Dev.to Security 🔐 Cybersecurity 👁 0 📖 1 min read

VEILVM: Browser-based JSVMP — compile JS into a custom VM, now with a Pro API

I built VEILVM, an online JSVMP (JavaScript Virtual Machine Protection) workbench. You paste JavaScript (or drop a .js / .mjs / .cjs file), pick an engine, and get an interpreter-plus-bytecode output you can copy or down

I built VEILVM, an online JSVMP (JavaScript Virtual Machine Protection) workbench. You paste JavaScript (or drop a .js / .mjs / .cjs file), pick an engine, and get an interpreter-plus-bytecode output you can copy or download.

Why a VM?

Minifiers and renamers leave your control flow as plain JavaScript. A beautifier plus a debugger often gets most of it back. VM-based protection maps the logic to custom instructions run by an embedded interpreter, which raises the cost of reverse engineering. The trade-off is size and speed, so it's best for small critical snippets, not your whole bundle.

Try it

  • Site: https://vm.ldvmp.com/en/?utm_source=devto&utm_medium=social&utm_campaign=launch
  • Try free 3 times a day with no sign-up (5 KB per file). Click "Load example" and run it; desktop shows source and output side by side.
  • Two engines: High-performance VM and Dynamic VM.
  • After free email signup: 20 runs a month, 30 KB per file.
  • Pro: $9/month (or $79/year) for 1,000 runs, billed via Paddle, 14-day refund on a first purchase.

Example from my own run: a 219-byte license check → about 10 KB in 228 ms on the High-performance VM.

Pro HTTP API

Pro (and above) can call obfuscation over HTTP for CI:

POST https://vm.ldvmp.com/api/v1/obfuscate
Authorization: Bearer veil_live_…

Docs: https://vm.ldvmp.com/docs/api

Keys are hashed at rest, capped at 3 per account, and stop working if the plan drops to free. Quota is shared with the web UI.

Caveats

No obfuscation is unbreakable. Uploaded files are deleted after 24 hours. Don't use it to obfuscate malware.

I'd love feedback on output size/speed, and on what you'd want next (CLI, Vite/Webpack plugin, or GitHub Action).

📰 Read the original article on Dev.to Security

Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.