GhostBinary — Binary Protection Platform

GhostBinary is an API-first binary protection platform for teams that want to harden shipped software before it reaches users. It supports three runtimes: .NET/C#, Java/Kotlin JARs, and native Windows PE binaries. The homepage says it is in public beta, free during beta, and requires no credit card.

The product is aimed at developers and security engineers who need to protect commercial software from reverse engineering, cracking, license bypass, tampering, and analysis. It offers a pipeline that uploads a binary, applies a chosen protection tier, runs compatibility checks, and returns hardened output for download. The site also emphasizes CI/CD use, with REST API access, GitHub Actions integration, and JSON output so releases can be protected automatically.

For .NET binaries, the page lists techniques such as IL virtualization, control-flow flattening, name obfuscation, anti-debug, anti-tamper, and other optional protections. For Java/Kotlin JARs, it highlights debug info stripping, string XOR encryption, class name obfuscation, and opaque predicate injection. For native PE binaries, it describes AES-GCM section encryption, compression plus XOR layering, per-binary derived keys, and a minimal self-extracting stub. The site also notes that protection runs with an automatic compatibility check in an isolated VM snapshot.

Protection tiers are presented from Minimal to Enterprise, with different combinations of stripping, encryption, virtualization, mutation, anti-debugging, anti-tamper, and polymorphic behavior. The page says all tiers are free during the public beta.

Key features:
- Supports .NET/C#, Java/Kotlin JARs, and native Windows PE binaries
- API-first workflow with REST API, JSON output, and GitHub Actions integration
- Upload, protect, verify, and download binaries in an automated pipeline
- Includes IL virtualization, control-flow flattening, name obfuscation, and anti-tamper controls
- Adds Java/Kotlin string encryption, debug-info stripping, and opaque predicates
- Offers native PE packing with AES-GCM encryption and per-binary derived keys
- Provides protection tiers from Minimal to Enterprise during public beta