​

Script Protection

Scripts are protected at the upload step. The security model has two parts:

1. Obfuscation hides the script body (including the embedded keycheck) from casual reading and patching.
2. The validation API stops fake responses at the wire level — see Signature verification.

Obfuscation and the API are independent. The obfuscator you use never affects the API contract.

​

Prometheus (server-side)

Pick a preset when saving the script. Vampauth obfuscates the source before storing it. Weak and minify are discouraged in the UI. Prometheus is limited to 10 obfuscations per user per day (rolling 24h). Attribution: Vampauth is built on Prometheus by Elias Oelschner.

​

Custom (bring your own)

Save a script that is already obfuscated by another tool. Vampauth stores it raw — no transformation, no checks. You own the risk.

​

Keycheck acknowledgment

Vampauth does not inject the keycheck into the script after obfuscation. Before saving a script you must confirm the validation API call is already implemented in the source. A script without a keycheck stays public with no gate.