AUTHENTICATED POST-DEPLOYMENT CONTROL
JavaScript obfuscation. Code never leaves your machine. All transformations happen locally via CLI.
Copy the prompt below and paste it to Claude, ChatGPT, or Cursor to integrate CLOAK automatically.
npm install
Browser auth
Obfuscate code
Install globally and authenticate to start protecting code.
npm install -g @sekyuriti/cloakcloak loginTest obfuscation without authentication using --local flag. Uses free tier features only.
cloak protect app.js --localObfuscate JavaScript files from your terminal.
cloak protect app.js
# Output:
# ✓ app.js → 780% size
# Done. 1/1 files protected.cloak protect src/ -o dist/
# Output:
# ✓ index.js → 650% size
# ✓ utils.js → 720% size
# ✓ api.js → 810% size
# Done. 3/3 files protected.cloak status
# Output:
# Email: user@example.com
# Project: My App
# Tier: FREE
#
# Free Features:
# ✓ Variable renaming
# ✓ String encryption (basic)Configure obfuscation behavior with CLI flags.
-o, --outputOutput directory for protected files--localRun locally without authentication (free tier only)--no-control-flowDisable control flow flattening--no-dead-codeDisable dead code injection--domain-lockLock code to specific domains (comma-separated)--expirationSet expiration date (YYYY-MM-DD format)--anti-debugEnable anti-debugging protection--anti-tamperEnable anti-tampering protectioncloak protect app.js \
--domain-lock example.com,www.example.com \
--expiration 2025-12-31 \
--anti-debugTwo tiers. Choose what fits.
Runtime protection injected into your code. Violations are logged to your dashboard.
Code checks hostname on load. If domain is not in the allowed list, execution stops and a violation is reported.
cloak protect app.js --domain-lock example.com,www.example.comDetects DevTools and debuggers. Makes debugging significantly harder.
cloak protect app.js --anti-debugSelf-integrity check. Detects if code has been modified after obfuscation.
cloak protect app.js --anti-tamperTime bomb with configurable date. Code stops working after expiration.
cloak protect app.js --expiration 2025-12-31All violations are reported to your dashboard via beacon. See who is trying to run your code on unauthorized domains, expired builds, or with debugging tools.