wuuvy wuuvy
Hand-painted scene of a lake with ducks and a waterfall
Wuuvy bytecode obfuscation

If they can't crack it, they can't quack it.

wuuvy scrambles your compiled Java so it still runs exactly the same, but reads like noise to anyone poking at it. Your license checks and your clever bits stay yours.

Explore Techniques
Art by Wuuvy

Drops Into Your Build

Wire wuuvy into any JVM pipeline with a single command or build-plugin block. Configure once, protect every release. No source changes, no runtime agent.

CLI in any terminal

After install, ofc-jar mod my-mod.jar works in cmd, PowerShell, IntelliJ's terminal, VS Code's terminal, git-bash, and WSL. ofc-jar-inside auto-detects the surrounding project and obfuscates the freshly-built artifact.

Gradle & Maven integration

wuuvy integrate auto-detects your build system and writes a ready-to-use task. Then ./gradlew obfuscate or mvn package produces the protected jar alongside the regular one.

Presets, or pick your own

Start with a preset: fortify (the safe default), light, methods, turbo, all, or the Minecraft-tuned mod / mod-strict / paranoid. Or list the exact passes you want. Each one is independent and quietly skips itself when it doesn't apply.

Happy in CI

Runs headless, no screen needed. Pin a seed and you get the exact same output every time, so it's diff-able and cache-able. A ProGuard-format mapping file drops next to the jar, and the exit code plus an errors=N line make it easy to gate in Jenkins, GitHub Actions, or GitLab CI.

wuuvy
–
☐
×
wuuvy [demo terminal] a toy shell running in your browser. the real wuuvy is a command you run in your own terminal. Here's what you'd actually type: wuuvy app.jar -> protect app.jar (default preset: fortify) ofc-jar mod my-mod.jar -> use a specific preset ofc-jar-inside -> build this project, then protect what it makes wuuvy list -> every technique, by name wuuvy doctor app.jar -> "which preset should I use?" Double-click the jar once to put those commands on your PATH. (try: help, list, about)
wuuvy> 

Every technique, laid out

The whole list, grouped by what each one is for. Click any of them to see what it actually does to your bytecode.

- transformation passes+ - junk-call & decoy micro-passes on top

Built for Commercial Software

wuuvy is for teams who ship their Java apps outside their own infrastructure, where the jar is the product and protecting it matters.

Licensed Desktop Software

Protect license validation, activation flow, and proprietary algorithms in Java desktop products you ship to end users.

On-Prem Enterprise Apps

Harden business logic in applications deployed into customer environments, where the binary is no longer under your control.

SDKs & Redistributable Libraries

Ship JAR libraries to third-party developers while keeping internal APIs, helpers, and protocol details out of easy reach.

wuuvy vs. Zelix KlassMaster

The old guard of Java obfuscation charges per machine, charges again when a new major version ships, and still hands you an Ant task. Here's how the two compare.

wuuvy Built for how Java ships today Zelix KlassMaster
Price $140. Once. Unlimited projects, unlimited builds. $585 per machine. $1,900 for five seats. $2,195 for one office.
Refunds 15 day money back guarantee. Not the right fit? Email us, full refund. Yes, exactly one day longer than theirs. You're welcome. 14 days. So close.
Paying again later Never. Lifetime updates, every version, included. Major versions cost extra once you're 90 days in. Upgrades run $130 to $1,098. Each time.
Transformation passes 150+ passes, every one individually selectable, with curated presets. A short core list: name, flow, string and integer encryption, reference.
Method lifting (VM) vm-lift rips method bodies out of the classfile into a per-jar VM dispatcher. Decompilers see a dispatcher, not your logic. Other vendors sell this class of protection alone for $100+. Here it's included. Doesn't exist here. At any price.
Decoys & fake JNI surfaces 200+ junk passes drown your real code in decoys, and fake-native stubs send analyzers hunting for a JNI layer that isn't there. Nowhere in the feature list.
Build integration Modern CLI plus first class Gradle and Maven plugins. A desktop GUI, an Ant task, and ZKM Script, a scripting language nobody else on your team knows.
Stack-trace retrace Mapping file auto-emitted with every single build. Zero extra steps. A separate translate tool you run by hand.
Minecraft mod support Dedicated mod and mod-strict presets. Forge, Fabric, NeoForge, Mixin-aware. Nothing. No loader awareness at all. You write the exclusion rules and pray.
Deterministic CI builds Same input, same output. Diff-able, cache-able, reproducible. Not advertised anywhere on their site.
Getting updates Log in, download, always current. Email them your license number and wait.

Zelix KlassMaster pricing and features taken from zelix.com, July 2026. Zelix and KlassMaster are trademarks of Zelix Pty Ltd, which is not affiliated with wuuvy LLC.

One License, No Subscription

Pay once. Use it on as many projects as you like, for as long as you like.

Developer License

Full access to the wuuvy engine, every transformation pass, lifetime updates, and commercial usage rights.

$140 USD
Lifetime
  • All 150+ transformation passes
  • Run in your console or IDE
  • Lifetime version updates
  • Stack-trace retrace mapping
  • Commercial usage rights
  • Priority email & Discord support
  • Unlimited protected builds
  • Keeps reflection & framework names safe automatically

15 day money back guarantee. Not the right fit? Email us, full refund.

Common questions

If yours isn't here, ping us on Discord or the contact page and we'll answer it.

My download fails or stops right at the end. Why?
If the download dies right at the very end, it's almost never the file. Some security tool is scanning it and cutting the connection at the finish line. Nine times out of ten it's NordVPN's Threat Protection (its "URL cleaner"): switch it off, download, switch it back on. Same fix if you run Malwarebytes Browser Guard, Avast/AVG Web Shield, Kaspersky, or a work proxy that inspects traffic. Still won't go? Try another network, or email me and I'll get you the jar directly.
Will obfuscation break reflection or serialization?
Only if you rename the parts that need their real names, and wuuvy already knows most of those. The default fortify preset never renames classes, which is the thing reflection and service loaders care about most, and names passed to Class.forName and friends are spotted and left alone. The mod presets go further for loaders. Everything else gets obfuscated. When in doubt, run it and check the mapping file; it tells you exactly what changed.
Which Java versions are supported?
wuuvy runs on JDK 8 or newer and protects jars targeting Java 8 upward. Passes that use newer JVM features, such as tricks built on invokedynamic from JDK 9 up, detect the class file version and fall back gracefully on older targets, so one config works across your whole toolchain.
Can I use it on Minecraft mods?
Yes. That is exactly what the mod and mod-strict presets are for. They are tuned for Forge, Fabric, and NeoForge loaders and are aware of Sponge Mixin transformers, so entry points, mixins, and classes loaded through reflection keep working while the rest of your mod is protected.
Can I still read production stack traces?
Yes. Every build emits a mapping file in the standard ProGuard format alongside the jar. When a crash report comes in, retrace it against the mapping to recover the original class, method, and line information.
Does it work in CI/CD?
That is the intended home for it. It runs headless, pin a seed and the same input and config produce the exact same output every time, and the CLI returns clear exit codes, so it slots into any pipeline. Gradle and Maven plugins are included if you would rather wire it into the build itself.
Will it slow my application down?
That's up to you. light and methods barely register at runtime; paranoid trades speed for the most protection. Every one of the 150+ passes is a separate switch, so you set the balance, not us.
Can I sell software protected with wuuvy?
Yes. Commercial usage rights are part of every Developer License. Ship obfuscated jars in paid products, subscriptions, client deliverables, or anything else you charge money for. There are no royalties, no revenue share, and no separate commercial tier to unlock.
Do my customers need anything from wuuvy?
No. The protected jar is completely self contained. Your users never install anything extra, never see a license prompt, and never connect to our servers. To them it is simply your application.
Do protected jars expire or phone home?
Never. wuuvy does its work at build time and then gets out of the way. There is no runtime agent, no callback to wuuvy servers, and no expiry baked into the output. A jar you protect today will run exactly the same in ten years.
Can I protect an SDK or library that other developers use?
Yes. Hand wuuvy a keep-list of the classes that make up your public API and let it tear apart everything behind them. Your customers code against clean, documented interfaces while your internals, helpers, and protocol details stay out of reach.
Can wuuvy protect my license checks and activation code?
That is one of its main jobs. String encryption hides your endpoints and keys, flow obfuscation buries the validation logic, and the junk passes drown the real check in hundreds of decoys. The code crackers go hunting for first becomes the code that is hardest to find.
Can someone still decompile my protected jar?
They can try. A decompiler will produce output, but it will be a wall of renamed classes, encrypted strings, and scrambled control flow instead of your source code. No tool on earth makes reverse engineering impossible. wuuvy makes it cost far more effort than the secrets inside are worth.
Can I use my license for client and agency work?
Yes. The license is per developer, not per company or per project. If you build jars for clients, every one of them can ship protected, and your clients do not need to buy their own license to receive or run what you deliver.
Is it a subscription?
No. A Developer License is a single $140 payment. It includes lifetime version updates, every transformation pass, commercial usage rights, and unlimited protected builds. There is nothing else to pay, ever.
How many projects can I use one license on?
As many as you like. Licensing is per developer, not per project or per build. One license covers every jar you personally ship, commercial or otherwise, forever.
What is the refund policy?
Every purchase comes with a 15 day money back guarantee. If wuuvy is not the right fit for any reason, email support@wuuvy.com within 15 days of purchase and we will refund you. A refund deactivates your license key. After the 15 day window, sales are final, so give wuuvy a proper run in your real build early. Questions before or after purchase are welcome on Discord or by email.