Encrypt your PHP. Keep your source.
Oxrion encrypts your PHP so it runs on your customers' servers without exposing the source, and licenses each copy to the customer who bought it.
Free plan: 20 files a month; files run for 30 days. Web, Windows, macOS and Linux.
<?php
final class PricingEngine
{
private const MARGIN = 0.18;
public function quote(int $seats, string $plan): float
{
$base = ['team' => 39, 'agency' => 89][$plan];
$tier = $seats > 10 ? 0.9 : 1.0;
$net = $seats * $base * $tier;
return round($net * (1 + self::MARGIN), 2);
}
}
$total = (new PricingEngine)->quote(12, 'team');
echo 'Total: $' . number_format($total, 2), PHP_EOL;One file, encrypted and signed.
It's still a .php file, so PHP loads it like any other.
Only the files you select are sent. Nothing is kept.
Your machine
Sends only the .php files you select.
Oxrion Encoder
Protects them in memory and sends them back. Nothing stored.
Your server
Runs them with the free loader.
-
No source stored
Processed in memory and discarded — never written to permanent storage.
-
No copies of the output
We don't keep the protected files either; we only count usage.
-
Licenses on your side
Signed on your machine with your key. We never see or hold them.
-
Encrypted in transit
Every request to the encoder is encrypted, start to finish.
Sell it, license it, deliver it
Protecting the code is half the job. Oxrion Desktop also runs the business side — licenses, records and delivery — on your own machine, free and unlimited.
- Licenses bound to a host
- Sign a small .lic file for each customer's domain, localhost or IP, with an optional expiry. Signed offline with your own key — as many as you need.
- License History
- Every license you issue, in one searchable list: customer, host, expiry, when it was sent. Start a renewal from any record.
- Email & webhooks
- Email the license to your customer from your own SMTP account, or notify your own system with a webhook — signed, if you choose — the moment it's created.
- Keys in a Vault
- Your license, recovery and server keys live in one encrypted file on your machine, unlocked with a single password.
Choose how each file may run
Every file is encrypted and signed. On top of that, pick what a delivery needs — each option is explained in the docs.
- Strong encryption
- Your source is encrypted with industry-standard cryptography. Only the protected file ships; the original code stays with you.
- Tamper-proof files
- Every protected file is signed and checked before it runs. A file that has been changed is rejected.
- Server lock
- Lock a file to a key that only you and your server hold. Without that key on the server, the file can't be decrypted.
- Public or licensed files
- Public files run anywhere; licensed files run only on the hosts their license names. The rule is stored inside the file.
- Recoverable by design
- Turn on Recovery when you protect, and Oxrion Desktop can restore the original source later, offline, with your recovery key.
- Expiry date
- Set a date after which a file stops running, for trials or fixed-term deliveries.
For anyone who ships PHP they'd rather not give away
- Plugin & theme authors
- Sell your work without sending readable source, and license each copy to the customer's site.
- Agencies & freelancers
- Deliver client projects on their servers, bound to the domain they were built for.
- Self-hosted software vendors
- Ship to customers' own servers without exposing your codebase or your licensing logic.
Why Oxrion
Works with the PHP you have
Plain PHP or a framework — Laravel, WordPress, OpenCart, Drupal. A protected file is still a .php file that PHP loads as usual, so your code needs no changes and OPcache keeps working.
One file for every PHP version
Protect once. The same file runs on PHP 8.1–8.5, so your customers can upgrade PHP without waiting for new files.
Runs with the free loader
Servers need the free Oxrion Loader, a PHP extension installed once on Linux and Windows. It needs no account and doesn't contact us.
Pay only to protect
Licensing, recovery, the app and the loader are free. You pay only for the files you protect: 20 a month free, then plans from $5 a month or credits.
Looking for an ionCube alternative? See how Oxrion compares →
Questions
Frequently asked questions
Can't find what you're looking for? Reach out — we read every message.
-
What does Oxrion do?
Oxrion protects the PHP code you distribute. You protect your files in the Web Encoder, Oxrion Desktop or the command line, then ship the protected files. They run as before, with the source encrypted and the files signed against changes.
-
Do I have to install anything to protect my code?
No. The Web Encoder at encoder.oxrion.com protects your PHP in the browser: paste your Encoder Token, drop a folder, a ZIP or a PHP file, and download the protected project as a ZIP. It uses the same Encoder, options, plan and credits as Oxrion Desktop. Licensing, Recovery and the Vault work offline in the free Desktop app.
-
Is my source code safe when I protect it?
Yes. Files are sent over an encrypted connection, processed in memory and discarded once the protected result is returned. Nothing is stored on our side, and licenses are created on your machine.
-
Will my protected files run on my server?
Yes, if it runs PHP 8.1–8.5 on Linux or Windows. The server needs the free Oxrion Loader, a PHP extension installed once. Then protected files run like any other PHP — plain PHP or a framework such as Laravel, WordPress, OpenCart or Drupal — with no changes to your application.
-
Can I protect a whole project at once?
Yes. Point the Oxrion Desktop app or the Web Encoder at a folder or drop in a ZIP and every PHP file inside is protected in one pass, with your folder structure preserved.
-
Where are my licenses stored?
On your machine, not ours. Licenses are generated locally in the Oxrion Desktop app and never uploaded to us. Your ability to license and recover your own code never depends on us — and there's no license database on our servers to be breached.
-
Can I get my source code back?
Yes — if you turn on Recovery when you protect. Recovery embeds your recovery public key in the files; with the matching private key, the Oxrion Desktop app restores the original source offline, on your own machine. No account and no connection needed. Files protected without Recovery can't be restored, so keep your original source as well.
Your first protected file
Protect a file now. Ship it today.
Drop a folder, a ZIP or one PHP file into the Web Encoder and download the protected project. No card, nothing to install.
- Free plan
- 20 files a month
- Runs on
- PHP 8.1–8.5
- Servers
- Linux and Windows
- Source kept by Oxrion
- None