Code Virtualizer vs Tigress

Code Virtualizer is a code-protection tool for developers seeking to make selected application, library, or driver code harder to reverse engineer. It transforms x86, x64, or ARM64 instructions into virtual opcodes interpreted by an internal virtual machine; each protected application receives its own opcodes and machine. It supports native PE, ELF, and Mach-O files, including executables, services, DLLs, shared objects, and device drivers. Developers mark protected sections with macros from VirtualizerSDK.h. Listed capabilities include multiple virtual machines, code relocation, an advanced mutation engine, and command-line protection. The maker says the product works with any compressor or protector. It runs on Windows, macOS, and Linux. A demo is available but cannot be registered; it offers light virtualization, omits string encryption, mutate macros, and compressed virtual machines, and adds a demo splash screen. The Developer License (x86/x64) costs €199 as a one-time purchase, and other licenses are listed for different developer counts and ARM64 use. Purchases include one year of updates and email support.

Tigress is a C obfuscator that changes source code to make static and dynamic reverse engineering harder. Users choose sequences of command-line transformations and options; one input program can produce multiple distinct outputs. Its transformation families cover control flow, data, functions, integrity, and anti-analysis. Tigress supports C99 and targets Linux, Darwin, Android, and Windows, as well as Intel, ARM, and WebAssembly, with 32- and 64-bit output. It supports GCC, Clang, Emscripten, and cl, and cross-compilation can be configured through compiler and environment options. Input must be a single C file, so multi-file programs need to be merged first. The maker offers it free to nonprofit organizations at free. Commercial use in a for-profit organization requires a license from the University of Arizona; pricing is on request, and users may try it for any length of time before deployment. The source is not generally open source. The maker notes that generated code may be slow, particularly for huge programs, and advises assessing security needs before using software-protection techniques.