Encrypted source packages
Distribute authenticated encrypted PHP files instead of your original readable source files.
Built for PHP 8.4+
Keep your code.
Share your app.
Ship your PHP application without distributing readable source files. PHP Guard is an open-source project built around encrypted source packages, a native runtime loader, and locally managed keys.
✓ Local key management
✓ No license server
✓ Linux · CLI · FPM
release / protected-app.penc
01$ guard-encode src/ dist/
02Scanning PHP source files...
03✓ 128 files packaged
04✓ Authenticated encryption
05✓ Customer key: cust_••••_042
06✓ Package integrity checked
07$ php app.php
08php_guard: local key accepted
09php_guard: protected source loaded
APPLICATION STATUS● READY
Source stays protectedEncrypted package · local key
Protection toolkit
Built to protect what
makes your product yours.
An open-source approach to reducing source exposure while keeping deployment and key management under your control.
Native runtime loader
A C extension designed to integrate protected files with the PHP compilation pipeline.
Customer-specific keys
Provision separate encryption keys for customer deployments instead of sharing one universal secret.
No licensing server
No activation, subscriptions, customer registration, or remote license checks. The runtime uses locally provisioned key material.
Fits your PHP deployment
Designed for Linux environments using PHP-FPM and CLI, with explicit compatibility and runtime tests.
Release integrity
Signed release manifests and package validation help detect unexpected changes to protected artifacts.
From build to runtime
Your source in.
Protected app out.
PHP Guard separates your private build process from the customer's runtime. The customer gets the encrypted application package and the local runtime components needed to execute it, not your original source tree.
01
Package in your build environment
Encrypt source files, generate the release manifest, and validate the output before delivery.
02
Provision a local key
Generate and install the key securely on the target server. No license service or activation request is involved.
03
Run on the customer's server
The extension verifies authorization and package integrity, then hands valid source to PHP for execution.
Private PHP sourceOnly in your development environment
Encrypted release packageAuthenticated ciphertext + package metadata
php_guard runtimeLocal key lookup and package authentication
Application runningNormal PHP execution flow
Open source · self-hosted
Open by design.
Private by default.
PHP Guard is intended to be an open-source tool that you can inspect, build, and run on your own infrastructure. Protected application files use authenticated encryption, while key management stays local to your deployment.
No licensing server, activation flow, telemetry requirement, or online heartbeat. Keep your keys private and back them up securely.
Open-source project direction
Authenticated encrypted packages
Locally managed customer keys
Works offline at runtime
Linux · PHP-FPM · CLI
Your code is your business
Ship the product.
Keep the source private.
Explore encrypted PHP packages, local key management, and a native runtime loader designed for PHP 8.4+.
Talk about PHP Guard