Announcing AfterPack — JavaScript Obfuscation for the AI Era
Today I'm launching AfterPack — a Rust-based JavaScript obfuscator designed for the AI era. The waitlist is now open.
Why I Built This
I've spent years protecting web assets through DataUnlocker, watching how the landscape of code protection has fundamentally shifted. The rise of LLMs like GPT-4 and Claude changed everything — these models can now explain minified code in seconds, turning traditional obfuscation into security theater.
The uncomfortable truth: your source code ships with every deployment. Competitors can read it. AI crawlers index it. Reverse engineers unpack it. Legacy obfuscators use predictable patterns that automated tools unravel without breaking a sweat.
What AfterPack Does Differently
AfterPack uses polymorphic transformations that defeat pattern recognition — both human and AI. When tested against GPT-4, protected code produces only hallucinations rather than accurate explanations.
Key technical decisions:
- Rust core — transforms complete in milliseconds, not minutes
- No eval() — works with strict Content Security Policies
- Edge-compatible — runs on Cloudflare Workers, Vercel Edge, Deno Deploy
- Source maps included — debugging your own code shouldn't be painful
Framework Support
AfterPack auto-detects and configures for modern frameworks: Next.js, Vite, Astro, and Remix. Zero configuration needed — just run npx afterpack after your build, or use native plugins.
Free and Pro Tiers
The core obfuscator is MIT licensed and open source. The free tier includes:
- Unlimited builds
- Variable renaming, control flow flattening, string encoding
- Framework presets and deterministic builds for CI
Pro ($49+/month) adds cross-module obfuscation, FlowMorph transforms that increase deobfuscation complexity by 1000x+, browser API locking, and encrypted source map storage.
Join the Waitlist
Early access members get founding member pricing and direct input on the roadmap.
Ship software. Not source.
Links
- AfterPack Announcement
- AfterPack Website
- DataUnlocker — my other web asset protection project