Encrypt and license your PHP software on your own server. Your source code never reaches us — you install the module on your own domain and manage your customers from your own panel.
One licensing backbone, three different jobs. If you sell both web software and a Windows program, you run both from a single panel.
Encrypt your source and run it on your customer's server. Every installation binds to a domain; suspend the licence from your panel and it stops within minutes.
Learn moreAdd a few lines to your program: the licence binds to the hardware and stops when you revoke it. Your customer keeps working for 30 days even with no internet.
Learn moreA Windows program that encrypts your source on your own computer. It builds the per-customer package there too, and you manage your licences from the same window.
Learn moreSix jobs, six screens. Every one of them is something the system does today — they play in sequence, and you can jump to any of them.
$kabuk kodla ./src --urun hexa
184 files found · index.php left readable
✓ 184 files encrypted
✓ hexa-2.4.0.zip · 1.8 MB
source never left this machine
$kabuk durum
✓ automation: active
$kabuk yayinla 2.4.0
uploading · sha256 verified
✓ 2.4.0 published
Nobody opened a panel. An expired customer simply stops receiving updates — the copy they already run keeps working.
The customer released the seat themselves. Your inbox never saw it.
-----BEGIN KABUK ISTEK-----
p1VzZXJ2ZXIta2FidWstaXN0ZWs6MS4w
YWN0aXZhdGlvbi1yZXF1ZXN0LWJsb2Nr
-----END KABUK ISTEK-----
-----BEGIN KABUK YANIT-----
c2lnbmVkLXRva2VuLWVkMjU1MTktYmxv
Y2stZm9yLXRoaXMtbWFjaGluZS1vbmx5
-----END KABUK YANIT-----
Honest limit: a machine that never calls home cannot be revoked either. That is why the offline token gets its own lifetime, clamped to the licence’s expiry.
POST /api/veri
✓ signed · bound to this machine
Deleting the licence check does not help: the program still needs data only your server has. A cracked copy does not break — it rots as your data moves.
The whole system rests on one principle: your code and your customer data stay with you; we only verify authorisation.
Encryption, signing, seat counting, domain locking, HWID blocking — all built in. You keep writing your software.
Encryption runs on your own server. We only count how many licenses you issue — we never see your code or your customer list.
The Ed25519 root key is stored offline. Even if someone reads the module source completely, they cannot mint a valid license.
Revocation and re-activation take effect within seconds via instant push. No waiting for hours.
Block license sharers and refund abusers at the machine level. Even a brand-new license will not run on the same server.
Activation runs on your own server. Even if our hub goes down, your customers' installations keep working.
Setup takes about ten minutes. A module on your server, an account on our hub; the two are joined by a signed protocol.
Sell 1-site, 3-site or 5-site packs. You decide how many installations each license allows; the limit is enforced live by your own license server.
If a customer is sharing their license or keeps using it after a refund, block that server. Even a brand-new license will not run on the same machine.
Same backbone; the only thing that changes is what you are protecting. All four work today.
Upload your plugin ZIP; the main file stays readable, everything else is encrypted and the licence client is placed inside. Customers get updates from their own wp-admin, and when a subscription lapses the updates stop while the installed copy keeps running.
Ready-made libraries for C#, Python, Node/Electron, Go and Java. No mandatory dependency, and it reaches back to Java 8. Machine fingerprinting, seat counting and offline activation are managed from the same server as the web side.
An order in your store mints the licence by itself, you can import customers in bulk from CSV, and expiries are announced by e-mail in advance. A webhook wires it into your own systems.
Activation with two blocks of text on a machine that never touches the network. The honest limit, stated plainly: an offline machine cannot be revoked — which is why the offline token has its own lifetime, clamped to the licence’s own expiry.
Independent developers, software agencies and enterprise teams. What they share: they will not hand control of their code to anyone.
Every plan includes encryption, signing and unlimited products. Plans differ in how many licenses you can keep active at once — Windows application licensing is included in the paid plans.
On every plan your source code is encrypted on your own server and never reaches us. You can switch plans at any time.
7-day free trial, no credit card. Setup takes about 10 minutes.
Start free trial