Software protection & licensing

Your code is
your advantage.
Keep it protected.

Protect proprietary logic and control where your software runs. Sentinel adds Archon VM code virtualization, device-bound licensing, and runtime tamper defenses to compiled applications across Windows (PE32+), macOS (Mach-O), and Linux (ELF).

Start with Community for non-commercial evaluation.

Built for your release workflow
Windows · macOS · LinuxDesktop StudioCLI & SDKOffline license validation

For software you
put in customers’ hands.

01

Desktop software teams

Protect proprietary application logic and manage authorized installations.

02

Independent game studios

Add protection and licensing to the native components you distribute.

03

Algorithm-driven products

Make valuable calculations and business logic harder to analyze.

Ship your application.
Protect what makes it yours.

Choose the layers your application needs—from core runtime checks to advanced virtualization and licensing.

STUDIO / ENT

Archon VM & Multi-VM Chaining

Convert sensitive functions into custom bytecode executed across chained virtual interpreters. Sliding-window demand paging decodes active pages on the fly and re-encrypts them to prevent full memory dumps.

PRO / STUDIO / ENT

Device-Bound Licensing & Attestation

Control authorized installations offline using signed Ed25519 cryptographic license tickets bound to hardware fingerprints, with built-in expiration, feature flags, and clock-tamper checks.

CORE / STUDIO

Runtime Integrity & Anti-Instrumentation

Detect and neutralize debuggers, memory patching, API hooks, and dynamic binary instrumentation frameworks (such as Frida and DynamoRIO) before protected logic executes.

STUDIO / ENT

Decompiler & AI-Analysis Defense

Harden binaries against static decompilers (Ghidra, IDA Pro, Binary Ninja) and automated AI analysis using mixed boolean-arithmetic (MBA), control-flow flattening, and type-lattice obfuscation.

STUDIO / ENT

Import Indirection & White-Box Crypto

Replace standard import tables with synthesized prologue thunks, shadow exception-unwinding metadata, and protect embedded encryption keys in memory using White-Box Cryptography.

ADD-ON / ENT

Sealed VFS & Programmable Build Hooks

Pair binary protection with CyclePack encrypted virtual file systems to keep application assets sealed on disk, and customize every build stage through scriptable Lua 5.4 hooks.

Protection raises the effort required to analyze or modify your application. Validate the right configuration on your own build.

A clearer path
to a protected release.

Inspect your binary, choose a protection profile, and manage license tickets in one desktop workspace.

Sentinel StudioDESKTOP WORKSPACE
WORKFLOW OVERVIEW

Inspect. Configure. Protect.

Choose the protection features that fit your application and prepare your compiled binary for a protected build.

Inspect binarySelect profilePrepare release

Inspect your binary and configure the protection features for your build.

Your build process.
One more protection step.

Use the CLI in scripted workflows, or integrate through the Zig SDK, C/C++ bindings, and Lua hooks.

  1. 1

    Build with your existing toolchain

    Compile your native application as usual.

  2. 2

    Apply a protection profile

    Run Sentinel against your compiled binary.

  3. 3

    Test before distribution

    Check compatibility, performance, and licensing.

Discuss your integration
INTEGRATION EXAMPLES
# Fast build with the Balanced defense profile
sentinel \
  --in target/release/app.exe \
  --out bin/app_protected.exe \
  --preset balanced

The right protection.
For the stage you’re at.

Start free with Community. Protect commercial indie releases with Pro Indie.
Scale across your team with Studio, or deploy organization-wide with Enterprise.

Community
For non-commercial evaluation, personal projects, and academic research.
$0 / forever
  • Binary packaging & compression
  • Import table obfuscation
  • Baseline anti-debugging & integrity checks
  • Local hardware ID inspection tools
  • Archon VM code virtualization
  • Commercial licensing & distribution rights

Non-commercial evaluation only. Excludes code virtualization.

Explore Community
Pro Indie
For independent developers and small studios under $200,000 in annual revenue.
$599 / year
  • Archon VM code virtualization
  • Control-flow flattening & MBA obfuscation
  • Signed offline Ed25519 license tickets
  • Watermark-free builds & Lua 5.4 hooks
  • Sentinel Studio desktop GUI & CLI
  • Windows, macOS & Linux native support

Up to 3 seats and 1 commercial title (<$200k annual revenue).

Evaluate Pro Indie
Enterprise
For large organizations, fintech, anti-cheat, and high-security software vendors.
from $15,000 / year
  • Everything in Studio & Team
  • Per-customer custom VM ISA & handlers
  • CyclePack Sealed VFS included
  • Runtime threat telemetry & SIEM streaming
  • Unlimited seats & CI/CD build runners
  • Dedicated SLA & security engineering support

Custom multi-title or organization-wide licensing terms.

Talk to engineering
OPTIONAL MODULES & ECOSYSTEM EXTENSIONS Available for Pro Indie & Studio editions · Included in Enterprise
ASSET & PAYLOAD PROTECTION +$1,900 / year per title

CyclePack Sealed VFS

Keep game and application assets encrypted on disk inside a zero-copy virtual file system. Archive decryption binds directly to Sentinel’s runtime license and integrity checks—so protected files and embedded modules only unlock in verified memory.

ChaCha20-Poly1305 sealed archives Save $600 vs. standalone CyclePack Pro
POST-RELEASE VISIBILITY Custom / deployment

Runtime Threat Telemetry & SIEM

Opt-in operational visibility for security-critical deployments. Stream real-time tamper alerts, debugger attachments, and instrumentation attempts directly to your team’s SIEM or webhook endpoint while keeping core license validation 100% offline.

Real-time tamper & DBI alerts Webhook & SOC integration
Included in every commercial edition: Native binary protection across Windows (x86_64 PE32+), macOS (Apple Silicon & Intel Mach-O), and Linux (x86_64 ELF) · 0% runtime royalties · 100% offline license validation.
Request a 30-day team evaluation

Put it through
your real-world tests.

Use a representative build to assess compatibility, performance, and license behavior before you roll out.

Plan your evaluation
01

Deploy on your target platform

Native binary protection across Windows (x86_64 PE32+ .exe / .dll), macOS (Apple Silicon ARM64 & Intel Mach-O), and Linux (x86_64 ELF). Verify execution fidelity and memory layout across all target systems.

02

Measure the protection overhead

Virtualize sensitive routines and license checks with Archon VM and Multi-VM Chaining. Test startup time and sliding-window demand paging performance with the profile you plan to ship.

03

Verify offline license behavior

Device-bound Ed25519 tickets validate locally. Test licensing against the hardware and deployment scenarios your customers use.

04

Validate your release workflow

Check protected output with your code-signing process and security software before broad customer distribution.

Know what
you’re evaluating.

Still have a question?
Talk to our engineering team ↗

What does Sentinel protect?

Sentinel protects compiled native applications across Windows (x86_64 PE32+ .exe and .dll), macOS (Apple Silicon ARM64 & Intel Mach-O), and Linux (x86_64 ELF). Depending on your edition, capabilities include Archon VM code virtualization, Multi-VM chaining, sliding-window demand paging, White-Box Cryptography, import thunk indirection, decompiler defense, and device-bound Ed25519 licensing.

Can protected software still be reverse engineered?

No protection makes software mathematically untouchable, but strong protection makes analysis economically impractical. Sentinel combines custom bytecode virtualization, mixed boolean-arithmetic (MBA), and control-flow obfuscation to disrupt both traditional decompilers (Ghidra, IDA Pro, Binary Ninja) and AI-assisted reverse engineering tools.

Can I use Community in a commercial product?

No. Community is strictly for non-commercial evaluation and academic research. Pro Indie ($599 / year) provides full commercial rights for teams with under $200,000 in annual revenue or funding (up to 3 seats, 1 title). Studio & Team ($2,900 / year) supports commercial teams up to 10 seats and 3 titles with CI/CD automation. Enterprise covers unlimited developers and runners organization-wide.

Is cloud telemetry required?

No. Runtime threat telemetry is a strictly optional add-on for teams that want post-release tamper and instrumentation alerts streamed to their SIEM. Sentinel’s core binary protection and Ed25519 device-bound license validation operate 100% offline with zero network dependencies.

What should I test during evaluation?

We recommend testing execution stability across your target OS builds (Windows, macOS, Linux), measuring runtime performance on virtualized hot paths, validating offline hardware ID binding, testing automated CLI builds in your CI/CD pipeline, and verifying compatibility with your code-signing certificates.

See what Sentinel
can do for your code.

Tell us what you’re building and what you need to protect. We’ll review your requirements and discuss a suitable evaluation.

WHAT HAPPENS NEXT
  1. Share your application and protection goals.
  2. Discuss your platform and integration needs.
  3. Evaluate a configuration on your own build.
[email protected]

Request an evaluation

Fields marked * are required.

Include your target platform, application type, and protection goals.