An anti-cheat system may be accessed over a network and stored directly into volatile memory of a user computing system. In some embodiments, this anti-cheat system may scan, or access portions of, the volatile memory of the user computing system to detect whether cheat software or other unauthorized software that may interact with a game application is detected on the user computing system. The accessed portions of the volatile memory may be compared with one or more signatures that are associated with the execution of cheat software on a computing system. The anti-cheat system may be prevented from being stored within non-volatile memory, thereby preventing malicious users from modifying the anti-cheat system.