"Undetected" used to mean a private cheat with a small user base. In 2026 it means something stricter. Vanguard now ships behavioral models, random screenshots, and aggressive driver scanning. The cheats that survive longer than a weekend have moved away from injecting into the game entirely. Three categories are doing the heavy lifting right now, and each one trades convenience for safety in a different way.
What changed in 2026
Vanguard got two upgrades that broke a lot of products. First, the screenshot system that started rolling out in late 2024 now captures the same render layer that streamers see, which kills any cheat drawing through a standard DirectX overlay. Second, the behavioral model added long-window aim analysis, so accounts get flagged on shape rather than on a single sus round. The result is that even a perfectly written internal cheat will eventually trip the profile model if the user does not pace themselves.
Anything that lives inside the Valorant process is on borrowed time. The market shifted accordingly.
Category one: external memory-only ESP
The first surviving category is the external ESP. A second process on the same machine reads Valorant memory through a kernel driver that operates outside the game's context. It never injects, never opens a handle to the game from user mode, never hooks a single function inside vgk.sys territory.
The cheat then draws ESP boxes through a hardware overlay or a transparent DWM window. Because the rendering happens outside Valorant's render pipeline, the screenshot system grabs a clean frame. Because the memory reads happen from a driver Vanguard does not own, the in-process hooks see nothing.
The trade-off is feature scope. External ESP is great. External aimbot is harder, because writing to game memory or simulating input cleanly from outside is a different problem than reading. Most external-only products in 2026 do ESP plus a soft aim assist, not full aimbot. If you want crisp clicks, this category is not for you.
Category two: pixel-AI aimbots on a second device
The second surviving category dodges Vanguard entirely by not running on the gaming PC at all. A capture card feeds the gameplay video to a second machine. That machine runs a vision model trained to spot enemy player models in real time. The model outputs a mouse delta. A microcontroller emulates a USB mouse and sends the delta back to the main PC.
Vanguard cannot see any of this. There is no driver, no process, no memory read on the gaming machine. From the OS perspective a normal mouse is moving. From Valorant's perspective the player is just very precise.
What you pay for it: latency, cost, and detectability of the actual aim shape. A vision-AI aimbot snaps differently than a memory aimbot, and Riot's behavioral model is specifically tuned to flag inhuman aim curves. Without careful smoothing and humanization, this setup gets banned by the model even though Vanguard never sees a byte of cheat code. The hardware is also expensive. A capture card, a second PC capable of real-time inference, and a programmable mouse emulator are not pocket change.
Category three: DMA-card setups
DMA stands for Direct Memory Access. A PCIe card sits in a second machine and reads the gaming PC's RAM directly over a hardware bus. The gaming PC sees a generic PCIe device. There is no driver to scan, no process to enumerate, no signature to fingerprint. Vanguard is software, the DMA card is hardware, and software cannot detect hardware it does not know about.
The cheat runs entirely on the second PC. ESP, radar, even basic aim assist if combined with a mouse emulator. The gaming PC stays clinically clean.
This is the gold standard for undetected play in 2026. It is also the most expensive and the most fragile. A working DMA setup runs 500 to 1500 dollars in hardware, then the firmware on the card has to keep up with Vanguard's PCIe device fingerprinting. Riot started flagging suspicious PCIe configurations in 2025, so the card firmware now matters as much as the cheat code itself. A cheap unfirmware-customized card gets you banned faster than a free Discord script.
Where this leaves the buyer
If you have 200 dollars a month and a strong stomach, DMA is the most undetected option on the market. If you want something cheaper, an external-only ESP product from a serious provider is the next best thing, with the understanding that you will get ESP plus a light aim assist rather than full aimbot. Pixel-AI setups sit between them in cost and behind them in safety, because the behavioral model still hates inhuman aim curves regardless of how the inputs got there.
The pattern across all three is the same. Move the cheat further away from the game. The closer your cheat sits to Valorant's process, the faster it dies.
Where Vantage fits
Vantage does not currently sell a Valorant product. Valorant support is on the roadmap. The approach that keeps our Fortnite cheat alive carries over to the categories above: kernel-level reads done carefully, per-user builds, patch turnaround measured in hours, streamproof rendering that survives screenshot capture. The Fortnite product is on the homepage. When the Valorant build ships, it will live in whichever of the three categories above gives the best balance of features and survival time, not whichever is easiest to bolt together.
Until then, if you are shopping for Valorant today, ask the provider exactly which category their product falls into. If they cannot answer cleanly, they probably built something that injects into the game, and you can predict the rest.