Bytecode virtualization
Your script is compiled to Luau bytecode and executed by a bundled interpreter. It never rebuilds source text and never needs loadstring to run.
100% free · Native VM obfuscator
Protect your Luau.
Protect your Luau.
Free. Properly.
LuaGuard is a free Luau obfuscator with its own native bytecode VM, delivered through an advanced multi-stage loader with HWID binding, license keys and live tamper alerts.
No credit card. No password. Your source stays yours.
Source
local Players = game:GetService("Players") local function grant(player) -- your premium logic player:SetAttribute("VIP", true) end Players.PlayerAdded:Connect(grant)Protected
Pricing
$0forever
No trials, no paywalled presets. Every protection level, the full loader and the dashboard are included.
- 50 protected builds every month, free for every member
- All presets unlocked. Fast, balanced, strong and extra-strong
- License keys and HWID locks included
- Live sessions, analytics and Discord tamper alerts
- Sign in with Discord. No card, no password
Native obfuscator
Our own engine.
01
02
03
04
05
06
Our own engine.
Not a wrapper.
LuaGuard doesn’t re-skin another tool. It parses your script, rewrites it, compiles it with the real Luau compiler and runs it on a VM we built, so there is no readable source left to lift.
Encoded instructions
Instruction words are encoded and decoded on demand, so the program doesn’t sit in memory as plain, readable bytecode.
Encrypted constants
Strings and values are encrypted separately. URLs, keys and text are absent from the saved file.
Structural passes
Parsed, AST-level rewriting: number transforms, expression rewriting, control-flow and function transforms, with scope-checked renaming.
Authenticated build
Output is packed with integrity checks and verified against an Ed25519-signed manifest, so tampering with the file is detectable.
Four presets
From fast to extra-strong. Trade speed for protection per script, with seeded, per-build randomness.
Advanced loader
A
B
C
D
E
F
A loader that fights back.
Your protected build is never offered as a download. It’s streamed through a multi-stage chain that checks the license, the device and the caller at every hop.
01Handshakeone-time token
02Stage 1identity check
03Hop Afresh token
04Hop Bfresh token
05Keysent separately
06PayloadHWID verified
Short-lived tokens
Every hop issues a new one-time token that expires in seconds. Replaying or sharing one gets flagged and blocked.
HWID binding
A license only runs on the device it was activated on. Revoke keys or ban devices from the dashboard instantly.
Split key delivery
Payload chunks and their decryption key travel on separate requests, so no single capture is enough to unpack the script.
Decoys for scrapers
Browsers, bots and wrong callers get a convincing decoy instead of an error, so probing teaches an attacker nothing.
Hook detection
The loader reports when its HTTP or load channels have been hooked, and prefers unhooked channels when it finds one.
Place gating & rate limits
Lock a script to specific Roblox place IDs, rate-limit per IP and block abusive networks automatically.
Total visibility
Know the moment something’s off.
See who is running your script live, per-game usage and execution history. Tamper attempts, token reuse and wrong-game loads are logged and can be pushed straight to your Discord webhook.
12:04:11 session.start hwid ok
12:04:52 session.start hwid ok
12:06:03 token.reuse blocked · ip flagged
12:06:40 hook.detected request channel · alert sent
12:09:18 license.revoke key revoked
FAQ
Questions, answered.
Is LuaGuard really free?
Yes. Sign in with Discord and you get all presets, the loader, license keys and the dashboard at no cost, with a monthly allowance of 50 protected builds.
Is it a wrapper around another obfuscator?
No. It’s a native engine that parses, transforms and compiles your script to bytecode and runs it in its own interpreter with encrypted strings and constants.
Is my source code safe?
Your script is processed by LuaGuard’s own processing agent. The protected build is only delivered through your loader and is never offered as a file download.
Can protection be broken?
No client-side protection is unbreakable, and we won’t claim otherwise. LuaGuard raises the cost of reverse engineering and adds licensing, device binding and tamper alerts so you can detect and respond to abuse.
What do I need to run a protected script?
An executor with an HTTP request function. You can restrict each script to specific Roblox place IDs, or allow any game.
Lock down your scripts. It’s free.
Sign in with Discord and protect your first script in minutes.
Get started free →