Powered by AstroProtect Engine

Protect your
Luau code.

Military-grade obfuscation for Roblox Luau scripts. VM-based protection, bytecode virtualization, and advanced control flow — all in one click.

VM
Virtualization
Luau
Roblox Ready
API
First Design

Obfuscate Now

Paste your Luau code and protect it instantly

input.lua

Options

Get one at astroprotect.net

VM Compression
Reduce output size
Extra Compatibility
Wider runtime support
Allow Unsafe
Bypass code scanner

Why SonicSec?

Enterprise-level protection for your Luau scripts

VM Virtualization

Your code runs inside a custom virtual machine — bytecode is encoded, jumps are scrambled, and the original logic is unrecoverable.

VM Compression

Shrinks the virtual machine and packed bytecode to reduce output size, trading a small amount of load-time overhead for a lighter footprint.

Watermarking

Invisible watermarks are embedded in every output so leaked scripts can always be traced back to the source account.

Optimization Engine

4 levels of optimization (0-3) let you balance between maximum protection and runtime performance for your specific use case.

Multi-Runtime

Target Luau, Lua 5.1–5.4, LuaJIT, or CS:GO. One API, every Lua dialect your project needs.

API First

Full REST API with job queuing, status polling, and download endpoints. Automate protection in your CI/CD pipeline.

API Reference

Integrate SonicSec into your workflow

Authentication

All API requests require the AstroKey header with your API key.

curl -H "AstroKey: YOUR_API_KEY" https://astroprotect.net/api/...
POST /api/obfuscate

Submit Luau code for obfuscation. Returns a job ID to poll for status.

Request Body

ParameterTypeRequiredDescription
codestringYesBase64-encoded Luau source code
options.targetstringNoRuntime: luau, lua51, lua52, lua53, lua54, luajit, csgo
options.optimizationnumberNoLevel 0-3. Defaults to 0
options.vmCompressionbooleanNoShrink VM and packed bytecode
options.extraCompatibilitybooleanNoMore conservative output for wider runtime support
options.versionstringNo"public" or "beta". Defaults to "public"
options.outputHeaderstringNoBanner comment above output (max 20 chars)
options.allowUnsafebooleanNoBypass malicious-code scanner

Example

curl -X POST https://astroprotect.net/api/obfuscate \ -H "Content-Type: application/json" \ -H "AstroKey: YOUR_API_KEY" \ -d '{"code":"","options":{"target":"luau"}}'
GET /api/obfuscate/job/:id

Poll the status of an obfuscation job. Returns queued, processing, completed, or failed.

curl -H "AstroKey: YOUR_API_KEY" https://astroprotect.net/api/obfuscate/job/JOB_ID
GET /api/obfuscate/job/:id/download

Download the obfuscated output once the job completes. Returns the protected Luau code.

curl -H "AstroKey: YOUR_API_KEY" https://astroprotect.net/api/obfuscate/job/JOB_ID/download
GET /api/obfuscate/jobs

List all your obfuscation jobs, sorted by most recent first.

curl -H "AstroKey: YOUR_API_KEY" https://astroprotect.net/api/obfuscate/jobs
GET /api/health

Check API availability. No authentication required.

curl https://astroprotect.net/api/health

Job History

Your recent obfuscation jobs

Click Refresh to load your job history