日本語ローカライズは準備中です。以下は英語版を表示しています。言語切り替え: English · 简体中文
All-Platform App Hardening SaaS

All-platform app hardening & anti-piracy, one tool, five targets

Anrix brings enterprise hardening to Android, iOS, Windows, macOS and Linux: DEX packing, VMP code virtualization, runtime defense, integrity verification and device-level anti-piracy. Reverse engineering, repackaging and piracy don't stand a chance.

Android iOS Windows macOS Linux
No source changes Build in 5–10 min Sign with your own cert
protection.stack
DEX packingKeys held in native, runtime-decrypted
Anti-debug / Frida / injectionKills attacks at runtime
VMP code virtualizationCritical funcs to private bytecode
Integrity checkAnti-repackaging, signature match
Device register / remote banBanned devices exit on launch
Hardening complete 17 protections enabled
Works with major cross-platform frameworks React Native Electron uni-app Cordova Flutter Capacitor
5 OS
One-stop hardening
15+
Layered techniques
<10min
Average build time
100%
Your own certificate
Platforms

One platform, five OS targets

From mobile to desktop, Anrix covers the mainstream executable formats with protection tuned to each platform's runtime.

Android

APK · AAB
  • DEX packing
  • SO library shield
  • VMP virtualization
  • Anti-debug/emulator

iOS

IPA
  • Binary obfuscation
  • Anti-debug/anti-hook
  • Integrity check
  • String encryption

Windows

EXE · DLL
  • Control-flow obfuscation
  • VMP virtualization
  • Anti-debug/anti-dump
  • Integrity check

macOS

APP · DMG
  • Binary hardening
  • Anti-debug
  • Integrity check
  • String encryption

Linux

ELF
  • Symbol stripping
  • Control-flow obfuscation
  • Anti-debug
  • Integrity check
Core protection

Layered protection, defense in depth

Static obfuscation, packing, virtualization and runtime defense stack together — breaking any single layer never brings the whole thing down.

DEX packing

DEX/SO code is packed; the real key lives in the native layer and is decrypted at runtime, so static analysis can't simply unpack it.

AndroidNative keys

Anti-debug · Frida · injection

Multiple detectors for debuggers, Frida, Xposed and dynamic injection; on a hit the process is terminated in real time.

RuntimeAnti-hook

Anti-VM · anti-emulator

Detects virtual machines, emulators and sandboxes to block bulk unpacking and automated analysis in controlled environments.

Env detect

Integrity check

Verifies signature and file fingerprints; any repackaging, tampering or re-signing is rejected at launch.

Anti-repack

String encryption

Sensitive strings, API endpoints and keys are stored encrypted and decrypted on demand — no plaintext leaks.

Static

VMP code virtualization

Critical functions compile to private bytecode run by a built-in interpreter — no off-the-shelf tool can restore the logic.

CorePrivate bytecode

Deep control-flow obfuscation

Compiler-level control-flow flattening and bogus branches erase the program's readable structure and logic flow.

Compiler-levelCFG

SSL Pinning

An embedded native TLS stack with official CA verification defeats man-in-the-middle capture and certificate substitution.

Anti-MITMNative TLS
Protection layers

Every layer is a line of defense

Anrix stacks protection from static analysis to runtime. An attacker has to break through layer by layer — and the cost rises exponentially.

01
Static obfuscation

String encryption + deep control-flow obfuscation erase readable logic and symbols.

02
Packing layer

DEX/SO packing; the real key is held in native and decrypted/loaded at runtime.

03
Virtualization layer

VMP turns critical functions into private bytecode run by a built-in interpreter — no mature unpacker exists.

04
Runtime defense

Anti-debug/Frida/injection/VM detection terminates the process the moment an attack is detected.

05
Integrity & device

Anti-repackaging checks + device registration/ban/kick give you control over every real run.

Device management · anti-piracy

Beyond hardening, own every device

Protection doesn't stop at the build. Hardened apps auto-register their device, so you can ban, kick and reach every running install right from the console.

  • Auto registration

    On first launch the hardened app reports its device fingerprint and joins your device roster.

  • Remote ban / kick

    Ban with one click; banned devices are force-quit on launch, instantly killing pirated distribution.

  • Multi-fingerprint ID

    The server computes multi-dimensional fingerprints, so reinstalls and data wipes still map to the same device.

  • Reach users

    Push announcements and messages to specific devices or groups, straight to real users.

Device console · live
Pixel 8 Prodev_9f3a··c21
Online
iPhone 15dev_2b7e··88d
Online
SM-G991Bdev_c04d··19f
Banned
Win11-Prodev_71aa··e50
New
Live Key derivation

Plaintext keys never ship

The server never sends a plaintext key — only intermediate derivation material. The real key is rebuilt on-device at runtime. Even captured traffic reveals nothing.

  • Server ships material only

    What's sent is derivation material, not the key itself — neither the server nor the wire touches the plaintext key.

  • Real key rebuilt on-device

    Derived locally from the device fingerprint and a native key; the key exists only in runtime memory.

  • Capture is useless

    Intercepted data can't be reversed into the key — static and network analysis both fail.

key-derivation · runtime
// server ships intermediate material only
const material = fetchKeyMaterial(deviceId);
// rebuild the real key locally with the fingerprint
const realKey = deriveLiveKey(
  material, deviceFingerprint(),
);
// realKey lives in runtime memory, never on disk
decryptPayload(realKey); // decrypted ok
Cross-platform · more

Cross-platform frameworks, purpose-built hardening

Protection tuned to the artifact structure of each major cross-platform stack, so hybrid apps are just as tough.

Flutter

Protects Dart AOT output and libapp.so so business logic can't be extracted.

React Native

Obfuscates and protects the JSBundle against JS-layer reversing and repackaging.

uni-app / Taro

Protects mini-program and hybrid output and encrypts critical business logic.

Electron / Cordova / Capacitor

Protects asar and WebView assets so desktop/hybrid apps can't be unpacked.

SSL Pinning

An embedded native TLS stack + official CA defeat man-in-the-middle capture and cert substitution.

One-click signing & distribution

Upload your certificate to re-sign with your own identity and auto-generate an app-store-style download page.

Low overhead

Harden only the critical functions — performance and size overhead stay controlled and invisible to users.

Compare

Head-to-head with the leading solutions

Measured against 360 Jiagu, Ijiami, Guardsquare DexGuard and DexProtector — Anrix covers five OS targets with built-in device-level anti-piracy.

Anrix360 JiaguIjiamiDexGuardDexProtector
Platforms covered5 OS1–21–2AndroidAndroid/iOS
VMP code virtualization
Anti-debug / Frida / injection
Device-level anti-piracy (ban/kick)
Live Key dynamic derivation
Cross-platform (Flutter/RN/Electron)
Built-in SSL Pinning
One-click signing & distribution page
Use your own certificate
FAQ

Frequently asked questions

Everything you might want to know about platform support, the hardening flow and how anti-piracy works.

Which platforms and file formats does Anrix support?
Anrix covers five platforms: Android (APK/AAB), iOS (IPA), Windows (EXE/DLL), macOS (APP/DMG) and Linux (ELF). One platform hardens all five targets — no need to buy separate tools per OS.
Does hardening require changing my source code?
No. Anrix hardens the compiled artifact (installer/executable) directly. Just upload the finished package — no source changes, no SDK integration — and get the hardened build back in minutes.
How much does hardening affect app size and performance?
Overhead stays controlled. Static protections like string encryption and integrity checks are effectively invisible; VMP code virtualization is best applied to critical functions only, letting you balance security strength against performance with no noticeable impact for normal users.
How do device ban and anti-piracy work?
A hardened app auto-registers its device fingerprint at launch. From the console you can ban or kick any device with one click; banned devices are force-quit on launch. The server computes multi-dimensional fingerprints, so reinstalls still resolve to the same device — cutting piracy off at the source.
How is VMP code virtualization different from ordinary obfuscation?
Ordinary obfuscation just renames and reshuffles — the logic is still native instructions that can be decompiled back. VMP compiles critical functions into private bytecode run by a built-in interpreter; no mature tool can restore it directly, so reversing cost rises exponentially.
How do I start, and can I sign with my own certificate?
Register in the console, upload your package, and start hardening — the whole flow is visual. You can upload your own certificate for Anrix to re-sign with, and it auto-generates an app-store-style download and distribution page.

Make your app unbreakable

Five-OS hardening, device-level anti-piracy and a visual console — start free now and get a hardened build in minutes.