Stringer Java Obfuscator vs Tigress

Stringer Java Obfuscator protects Java application binaries against reverse engineering and modification. It can encrypt strings and application resources, including native libraries, and conceal method calls, field types, and field access. Integrity features include certificate and JAR content checks, JAR sealing, runtime checks, and tamper notifications. The manual also lists anti-emulator and Java code anti-debugging protections, resource-name obfuscation, SSL pinning, watermarking, and a secure code execution environment. Stringer runs offline in an environment controlled by the customer and is available for Linux, macOS, and Windows. Teams can use the command line and integrate it with Ant, Maven, Gradle, or Eclipse. Listed targets include Java SE, Jakarta EE, Java ME, JavaFX, Java Embedded, Eclipse RCP, and NetBeans RCP. The GUI does not expose every feature, and some features and project-input support are Enterprise-only or priced separately. Stringer runs under JRE 1.7 or later and can process applications compiled for J2SE 5.0 and later. Pricing is on request; a 15-day trial is offered.

Tigress is a C obfuscator that changes source code to make static and dynamic reverse engineering harder. Users choose sequences of command-line transformations and options; one input program can produce multiple distinct outputs. Its transformation families cover control flow, data, functions, integrity, and anti-analysis. Tigress supports C99 and targets Linux, Darwin, Android, and Windows, as well as Intel, ARM, and WebAssembly, with 32- and 64-bit output. It supports GCC, Clang, Emscripten, and cl, and cross-compilation can be configured through compiler and environment options. Input must be a single C file, so multi-file programs need to be merged first. The maker offers it free to nonprofit organizations at free. Commercial use in a for-profit organization requires a license from the University of Arizona; pricing is on request, and users may try it for any length of time before deployment. The source is not generally open source. The maker notes that generated code may be slow, particularly for huge programs, and advises assessing security needs before using software-protection techniques.