Protect your PHP source code before you ship
Encode and license PHP applications locally. Your source code does not need to leave your environment. Fast native Zend Engine runtime protection with Ed25519 cryptographic licensing for PHP 8.4, 8.3, and 8.5.
- Feature
- Local CLI encoding
- Feature
- No source upload
- Feature
- PHP 8.3 – 8.5
- Feature
- Laravel & raw PHP
- Feature
- Ed25519 licensing
Don't Ship Your Intellectual Property as Readable Source Code
When you distribute a PHP application as plain source code, customers or third parties can inspect, copy, modify, or redistribute your proprietary business algorithms and licensing logic. PHPcube allows developers to distribute protected PHP applications while keeping the original source code in their own development environment.
Anyone with server or disk access can read proprietary algorithms, bypass license checks, and copy trade secrets.
.so)
Original source is never distributed. The loader verifies signatures and executes protected bytecode in memory.
Your Source Code Stays With You
Unlike cloud-based encoding services where you must upload your valuable proprietary source code to a third-party server, PHPcube is designed around local encoding.
How PHPcube Works
A simple 5-step workflow designed to integrate naturally into your development, build, and deployment processes.
Get PHPcube Access
Start a free trial or purchase a plan. Download the encoder tool and your signed license from the customer portal.
Encode Locally
Run the CLI encoder on your target PHP files or directory in your local workstation or CI/CD runner.
phpcube-cli encode --dir=app/
Configure Licensing
Generate an Ed25519-signed license locked to client domain, server IP, or expiration date.
license.lic
Deploy Application
Deploy your protected files along with the lightweight PHPcube Loader extension (.so) on the Linux server.
extension=phpcube.so
Run Seamlessly
The loader validates cryptographic signatures and runs the application in memory with standard Zend Engine speed.
Real Encoding Output
The customer receives a protected payload rather than your readable source code implementation.
<?php
namespace App\Services;
class BillingService
{
private string $apiKey;
public function __construct(string $apiKey)
{
$this->apiKey = $apiKey;
}
public function processSubscription(string $customerId, float $amount): bool
{
// Proprietary algorithm & financial logic
$signature = hash_hmac('sha256', $customerId . $amount, $this->apiKey);
return $this->executeSecureTransaction($customerId, $amount, $signature);
}
}<?php
// phpcube Protected File - Linux x86_64
// Requires phpcube Zend Engine Loader Extension
if (!extension_loaded('phpcube')) {
die("This application requires the phpcube loader extension.\n");
}
/* PHPCUBE:B64:eyJhbGciOiJFZDI1NTE5IiwidHlwIjoiSldUIn0
eyJkb21haW4iOiJleGFtcGxlLmNvbSIsImV4cCI6MTc5OTk5OTk5OX0
AES256_PAYLOAD_BASE64_BLOCK_FOLLOWS
T2JqZWN0KCdCaWxsaW5nU2VydmljZScpLT5wcm9jZXNzKC4uLik
...PHPCUBE:END */Why Protect PHP Applications?
Maintain complete control over your commercial PHP distribution without compromising on performance or workflow.
Protect intellectual property
Keep proprietary algorithms, business calculations, and internal logic protected from inspection, unauthorized cloning, and redistribution.
Distribute commercial software
Sell and deliver self-hosted PHP applications to clients who manage their own servers without distributing readable source code.
Cryptographic licensing
Enforce single domain, wildcard subdomains, server IP restrictions, and time-based subscription expirations with Ed25519 signatures.
Protect client deployments
Software agencies can deploy proprietary modules and reusable boilerplate to client servers with domain-locked licensing safeguards.
Keep encoding local
Encode entirely on your workstation or internal build pipeline. You never need to upload proprietary repositories to a remote web encoder.
Native Zend Engine execution
Compiled directly as a native C Zend extension for Linux x86_64. Decrypts directly into memory with zero disk writes.
Trusted by PHP Software Vendors
“We distribute a Laravel-based SaaS to 40+ self-hosted clients. PHPcube lets us ship encrypted builds with per-domain licenses. Setup took under an hour and the loader just works on every aaPanel server we’ve tried.”
“Switched from ionCube after PHP 8.4 support was delayed. PHPcube had a working loader the same week 8.4 released. The Ed25519 licensing is genuinely more robust than what we had before.”
“The local encoding model was the deciding factor. We can’t upload client source code to a third-party server. PHPcube runs entirely in our CI pipeline — no source ever leaves our environment.”
Who Is PHPcube For?
Designed specifically for developers and companies distributing professional PHP software.
🔴 Laravel Developers
Protect proprietary Laravel applications, enterprise portals, API backends, and custom packages before distributing them to clients.
Learn about Laravel protection →🐘 Raw PHP Developers
Protect traditional raw PHP applications, scripts, procedural codebases, and custom MVC frameworks without framework dependency.
Explore PHP encoder features →💼 PHP Software Vendors
Distribute commercial PHP products, ERP systems, CRMs, and billing platforms with enforceable license keys and domain validation.
Learn about software licensing →🏢 Digital & Web Agencies
Protect core proprietary components, billing modules, and client deliverables deployed onto client-controlled hosting or VPS servers.
Explore agency & partner plans →🧩 Plugin & Module Authors
Protect commercial addons, payment gateway integrations, and premium modules distributed to third-party installations.
View code protection guide →🖥️ Self-Hosted Software Vendors
Safeguard on-premise distributions and customer self-hosted instances while enforcing contractual terms and annual renewals.
See pricing & licensing options →Works With Your PHP Application — Not Just Laravel
You don't need to rebuild your application around a specific framework to use PHPcube. Because PHPcube executes at the native Zend Engine runtime level, it protects both traditional raw PHP codebases and modern enterprise frameworks alike.
🐘 Raw PHP & Custom Scripts
Encode procedural scripts, custom MVC structures, standalone microservices, and legacy codebases. No dependencies or composer packages required.
- ✓ Protect individual files or full directory trees
- ✓ No framework boilerplate needed
- ✓ Compatible with standard LAMP/LEMP stacks
🔴 Laravel Applications & Packages
Protect Laravel controllers, models, domain actions, middleware, and proprietary service providers while leaving configuration and public assets untouched.
- ✓ Encode
app/directory while preservingconfig/androutes/ - ✓ Standard artisan commands and queues function seamlessly
- ✓ Tested with Laravel 10, 11, and 12 on Linux servers
Built for Serious PHP Developers
Robust engineering without marketing gimmicks. Tested against standard Linux server environments.
Native Zend Engine C Extension
Direct integration with Zend Engine internals without userland eval() wrappers.
Ed25519 & AES-256
Mathematically verified Ed25519 signatures with AES-256-CBC and HMAC-SHA256 payload authentication.
Linux x86_64 Support
Pre-compiled for Ubuntu, Debian, CentOS, AlmaLinux, Rocky Linux, aaPanel, and Docker containers.
CI/CD & Docker Ready
Simple CLI interface designed to integrate seamlessly into GitHub Actions, GitLab CI, or Docker build stages.
Tested & Supported PHP Runtimes
Official 64-bit Linux loader extensions available for production environments:
Frequently asked questions
Straightforward answers about PHPcube's architecture, security, and compatibility.
Does PHPcube require uploading my PHP source code?
No. Encoding runs locally on your machine or inside your CI/CD runner with the PHPcube CLI. Your original PHP source code is never transmitted to our servers.
Can PHPcube protect Laravel applications?
Yes. PHPcube works at the PHP runtime level and can encode controllers, models, middleware, and domain logic while keeping routes, configuration, and migrations readable.
What is the difference between encoding and obfuscation?
Obfuscators rename variables inside plain PHP files, leaving code readable. An encoder converts code into encrypted binary structures that only a native C loader extension can execute in memory.
Does the customer need the PHPcube loader?
Yes. The target Linux server needs the lightweight phpcube.so Zend Engine extension to decrypt and execute the protected application.
Can customers decode my protected PHP files?
No solution can promise 100% unbreakable security. PHPcube combines AES-256 encryption, Ed25519 signatures, and memory-only execution, making reverse-engineering economically and technically impractical.
Built by PHP developers, for PHP developers
PHPcube was built out of a real need: distributing commercial PHP software to self-hosted clients without handing over readable source code. Existing tools either required uploading proprietary code to third-party servers, lacked PHP 8.4+ support, or were priced for enterprise budgets. PHPcube is the practical alternative — a native C Zend extension that runs entirely in your own environment, with transparent pricing and direct developer support.
Guides & deep-dives
How to protect PHP source code before distribution
Step-by-step: encode locally, issue domain-locked licenses, deploy protected builds.
ionCube alternatives for PHP 8.4 and 8.5
Practical comparison of PHP encoder options available today.
How to license PHP software with domain lock and expiry
Ed25519 licensing in practice: domain lock, expiry, renewals, and the REST API.
Need help encoding your PHP app?
Our team will encode your source, configure domain-locked licenses, and deliver a ready-to-deploy protected build. From $49.
Get started in minutes
Ready to protect your PHP software?
Encode locally. Keep your source code under your control. Start with a free 3-day trial or explore transparent pricing.
No card required · Cancel anytime · Your code never leaves your machine