Skip to content

Obfuscation presets

What each preset does when you submit Lua to /api/v1/obfuscate. Your plan caps the highest preset you may request.

List presets anytime:

http
GET /api/v1/obfuscate/presets

Standard

Best for: utilities, small scripts, faster builds.

  • Renames locals and upvalues
  • Encodes string literals
  • Encodes numeric literals
  • Minifies whitespace

Does not virtualize control flow. Easier to debug if something breaks.

Pro (aggressive)

Best for: medium scripts you want to hide from casual readers.

Everything in Standard, plus:

  • Control-flow flattening
  • Opaque predicates (junk branches)
  • Dead code injection
  • Partial bytecode-style VM on selected regions

Build time and output size increase noticeably.

Ultra (maximum)

Best for: production Sinister-style protection on large sources.

Everything in Pro, plus:

  • Full VM translation on more code paths
  • VM instruction encryption
  • Nested flattening and string splitting
  • Integrity checks on the output blob

This is what Sinister Script loaders typically use internally.

Enterprise (tier_c)

Best for: maximum binding to your API key or script dist key.

Everything in Ultra, plus:

  • Environment binding tied to bind_key (your OBF-* key if omitted)
  • Anti-debug stubs in output
  • Scrambled VM dispatch
  • Lazy table indirection
  • Stronger integrity hash

Required for high-value standalone Lua you distribute outside Sinister Script.

Choosing a preset

SituationStart with
Learning the APIstandard
Executor script you sellaggressive or maximum
Leak-sensitive commercial codetier_c with bind key

If you request a preset above your plan cap, the API clamps to your presetMax from /api/v1/obfuscate/quota.

Size and limits

  • maxBytes on your key rejects oversized source at submit time
  • Higher presets inflate output 3–10x depending on source shape
  • Syntax errors return HTTP 400 before obfuscation runs

Not the same as Sinister Script

/get-script builds a licensed product with boot rotation and server loaders. The obfuscator API is for your Lua files only.

Technical toolchain (staff): internal docs Lua obfuscator toolchain.