What is Oxrion?
You wrote something valuable in PHP. Now you have to ship it — to a customer, a server, a hosting account. The moment you do, your source is right there in plain text: anyone who has the files can open them, copy them, change them, or resell them. PHP has no “compiled binary” to hide behind. That’s the problem Oxrion exists to solve.
Oxrion turns your PHP source into a protected file that still runs — but can’t be read. You protect your code on your own machine; you deploy the protected files anywhere; and a small free extension on the server runs them at full speed. Your source never leaves your hands as readable code, and it’s never stored by us.
The whole idea in one picture
Section titled “The whole idea in one picture”Your source → [ you protect it ] → protected files → [ server runs them ] readable on your machine unreadable with the free loaderThree things follow from this, and they’re the whole product:
- You protect with the Encoder — on your machine, using the Desktop app or the CLI.
- You control what happens after it ships — lock it to a customer’s domain (Licenser), lock it to a specific server (Keys), or keep the power to restore it to source later (Recovery).
- They run it with the Loader — a free PHP extension the server owner installs once. No account, no cost, no lock-in for your customer.
What makes it painless
Section titled “What makes it painless”- One file, every PHP version — protect once; it runs on PHP 8.1 through 8.4. No re-encoding when a customer upgrades.
- Full speed — protected code runs like normal PHP, OPcache and all.
- Tamper-proof — every file is signed. Change one byte and the loader refuses to run it.
- Never locked out of your own work — if you enabled Recovery, you can always get your source back, offline, with a key only you hold.
Ready?
Section titled “Ready?”The next page walks you from nothing to a working protected file. It takes about ten minutes.