Military-grade AES-256 encryption for your PHP applications. Hardware-bound licensing. Zero dependencies. Works everywhere PHP runs.
# Generate a hardware-bound license
$ ppe license:generate \
--licensee="Acme Corp" \
--hostname=prod.acme.com \
--expires=+1y
✓ License created: acme-corp.ppe
# Encrypt your application
$ ppe encrypt --license=acme-corp.ppe src/ dist/
✓ Encrypted 147 files
✓ Runtime bundled
Ready to deploy!When you distribute PHP applications, your source code goes with it. Customers, competitors, and bad actors can read, copy, and steal your intellectual property. Traditional solutions require expensive server extensions that many hosts don't support.
class PaymentProcessor
{
private $apiKey = 'sk_live_xxx';
private $algorithm;
public function charge($amount)
{
// Your proprietary logic
// Completely exposed...
}
}<?php /* PPE:AES256GCM */
K4xV8mPq2nRtYwE9sLkJhGfDcBaZxNvM
3iOp5uTyQwErAsXdCfVgBhNjMkLpZqWs
7YuIoP0aQwSdErFtGhYjUkIlOpZxCvBn
9MnBvCxZlKjHgFdSaPqOwEiRuTyYwXmV
2LkJhGfDcBaZxNvMqWsErTyUiOpAsXdC
...
✓ AES-256-GCM encrypted
✓ Hardware-bound licensePurePHPEncryptor transforms your readable PHP code into AES-256-GCM encrypted files that can only run with a valid, hardware-bound license. No special extensions. No hosting restrictions. Just pure PHP.
Enterprise-grade protection without enterprise complexity
The same encryption standard used by governments and banks. Your code is transformed into unreadable ciphertext that cannot be reversed without the license key.
Lock licenses to specific servers using hostname, IP address, or MAC address. Prevents unauthorized copying and ensures each customer needs their own license.
Create licenses that expire after a set period. Perfect for subscriptions, trials, or annual renewals. Supports both relative (+90 days) and absolute dates.
Optional call-home verification with your license server. Revoke licenses remotely, track activations, and maintain complete control over your software.
Any modification to encrypted files or the runtime instantly breaks decryption. Silent failures prevent attackers from learning how the protection works.
Encrypt entire directories with a single command. Integrates easily into your build process. No complex configuration or learning curve.
Works seamlessly with Laravel, Symfony, WordPress, and any PHP framework. Your encrypted code runs exactly like the original—no modifications needed.
Source code is decrypted only in memory during execution. Never written to disk. Variables are cleared after use. Maximum security for your IP.
From unprotected code to fully encrypted application in minutes
Create a hardware-bound license for your customer with their server details, expiration date, and any constraints you need.
ppe license:generate --licensee="Customer" --hostname=server.com
Run the encryptor on your source directory. Every PHP file is encrypted with AES-256-GCM and bound to the license.
ppe encrypt --license=customer.ppe src/ dist/
Ship the encrypted files with the runtime and license. Your customer runs PHP normally—the runtime handles everything transparently.
php index.php # Just works!
See how we compare to traditional PHP protection solutions
| Feature | PurePHPEncryptor | ionCube | Zend Guard |
|---|---|---|---|
| No PHP extension required | ✓ | ✕ | ✕ |
| Works on shared hosting | ✓ | Sometimes | Sometimes |
| Modern encryption (AES-256-GCM) | ✓ | Proprietary | Proprietary |
| Hardware binding | ✓ | ✓ | ✓ |
| Online license validation | ✓ | ✓ | ✓ |
| Remote revocation | ✓ | ✓ | Limited |
| One-time payment | ✓ | Annual | Annual |
| Lifetime updates | ✓ | ✕ | ✕ |
Whether you're a solo developer or a software company
Protect the custom solutions you build for clients. Prevent unauthorized redistribution and ensure you get paid for your work.
Sell PHP applications with confidence. Hardware-bound licensing ensures each customer needs their own license. No more piracy.
Deliver protected solutions to enterprise clients. Maintain control over your code even after deployment on client infrastructure.
Offer on-premise installations of your SaaS. Time-limited licenses with online validation give you complete control.
No subscriptions. No annual renewals. Pay once, use forever.
Instant delivery via email. 30-day money-back guarantee.
Industry-standard algorithms. No security through obscurity.
Authenticated encryption for file contents
Elliptic curve key agreement
Digital signatures for license verification
Key derivation function
Modern PHP with native OpenSSL
Only standard PHP functions required
Yes. PurePHPEncryptor uses only standard PHP functions that are available in virtually every PHP installation: OpenSSL (enabled by default since PHP 5.3), zlib, json, and hash. No special loaders or compiled extensions are needed.
We use AES-256-GCM, the same encryption standard used by governments and financial institutions. Combined with ECDH key exchange and ECDSA signatures, your code is protected by modern, industry-standard cryptography—not proprietary algorithms.
You simply generate a new license with their updated hardware details. As the vendor, you have complete control over license generation. This is by design—it prevents unauthorized copying while keeping you in control.
Breaking AES-256 encryption is computationally infeasible with current technology. While no protection is 100% unbreakable (someone with the valid license could theoretically dump decrypted code from memory), the barrier is extremely high. For most commercial applications, this level of protection is more than sufficient.
There is a small overhead for decryption on each request, typically a few milliseconds. For most applications, this is negligible. PHP's opcode caching (like OPcache) can cache the decrypted bytecode, minimizing the impact on subsequent requests.
Every update we release—bug fixes, new PHP version support, security patches, and new features—is included at no additional cost. You pay once and receive updates forever.
Yes. PurePHPEncryptor works with any PHP code including WordPress, Laravel, Symfony, or plain PHP. You include the runtime with your plugin/theme, and it handles decryption transparently.
Yes, we offer a 30-day money-back guarantee. If PurePHPEncryptor doesn't work for your use case, contact us for a full refund—no questions asked.
Get a lifetime license and start shipping encrypted PHP today.
Get Started — $99