Selective bytecode virtualization
Moves eligible sensitive methods into a diversified virtual instruction set, raising the effort needed to understand critical logic.
Java bytecode protection, engineered seriously
Your code is your edge.
Make them earn it.
Layered protection that turns readable Java bytecode into a costly reverse-engineering problem—without changing how your customers run it.
One clear license · CLI + desktop GUI · Java 21 tooling
oreo — protectELITE
❯ java -jar oreo.jar protect app.jar app-protected.jar -c oreo.yml
◆ Loading app.jar ·········· 184 classes
◆ Identifier renaming ······ complete
◆ String & number protection ···· complete
◆ Control-flow transformation ·· complete
◆ Selective virtualization ···· 12 methods
✓ Bytecode verification passed ···· 0 issues
Protected in 1.84sapp-protected.jar
DEFENSE IN DEPTHOne layer is an inconvenience.
One layer is an inconvenience.
Six layers change the economics.
Oreo combines complementary transformations so attackers have to untangle names, data and execution—not just run one decompiler.
Control-flow transformation
Reshapes branches with opaque predicates, fake paths and optional state-machine techniques.
String encryption
Removes useful plaintext from static inspection with per-class keys and AES, XOR or mixed modes.
Intelligent renaming
Transforms packages, classes, methods and fields while conservatively preserving framework-sensitive contracts.
Compatibility-aware
Purpose-built handling for records, lambdas, ServiceLoader, serialization, modules and Minecraft plugin metadata.
Fail-closed verification
Verifies transformed bytecode and refuses to publish partial output when a protection step fails.
YOUR WORK, STILL YOURSLeaks copy files.
Leaks copy files.
Protection preserves leverage.
WITHOUT PROTECTION
public boolean validateLicense(Key key) {
String secret = "production-secret";
return key.verify(secret);
}- Readable business logic
- Searchable secrets and strings
- Easy method and class discovery
→
WITH OREOOBFUSCATOR
龘.ᚠ(oreo.v.x1ypjlca)
0x2C 0x71 0xA8 0x09
VM_DISPATCH → encrypted payload- Layered reverse-engineering resistance
- Encrypted string material
- Build-specific transformed structure
Honest security: no client-side protection is unbreakable. Oreo raises attacker time, expertise and cost while preserving legitimate use.
FROM JAR TO PROTECTED JARPowerful under the hood.
Powerful under the hood.
Simple in your hands.
Choose your JAR
Use the desktop GUI or point the CLI at your compiled application.
Select a profile
Start with a preset, then add keep rules for public APIs and reflective frameworks.
Verify and release
Oreo writes an atomic protected output and checks its bytecode before success.
Ship the product.
Keep the blueprint.
OreoObfuscator Elite gives you every protection layer, the CLI and the desktop GUI for one year.
Get Elite — €200 / year →One-time annual payment. Instant account delivery after verified payment.