◆ Hardened VM · Prometheus engine

Your Luau. Sealed in a hardened VM.

LuacShield compiles your script through the Prometheus engine, wraps it in an encrypted blob, and shells it with anti-tamper, anti-sandbox, anti-env-log and anti-dump layers. Dump the file and all you get is ciphertext. The whole engine runs in your browser: your script never leaves your device.

7 layers
surface to VM
300 KB
per-script limit (web)
5.1 / Luau
target runtime
Protection stack

Every layer runs inside the blob

The payload is an encrypted blob: dumping the file surface reveals nothing. The LZW shell and VERIFY2 layers still run inside it, so the integrity and anti layers execute only after the payload decrypts itself in memory.

🛡

VM anti-dump

The whole payload is RC4-encrypted and LZW-packed before the outer VM runs. A dumped file is ciphertext; nothing is visible until it decrypts in memory.

⚖

Anti-tamper

Weighted checksum over the running source, re-read after a timed delay. Any edit between reads trips the guard and kills the run.

🧊

Anti-sandbox

Probes for Roblox DataModel identity, workspace and GetService, plus executor request-API hook detection across request/syn/http_request/fluxus.

📡

Anti env-log

Eight environment checks: trap players, GUI selection, tween goals, datastore names, LocalScript tags, prompts, team colors and group listings.

💾

Anti-dump

Debug hook inspection, ishookfunction sweeps on loadstring/load/metatable access, readonly-flag tamper detection and loader-presence probes.

🧬

Anti constant-dump

Constant array with shuffle and rotate, string encryption and number splitting. Strings never sit in the bytecode as plain literals.

How it works

Surface to VM in seven layers

1 · Prometheus VM

Your source is parsed and rewritten through the Prometheus engine (Vmify, Encrypt Strings, Anti Tamper, CFF, Constant Array, Numbers to Expressions).

2 · First blob

The compiled payload is RC4-encrypted with a per-build random key.

3 · LZW shell + VERIFY2

An LZW-compressed shell unpacks the blob and verifies its checksum in memory before executing.

4 · Guard layers

Anti-sandbox, anti-env-log and anti-dump run inside the shell, before your first line executes.

5 · Second blob

The shell is itself RC4-encrypted and LZW-packed into a second blob.

6 · Outer VM

A Prometheus-generated VM harness decrypts, unwraps and runs the whole stack. A seed-validated build ships only after a real Lua 5.1 round-trip.

Pricing

Start free

Free while in beta: unlimited obfuscations, all presets, no key needed. See pricing for what is planned next.