JavaScript obfuscator with VM

Turn readable code into a black box.

Nebula parses your script into a real syntax tree — not regex tricks — then renames, encrypts, and restructures it. The logic runs exactly the same. Reading it by eye does not.

Real parser, no regex Built entirely in-house 7 protection layers

Seven layers of protection

Rename identifiers

Variables, functions, and parameters are replaced with short, meaningless names throughout the tree.

Encrypt strings

String literals are encoded and decoded at runtime, so plain text never sits in the source.

Disguise numbers

Numeric literals are rewritten as hex values or small expressions that evaluate to the same result.

Flatten control flow

Linear logic is reshaped into a state-driven switch loop, hiding the original execution order.

Inject dead code

Unreachable branches and decoy logic are scattered through the output to confuse static analysis.

Bytecode VM pass

Selected logic is compiled into a small custom instruction set, run by an interpreter bundled into the output.

Minify

Whitespace, comments, and line breaks are stripped once every other pass is done, shrinking the final file.

How it works

  1. 01

    Paste or upload your script

    Drop your source straight into the input editor, or upload a .js file from your machine.

  2. 02

    Choose your techniques

    Toggle any combination of the seven protection layers to match how aggressive you want the output to be.

  3. 03

    Copy or download the result

    Grab the obfuscated file straight from the output panel once the pipeline finishes.

Good to know

Does obfuscation change behavior?

No. Every pass preserves the exact runtime behavior of your script — only its readability changes.

Is there a daily limit?

Yes, each account has a daily run limit shown in the workspace. It resets at midnight UTC.

Do I need approval to use it?

New accounts start unauthorized. Sign up, then use the chat button (bottom-right, once signed in) to send your account ID and request access — it's the fastest way to reach support.

Is my code stored anywhere?

Your source is sent only to process the obfuscation request — the interface itself keeps nothing beyond your daily usage count.

Suporte