PHP code protection
Ship your PHP. Keep your source.
Protect your code in the free Oxrion Desktop app, license it to each customer, and run it on any server with the free loader. Your code runs — its source stays yours.
Free plan with 20 files a month · Windows, macOS and Linux
- Tamper-proof
- Modified files refuse to run
- Licensed
- Per customer host, with expiry
- One file
- Runs on PHP 8.1–8.5
- Linux + Windows
- NTS and TS loader builds
How it works
From source to protected in one pass
- Step 01
Get an Encoder Key
Create an account at console.oxrion.com. The free plan includes 20 files a month; paid plans add more files and every option.
- Step 02
Protect in the app
Point Oxrion Desktop at a file, folder or ZIP and pick the PHP files to protect. Only those are sent, protected in memory and returned — your folder structure stays as it was.
- Step 03
Deploy & run
Ship the protected files. Any server with the free Oxrion loader runs them like normal PHP — no changes to your application.
More than encryption
Sell it, license it, deliver it
Protecting the code is half the job. Oxrion Desktop also runs the business side — licenses, records and delivery — on your own machine, free and unlimited.
- Licenses bound to a host
- Sign a small .lic file for each customer's domain, localhost or IP, with an optional expiry. Signed offline with your own key — as many as you need.
- License History
- Every license you issue, in one searchable list: customer, host, expiry, when it was sent. Start a renewal from any record.
- Email & webhooks
- Email the license to your customer from your own SMTP account, or notify your own system with a webhook — signed, if you choose — the moment it's created.
- Keys in a Vault
- Your license, recovery and server keys live in one encrypted file on your machine, unlocked with a single password.
Protection
Choose how each file may run
Every file is encrypted and signed. On top of that, pick the options a delivery needs — each one is explained in the docs.
Strong encryption
Your source is sealed with strong, industry-standard cryptography. The original code never ships — only a protected file that runs but cannot be read.
Tamper-proof files
Every protected file is signed and verified before it runs. Change a single byte and it's rejected — no silently modified code ever executes in production.
Server lock
Lock a file to an external key that only you and your server hold. The key is part of decryption itself: without it in the server's environment, the file can't be opened at all.
Public or licensed files
Choose how each file is allowed to run. Public files run anywhere; licensed files run only where you permit. The rule travels sealed inside the file itself.
Recoverable by design
Turn on Recovery when you protect, and the Oxrion Desktop app can restore the original source later — offline, on your own machine, with your recovery key. No account, no upload, no lock-in.
Free, minimal runtime
You protect code in the Oxrion Desktop app; the server you deploy to needs only the free Oxrion loader — small, fast, and identical everywhere. Nothing that does the protecting ever ships to production.
Your code stays yours
We never keep your code
Sending source somewhere to protect it should make any developer careful. Only the PHP files you select leave your machine; they are protected in memory and handed straight back. Nothing is written to our disks or databases.
Licenses, recovery and your keys never leave your machine at all.
-
No source stored
Files are processed in memory and discarded — never written to permanent storage.
-
No copies of the output
We don't keep the protected files either. We count usage, not code.
-
Licenses on your side
Licenses are signed in the app with your key. We never see or hold them.
-
Encrypted in transit
The app talks to the encoder over an encrypted connection, start to finish.
Who it's for
For anyone who ships PHP they'd rather not give away
Plugin & theme authors
Sell your work without sending readable source. Protect each release and license it per customer, so a copy doesn't run on someone else's site.
Agencies & freelancers
Deliver client projects on their servers while keeping your work protected — and bound to the domain it was built for.
Self-hosted software vendors
Ship an on-premise product to customers' own servers without exposing your codebase or your licensing logic.
Why Oxrion
Built around the way you sell software
One file for every PHP version
Protect once. The same file runs on PHP 8.1–8.5, so your customers can upgrade PHP without waiting for new files from you.
Licensing through to delivery
Sign per-host licenses, keep a record of every one, email them to customers and notify your own system — in the same free app you protect with.
Your source is never a hostage
Protect with Recovery, and you can restore the original source offline with your own key. No account, no support ticket.
Start free, pay per file
20 files a month on the free plan; paid plans from $5 a month, down to 6¢ a file. No upfront licence.
Weighing up PHP encoders? See how Oxrion compares →
Questions
Frequently asked questions
Can't find what you're looking for? Reach out — we read every message.
-
What does Oxrion do?
Oxrion lets you use and distribute your software while keeping its source code private. Today it protects PHP: you protect your files with the free Oxrion Desktop app, then ship the protected versions to your customers or servers. The code runs exactly as before, but the original source can't be read, copied, or modified.
-
Is my source code safe when I protect it?
Yes. To protect a file, the Desktop app sends it over an encrypted connection, it's processed in memory, and the protected result is returned immediately — then everything is discarded. No source is saved to disk, no copies go into a database, and your licenses are generated locally in the app. There's nothing left on our side to expose.
-
Will my protected files run on my server?
Yes. Your production server only needs the free Oxrion loader installed as a PHP extension. Once it's in place, protected files run just like normal PHP — no changes to your application required.
-
Can I protect a whole project at once?
Yes. In the Oxrion Desktop app, point it at a folder or drop in a ZIP and every PHP file inside is protected in one pass, with your folder structure preserved.
-
Where are my licenses stored?
On your machine, not ours. Licenses are generated locally in the Oxrion Desktop app and never uploaded to us. Your ability to license and recover your own code never depends on us — and there's no license database on our servers to be breached.
-
Can I get my source code back?
Yes — if you turn on Recovery when you protect. Recovery embeds your recovery public key in the files; with the matching private key, the Oxrion Desktop app restores the original source offline, on your own machine. No account and no connection needed. Files protected without Recovery can't be restored, so keep your original source as well.
Get started in minutes
No credit card required. Free plan ships with the same crypto as paid plans.