Nebula.NET · Features
Every layer of protection, explained
Nebula.NET combines a full stack of transforms to raise the cost of reverse-engineering your .NET code. Here's what each one does, why it matters, and where to learn more.
Obscures names
Identifier renaming
Hides logic
Control-flow flattening
Hides secrets & intent
String encryption
Hides IL entirely
Whole-method encryption
Detects modification
Anti-tamper
Resists live analysis
Anti-debug
Shrinks the attack surface
Resource & metadata hardening
Traces leaks · Enterprise
Per-customer watermarking
Ships trusted
Authenticode & strong-name signing
For multi-project products
Cross-assembly protection
Debuggable in production
Stack-trace de-obfuscation
Fits your workflow
CLI, desktop app & CI
Before and after: readable C# becomes flattened, renamed and encrypted.
Obscures names
Identifier renaming
Types, methods, fields and parameters are renamed to short, meaningless identifiers, so a decompiler shows a.b(c) instead of PricingEngine.CalculateDiscount(order). Namespaces collapse and the metadata that once documented your design is gone. You can preserve your public API (for libraries) while still renaming everything internal, and reflection- and serialization-referenced names are detected and kept automatically.
Hides logic
Control-flow flattening
The real win against decompilers. Nebula rewrites each method into a dispatcher-driven state machine — a while(true){ switch(state) } loop — so the original if/for/try structure is genuinely destroyed rather than reordered. It works on every method shape, including big try/catch blocks, and the Enterprise aggressive tier even breaks up straight-line code. Every transform is verified to run identically to your original.
Hides secrets & intent
String encryption
Literal strings — messages, SQL, URLs, keys, the text that gives your logic away — are encrypted with a fresh per-build key and decrypted at runtime through an inlined, unbranded routine. A reverse-engineer scanning for a giveaway string finds nothing. Select every string, or just the sensitive ones.
Learn more in the docsHides IL entirely
Whole-method encryption
For your most sensitive methods, the IL body itself is encrypted and only decrypted in memory when the method is first called — so the method’s instructions aren’t present in the shipped assembly at all until runtime.
Learn more in the docsDetects modification
Anti-tamper
A load-time integrity check detects if the assembly has been modified (patched to skip a licence check, for example) and reacts the way you choose — throw, exit, or call your own handler. It defeats the most common attack: editing the binary to bypass your protection.
Learn more in the docsResists live analysis
Anti-debug
Detects an attached managed or native debugger and reacts on your terms, making it far harder to step through and understand the protected code at runtime.
Learn more in the docsShrinks the attack surface
Resource & metadata hardening
Embedded resources can be encrypted, and compile-time-only metadata that leaks intent is stripped or obscured — removing another layer a decompiler relies on.
Learn more in the docsTraces leaks · Enterprise
Per-customer watermarking
Embed a hidden, unique identifier in each customer’s build. If a protected binary leaks or is cracked, read the mark back to trace it to the exact customer it was issued to — a deterrent and a forensic tool.
Learn more in the docsShips trusted
Authenticode & strong-name signing
Because obfuscation rewrites the assembly, signing has to happen after — so Nebula does it for you: re-apply your strong name and Authenticode-sign the protected output (with timestamping) as part of the pipeline.
Learn more in the docsFor multi-project products
Cross-assembly protection
Obfuscate a whole product at once. Nebula renames public members consistently across all your assemblies, so references between them stay valid — protection that spans your entire codebase, not one DLL at a time.
Learn more in the docsDebuggable in production
Stack-trace de-obfuscation
Each build produces a symbol map that only you hold. Feed a renamed production stack trace back through Nebula to translate it into original names — so protecting your code doesn’t cost you the ability to diagnose crashes.
Learn more in the docsFits your workflow
CLI, desktop app & CI
Run it however you like: a point-and-click desktop app to explore and select, a config-driven CLI for scripts, or MSBuild/CI integration that protects automatically on the build server while developer builds stay untouched. No source-code dependency — Nebula transforms compiled output, so nothing Nebula-specific lives in your projects.
Learn more in the docsTry every feature free
The Free edition includes the full toolset (with light caps). Unlock everything with a license.