and detectors need tuning before they should trigger a ban. ACTk raises the effort needed to cheat, but it does not make a game impossible to hack.

Price and value

ACTk costs $80.00 on the Unity Asset Store. The package includes full source, examples, documentation, and regular updates. It offers good value when it replaces several custom security systems or helps protect a paid game economy.

Who should use ACTk?

ACTk is a good fit for:
  • Mobile, idle, builder, and progression games
  • Games with local currency, timers, saves, or leaderboards
  • Small teams that want a Unity-first solution
  • Developers who want source access and custom responses
It is less important for games where every valuable action is already checked by an authoritative server. Even then, it can add another useful layer on the client.

Final verdict

Anti-Cheat Toolkit is one of the most complete client-side protection packages for Unity. Its strongest features are obscured memory types, protected saves, flexible detectors, broad platform support, and full source access. The API feels close to normal Unity development, so teams can protect key systems without building an anti-cheat toolkit from scratch. ACTk will not stop every skilled attacker. Used with IL2CPP, server checks, careful logging, and real-device testing, it can stop many common cheats and make the rest much harder.

Share this article

Frequently asked questions

Newsletter

Stay in the Loop.

Subscribe to our newsletter to receive the latest news, updates, and special offers directly in your inbox. Don't miss out!