OrvexSecurity — 16 protection layers

No one reverses what no one understands.

What We Do

Orvex is an obfuscation service allowing you to secure your Lua scripts. We use a multi-layer protection pipeline — if an attacker defeats one layer, many more remain. Orvex is consistently updated so reverse engineering stays impractical.

16-layer pipelineNon-deterministic output< 2s obfuscation
InputOutput
-- Original Lua script
local function calculateDamage(base, multiplier)
  local crit = math.random() > 0.85
  local dmg = base * multiplier
  if crit then dmg = dmg * 2.5 end
  return math.floor(dmg)
end

local player = {
  name = "Hero",
  health = 100,
  attack = 45
}
Click "Obfuscate Demo" to compare before / after

Drag the slider to compare readable source with protected output

Everything you need

Everything you need to protect your work

From control flow obfuscation to VM bytecode injection — every layer adds cost to reverse engineering.

A multi-stage Lua obfuscation engine designed to increase the time and complexity required for reverse engineering and static analysis.

No obfuscation can guarantee absolute protection. Orvex adds multiple independent analysis barriers to raise the bar for attackers.

Premium

Nested VM + Multi-Pass

Your script runs inside two independent custom instruction sets, each re-keyed per build, with opcode aliasing and fused ops layered on top — fast to run, useless to automated deobfuscation tools.

Premium

Metamorphic VM Dispatch

The VM's internal structure is regenerated differently on every single build and drifts automatically over time. A deobfuscation tool written for one output fails on the next — and goes stale on its own, with no work from us.

Pro

VM Anti-Tamper Layer

A fast custom Lua VM: crypto-seeded opcode map, per-position dispatch masking and opcode aliasing — one operation under many ids, so generic devirtualizers cannot fingerprint it.

Free

Mini VM

Even on the free tier, core logic is compiled to a compact custom bytecode and run by a lightweight interpreter — genuine virtual-machine protection, not just renaming, and near-instant to execute.

Pro

Dynamic Load Protection

Code hidden inside load() and loadstring() calls is recursively obfuscated too — not shipped in clear text like every other obfuscator leaves it. Your dynamically-loaded logic gets the same protection as the rest.

Pro

Live Anti-Hook & Anti-Debug

The runtime continuously watches for debuggers, function hooks and instrumentation. If a deobfuscator attaches or tampers with a core primitive, the protection corrupts its own state instead of revealing anything.

Free

Non-Deterministic Output

Identical source code never produces the same output twice. Every build is structurally unique — signature-based detection and script diffing tools get nothing to work with.

Free

Control Flow Flattening

All branching logic is collapsed into dispatch loops driven by opaque predicates. The original control graph is unrecoverable — decompilers produce unreadable, misleading output.

Free

9-Mode String & Number Encryption

Every string literal and constant is encrypted with one of 9 independent cipher modes, each value carrying its own randomly-generated key. Static string extraction returns nothing useful.

Pro

REST API

Integrate obfuscation directly into your build pipeline. Submit scripts and retrieve protected output programmatically — single jobs or batched.

Free

Randomized Identifier Pool

All identifiers are replaced from a seeded pool of natural-looking names, regenerated each build so no two outputs share a naming scheme. Pattern-based renaming and diffing tools produce inconsistent, unusable results.

Free

Analytics Dashboard

Track every obfuscation job, monitor quota usage, and review your full submission history from one place.

Pricing

Simple, transparent pricing

No hidden fees. Cancel anytime. Start free — upgrade when you need more.

FreeProPremiumEnterprise
Free
Free
30 / month

Try Orvex with no commitment. Covers personal scripts and small experiments.

Free

  • 30 obfuscations per month
  • 16-layer protection pipeline
  • Control flow & dead-code hardening
  • Bytecode VM virtualization
  • Encrypted literals (strings & numbers)
  • Unique output every run
  • 6 Lua runtime targets
  • History (7 days)
  • Advanced protection options
  • Archive batch obfuscation (.zip)
  • REST API access
  • Integrity verification header
  • load() / loadstring() obfuscation
  • Second protection pass
  • Priority support
Most Popular
Paid
Pro
1 000 / month

For developers needing API integration and full control of production scripts.

$15/mo

  • 1 000 obfuscations per month
  • 16-layer protection pipeline
  • Control flow & dead-code hardening
  • Bytecode VM virtualization
  • Encrypted literals (strings & numbers)
  • Unique output every run
  • 6 Lua runtime targets
  • History (90 days)
  • Advanced protection options
  • Archive batch obfuscation (.zip)
  • REST API access
  • Integrity verification header
  • load() / loadstring() obfuscation
  • Second protection pass
  • Priority support
Paid
Premium
5 000 / month

Maximum hardening with a second protection pass and unlimited history.

$35/mo

  • 5 000 obfuscations per month
  • 16-layer protection pipeline
  • Control flow & dead-code hardening
  • Bytecode VM virtualization
  • Encrypted literals (strings & numbers)
  • Unique output every run
  • 6 Lua runtime targets
  • Unlimited history
  • Advanced protection options
  • Archive batch obfuscation (.zip)
  • REST API access
  • Integrity verification header
  • load() / loadstring() obfuscation
  • Second protection pass
  • Priority support
Paid
Enterprise
Unlimited

Custom volume, priority support, and tailored terms for teams and platforms.

Custom

  • Unlimited obfuscations
  • 16-layer protection pipeline
  • Control flow & dead-code hardening
  • Bytecode VM virtualization
  • Encrypted literals (strings & numbers)
  • Unique output every run
  • 6 Lua runtime targets
  • Unlimited history
  • Advanced protection options
  • Archive batch obfuscation (.zip)
  • REST API access
  • Integrity verification header
  • load() / loadstring() obfuscation
  • Second protection pass
  • Priority support
FAQ

Frequently Asked Questions

Still have questions? Contact us — we'll respond within 24h.

Your account data and usage quotas are protected with industry-standard encryption. Sensitive information like API keys and billing data are never stored in plain text, ensuring your account remains secure even in the unlikely event of a data breach.

Both rely on a custom per-build VM, so there's real overlap in approach. Where Orvex stands apart: it natively targets FiveM and GTA V alongside Roblox, Luau, LuaJIT and Lua 5.1–5.4; it also protects code inside load() and loadstring() calls, which most obfuscators leave in clear text; and its output is regenerated with a different internal structure on every build. Pricing is flat monthly quotas — no tokens, no per-obfuscation charges. We won't claim any obfuscator is unbreakable, but Orvex is built to make automated deobfuscation impractical and is actively maintained.

No obfuscation is permanent — given enough time and expertise, a determined attacker can reverse anything. What Orvex does is raise the cost significantly: the custom per-build VM has no public specification, every build is structurally different, and multiple independent layers must each be broken before the original logic becomes readable. The goal is to make the effort not worth it in practice.

No. Orvex performs semantic-preserving transformations — the obfuscated script behaves identically to the original. We run automated correctness tests on every output before delivery.

API access starts with the Pro plan. Free users can obfuscate through the web dashboard only.

Enterprise customers with an approved use case may obfuscate scripts on behalf of their end-users. This is not permitted on any other plan to prevent abuse.

Orvex fully supports Lua 5.1, 5.2, 5.3, 5.4, and LuaJIT. Roblox Luau is also supported with dedicated settings.