DashO vs Tigress

DashO protects Android, Java, and Kotlin applications from reverse engineering, code tampering, and unauthorized debugging. It applies protection after compilation as a build step, without requiring code changes. Obfuscation options include patented Overload Induction renaming, control-flow obfuscation, and string encryption. Configurable runtime checks can detect tampering, debugging, rooted devices, emulators, and hooking frameworks, then respond according to configuration. Teams can add DashO to continuous integration through its command-line interface, Gradle plugins for Android and Java, or Ant. There is no dedicated Maven plugin; a Maven build can invoke DashO through Ant. Installers are available for Windows, macOS, and Linux/GNU, and the product processes Android applications and Java or Kotlin class files. The product page says build-time protections have little to no direct runtime impact, while configured runtime checks may add overhead. A free trial is offered, with no duration stated. Plans are quoted rather than publicly priced, and allowances vary by plan.

Tigress is a C obfuscator that changes source code to make static and dynamic reverse engineering harder. Users choose sequences of command-line transformations and options; one input program can produce multiple distinct outputs. Its transformation families cover control flow, data, functions, integrity, and anti-analysis. Tigress supports C99 and targets Linux, Darwin, Android, and Windows, as well as Intel, ARM, and WebAssembly, with 32- and 64-bit output. It supports GCC, Clang, Emscripten, and cl, and cross-compilation can be configured through compiler and environment options. Input must be a single C file, so multi-file programs need to be merged first. The maker offers it free to nonprofit organizations at free. Commercial use in a for-profit organization requires a license from the University of Arizona; pricing is on request, and users may try it for any length of time before deployment. The source is not generally open source. The maker notes that generated code may be slow, particularly for huge programs, and advises assessing security needs before using software-protection techniques.