wuuvy wuuvy
Hand-painted scene of a lake with ducks and a waterfall
Wuuvy bytecode obfuscation

If they can't crack it, they can't quack it.

wuuvy rewrites your compiled Java so it runs the same but reads like noise. Your license checks, algorithms, and APIs stay yours.

Explore Techniques
Art by Wuuvy

Drops Into Your Build

Wire wuuvy into any JVM pipeline with a single command or build-plugin block. Configure once, protect every release. No source changes, no runtime agent.

CLI in any terminal

After install, ofc-jar mod my-mod.jar works in cmd, PowerShell, IntelliJ's terminal, VS Code's terminal, git-bash, and WSL. ofc-jar-inside auto-detects the surrounding project and obfuscates the freshly-built artifact.

Gradle & Maven integration

wuuvy integrate auto-detects your build system and writes a ready-to-use task. Then ./gradlew obfuscate or mvn package produces the protected jar alongside the regular one.

Composable + presets

Pick from all, mod, mod-strict, methods, light, paranoid, or pass an exact comma-separated technique list. Each pass is independent and skips itself cleanly when not applicable.

CI/CD ready

Deterministic builds (single seed → single output), ProGuard-format mapping file auto-emitted alongside the jar, clear exit codes and a errors=N counter on stdout for Jenkins / GitHub Actions / GitLab CI.

wuuvy
–
☐
×
wuuvy [Version 1.0.0] copyright (C) All rights reserved Commands (this terminal): ofc -> pick a .jar, obfuscate with 'all', write <name>_ofc.jar ofc-jar <tech1,tech2,...> -> pick a .jar, obfuscate with given techniques ofc-list -> list available techniques install -> put wuuvy / ofc-jar / ofc-jar-inside on PATH uninstall -> remove the launchers from PATH cls | exit After install, in any cmd / PowerShell / bash terminal: ofc-jar mod my-mod.jar -> standalone obfuscate (mod-safe preset) ofc-jar all my-app.jar out.jar -> with explicit output path ofc-jar-inside -methods -> build current project, obfuscate wuuvy integrate -> wire wuuvy into Gradle/Maven (try: help, purchase, login, pyramid, coffee, matrix, ofc-list)
wuuvy> 

Every technique, laid out

The whole catalogue, grouped by job. Click any one to see what it actually does to your bytecode — no marketing, just the mechanics.

- transformation passes+ - junk-call & decoy micro-passes on top

Built for Commercial Software

wuuvy is designed for teams who distribute their Java applications outside their own infrastructure - where the JAR is the product, and protecting it matters.

Licensed Desktop Software

Protect license validation, activation flow, and proprietary algorithms in Java desktop products you ship to end users.

On-Prem Enterprise Apps

Harden business logic in applications deployed into customer environments, where the binary is no longer under your control.

SDKs & Redistributable Libraries

Ship JAR libraries to third-party developers while keeping internal APIs, helpers, and protocol details out of easy reach.

wuuvy vs. Zelix KlassMaster

The old guard of Java obfuscation charges per machine, charges again when a major version ships, and still hands you an Ant task. Line them up and it isn't close.

wuuvy Built for how Java ships today Zelix KlassMaster First released in 1997. It shows.
Price $140. Once. Unlimited projects, unlimited builds. $585 per machine. $1,900 for five seats. $2,195 for one office.
Refunds 15 day money back guarantee. Not the right fit? Email us, full refund. Yes, exactly one day longer than theirs. You're welcome. 14 days. So close.
Paying again later Never. Lifetime updates, every version, included. Major versions cost extra once you're 90 days in. Upgrades run $130 to $1,098. Each time.
Transformation passes 160+ passes, every one individually selectable, with curated presets. A short core list: name, flow, string and integer encryption, reference.
Method lifting (VM) vm-lift rips method bodies out of the classfile into a per-jar VM dispatcher. Decompilers see a dispatcher, not your logic. Other vendors sell this class of protection alone for $100+. Here it's included. Doesn't exist here. At any price.
Decoys & fake JNI surfaces 200+ junk passes drown your real code in decoys, and fake-native stubs send analyzers hunting for a JNI layer that isn't there. Nowhere in the feature list.
Build integration Modern CLI plus first class Gradle and Maven plugins. A desktop GUI, an Ant task, and ZKM Script, a scripting language nobody else on your team knows.
Stack-trace retrace Mapping file auto-emitted with every single build. Zero extra steps. A separate translate tool you run by hand.
Minecraft mod support Dedicated mod and mod-strict presets. Forge, Fabric, NeoForge, Mixin-aware. Nothing. No loader awareness at all. You write the exclusion rules and pray.
Deterministic CI builds Same input, same output. Diff-able, cache-able, reproducible. Not advertised anywhere on their site.
Getting updates Log in, download, always current. Email them your license number and wait.
The math for one developer staying current for five years: wuuvy is $140, total, forever. Zelix is $585 to walk in the door, then $130+ every time a major version lands after your first 90 days. You could buy a wuuvy license for your whole team, twice, and still come out ahead.

Zelix KlassMaster pricing and features taken from zelix.com, July 2026. Zelix and KlassMaster are trademarks of Zelix Pty Ltd, which is not affiliated with wuuvy LLC. We're sure they're lovely people.

One License, No Subscription

Pay once. Use it on as many projects as you like, for as long as you like.

Developer License

Full access to the wuuvy engine, every transformation pass, lifetime updates, and commercial usage rights.

$140 USD
Lifetime
  • All 160+ transformation passes
  • Run in your console or IDE
  • Lifetime version updates
  • Stack-trace retrace mapping
  • Commercial usage rights
  • Priority email & Discord support
  • Unlimited protected builds
  • Glob-based include / exclude rules

15 day money back guarantee. Not the right fit? Email us, full refund.

Questions people actually ask

If yours isn't here, ping us on Discord or the contact page and we'll answer it.

My download fails or stops right at the end — why?
This is almost always a VPN or antivirus “web protection” feature scanning the file and dropping the connection as it finishes — not a problem with the download itself. The most common culprit is NordVPN’s Threat Protection / “URL cleaner”: turn it off (or pause Threat Protection) and the download completes normally. The same applies to download-scanning in other tools — Malwarebytes Browser Guard, Avast/AVG Web Shield, Kaspersky, or a corporate SSL-inspecting proxy. Temporarily disable the scanner, download, then switch it back on. If it still fails, try a different network or ask support.
Will obfuscation break reflection or serialization?
Only if you obfuscate the parts that need their real names, and wuuvy already knows most of those. Anything reached by reflection or a service loader can be kept with a glob rule, and the mod presets keep the names loaders look up by default. The rest gets obfuscated. When in doubt, run it — the mapping file tells you exactly what changed.
Which Java versions are supported?
wuuvy runs on JDK 8 or newer and protects jars targeting Java 8 upward. Passes that use newer JVM features, such as tricks built on invokedynamic from JDK 9 up, detect the class file version and fall back gracefully on older targets, so one config works across your whole toolchain.
Can I use it on Minecraft mods?
Yes. That is exactly what the mod and mod-strict presets are for. They are tuned for Forge, Fabric, and NeoForge loaders and are aware of Sponge Mixin transformers, so entry points, mixins, and classes loaded through reflection keep working while the rest of your mod is protected.
Can I still read production stack traces?
Yes. Every build emits a mapping file in the standard ProGuard format alongside the jar. When a crash report comes in, retrace it against the mapping to recover the original class, method, and line information.
Does it work in CI/CD?
That is the intended home for it. Builds are deterministic, meaning the same input and config produce the same output, and the CLI returns clear exit codes, so it slots into any pipeline. Gradle and Maven plugins are included if you would rather wire it into the build itself.
Will it slow my application down?
That's up to you. light and methods barely register at runtime; paranoid trades speed for the most protection. Every one of the 160+ passes is a separate switch, so you set the balance — not us.
Can I sell software protected with wuuvy?
Yes. Commercial usage rights are part of every Developer License. Ship obfuscated jars in paid products, subscriptions, client deliverables, or anything else you charge money for. There are no royalties, no revenue share, and no separate commercial tier to unlock.
Do my customers need anything from wuuvy?
No. The protected jar is completely self contained. Your users never install anything extra, never see a license prompt, and never connect to our servers. To them it is simply your application.
Do protected jars expire or phone home?
Never. wuuvy does its work at build time and then gets out of the way. There is no runtime agent, no callback to wuuvy servers, and no expiry baked into the output. A jar you protect today will run exactly the same in ten years.
Can I protect an SDK or library that other developers use?
Yes. Keep your public API surface readable with glob keep rules and let wuuvy tear apart everything behind it. Your customers code against clean, documented interfaces while your internals, helpers, and protocol details stay out of reach.
Can wuuvy protect my license checks and activation code?
That is one of its main jobs. String encryption hides your endpoints and keys, flow obfuscation buries the validation logic, and the junk passes drown the real check in hundreds of decoys. The code crackers go hunting for first becomes the code that is hardest to find.
Can someone still decompile my protected jar?
They can try. A decompiler will produce output, but it will be a wall of renamed classes, encrypted strings, and scrambled control flow instead of your source code. No tool on earth makes reverse engineering impossible. wuuvy makes it cost far more effort than the secrets inside are worth.
Can I use my license for client and agency work?
Yes. The license is per developer, not per company or per project. If you build jars for clients, every one of them can ship protected, and your clients do not need to buy their own license to receive or run what you deliver.
Is it a subscription?
No. A Developer License is a single $140 payment. It includes lifetime version updates, every transformation pass, commercial usage rights, and unlimited protected builds. There is nothing else to pay, ever.
How many projects can I use one license on?
As many as you like. Licensing is per developer, not per project or per build. One license covers every jar you personally ship, commercial or otherwise, forever.
What is the refund policy?
Every purchase comes with a 15 day money back guarantee. If wuuvy is not the right fit for any reason, email support@wuuvy.com within 15 days of purchase and we will refund you. A refund deactivates your license key. After the 15 day window, sales are final, so give wuuvy a proper run in your real build early. Questions before or after purchase are welcome on Discord or by email.