Luwave is a powerful Lua obfuscation service designed to keep your scripts secure. With multiple layers of advanced protection, even if one layer is bypassed, many more stand in the way. Constant updates and modern security techniques help keep your code protected against reverse engineering, so you can focus on scripting with confidence.
Join: https://discord.gg/luwave
$ luwave build main.lua --mode maximum # parsing .......... 100% (dialect: luau) # scope analysis ... 100% (closure capture mapped) # renaming ......... 100% (seeded, collision-free) # sealing .......... 100% (constants · cff · vm) # runtime shield ... 100% (antitamper · guard · antidump) ✓ build complete main.lua → main.obf.lua
Drop a .lua, .luau or .txt file or paste your script, pick how strong you want it, and build. Nothing leaves your machine — the engine runs entirely in your browser.
Beta engine: renaming, string sealing, junk and minification run here today. Control-flow flattening and the execution VM roll out on the full pipeline first.
Features
Built as a real compiler pipeline, not a find-and-replace script.
One mode, dialed to the max. Every protection layer runs on every build, no weak presets to misconfigure.
Full lexical scope engine maps closures, shadowing and globals before anything is renamed — so behavior never changes.
Seeded, deterministic, collision-free renaming that never touches globals or Luau type annotations.
Strings and numeric constants are encrypted and reconstructed at runtime, never left readable in the payload.
Structured code is rewritten into a dispatcher form that resists both human reading and automated decompilers.
Anti-tamper self-verification, executor & hook detection, anti-dump tripwires and service integrity checks bundled in.
Job queue with workers, resource limits and versioned build reports on every single compile.
REST API for builds and loaders so you can integrate Luwave into your own tooling and bots.
How it works
From source to protected payload in under a minute.
Drop a .lua, .luau or .txt file. Luwave detects the dialect automatically and parses it into a full AST — unsupported syntax is rejected, never guessed through.
The compiler pipeline runs every layer: scope analysis, renaming, constant sealing, control-flow flattening and the custom VM, with a versioned build report at the end.
Get a payload with the runtime shield embedded. It verifies itself at load, detects executors and hooks, and kills tampering attempts quietly.
Pricing
Everything included. No presets, no tiers, no locked features.
FAQ
No. Luwave's transformations are behavior-preserving: the protected build executes exactly like your source. Every build is round-trip tested against reference runtimes before it ships.
Lua 5.1 through 5.4, LuaJIT and Luau, with real dialect detection. Luau type annotations are preserved verbatim so your output stays valid.
Every build embeds a self-verifying anti-tamper module plus hook detection, executor detection and anti-dump tripwires. If the payload is modified or runs in a hostile environment, it fails closed.
No, and that's the point. Builds are one-way: the original source is never stored in or recoverable from the protected payload.
Free during the open beta, maximum security always.
Join the Luwave Discord