Stop Shipping
Source Code.

AfterPack is a Rust-powered, post-build JavaScript protection tool. Unlike traditional obfuscators that apply sequential, reversible transforms, AfterPack uses irreversible, hash-like transformations that destroy semantic meaning while preserving runtime behavior. It ships as a free, MIT-licensed CLI with unlimited builds, plus Pro cloud plans starting at $49/mo for advanced protection.

Yes. The CLI is MIT-licensed with unlimited builds and files — no credit card, no caps. Pro plans ($49–$299/mo) unlock cross-module obfuscation, FlowMorph transforms, managed source maps, and other advanced features for teams that need maximum protection.

Minification preserves your code's structure and semantics — GPT-4 can read and explain minified code in seconds. AfterPack applies 250+ irreversible transformations that destroy semantic meaning, making the output computationally infeasible to reverse while preserving identical runtime behavior.

Traditional obfuscators apply sequential transforms that can be reversed one by one. AfterPack combines modern and novel approaches — VM-like transforms, code entanglement, and inflation techniques — running 250+ transformations pseudorandomly until a configurable inflation threshold is reached (from 0.8x to infinity). This means AfterPack can actually minify already-minified code further by simplifying it, reusing literals and strings, and removing dead code, while also being able to inflate and entangle it with hundreds of transformations. The result is incredibly effective, performant, and computationally infeasible to reverse — without meaningfully slowing down the original application.

Yes. AfterPack is built specifically for the AI era. It destroys the semantic patterns that LLMs rely on to understand code. With Pro's FlowMorph transforms, deobfuscation complexity increases by 1000x or more, making automated analysis impractical even for the most advanced AI models.

Traditional obfuscators use sequential, reversible transforms. AfterPack is fundamentally different — it uses non-linear, hash-like transforms with no inverse function. Even AfterPack itself cannot reverse its own output. The transformation is one-way by design.

No. AfterPack is fully CSP-compliant and never uses eval() or Function(). This makes it safe for banking apps, healthcare platforms, and any environment with strict Content Security Policies. Most competing obfuscators rely on eval().

The CLI processes everything locally on your machine — we never see your code. For Pro cloud features, code is encrypted in transit, processed ephemerally, and never stored. Your code is never used for AI training or any purpose beyond providing the obfuscation service.

AfterPack works with virtually any JavaScript or TypeScript project: web apps, SaaS platforms, web games (HTML5, Canvas, WebGL, PixiJS, Phaser, Three.js), Electron/Tauri/NW.js desktop apps, React Native/Capacitor/Cordova mobile apps, browser extensions, Chrome extensions, VS Code extensions, Node.js backends, serverless functions (AWS Lambda, Cloudflare Workers), npm packages, PWAs, distributed commercial software, and more. If it runs JavaScript, AfterPack can protect it.

AfterPack processes 100 files (~300KB each) in under 5 seconds, powered by Rust and SWC. This is fast enough to run on every build, not just releases. Competing tools typically take 5–10+ minutes for the same workload.