NakodaX

NakodaX Source Protection

Let your software run without giving away how it works.

Lock the parts of your code that make your product yours. Your customers run it as normal. When the contract ends, you switch it off.

Start free trial
  • Your keys, your licences
  • A different key for every customer
  • Switch off any time
A code editor on a glass screen, with one section of the code held inside a glowing green panel clamped shut with two latches.

Source Protection for software deployed outside your business

Why it matters

Shipping software should not mean shipping the secret.

  1. You ship it

    On premises means a readable copy.

    They wanted it on their servers.

    When your customer runs your software on their own servers
  2. The trial ends

    The pilot that never ended.

    Nothing switches it off.

    When a free pilot keeps running on the customer’s servers
  3. The engagement ends

    The agency and engineers who built it still have it.

    The contract ended. Their copy, and what they know, did not.

    When the agency that built your product keeps a copy

How it works

Lock it once. Stay in control.

  1. 01

    Choose

    Connect your repository. We suggest what to lock. You decide.

  2. 02

    Publish

    We create a protected copy for your customer or vendor.

  3. 03

    Deploy

    They run it on their servers, the usual way.

  4. 04

    Stay in control

    Set an end date, see every deployment, switch anyone off.

Features

Everything you need to ship software safely.

Lock what matters, run it at your customers, and keep your own team moving.

1

Pick what to protect

Lock the part that matters.

Find the crown jewels

We find the code worth protecting.

Point us at a repository. We rank the files by how much only you could have written, and suggest what to lock. You review the list.

Learn more: We find the code worth protecting.

Works with GitHub, GitLab and Bitbucket

Pick the repository and the branches. Nothing changes for your team.

2

Ship to customers

Say yes to on premises.

Every repository has its own key

Each repository opens with its own key, so your codebase stays closed.

3

Keep your team moving

Build without handing over.

Builds that stay locked

A customer's own build can run, and what ships is locked again.

4

Prove it

Know who is running what.

Customer handover

One page to hand to each customer.

The steps, the key and the setup details in one place. Email the key from your dashboard.

Your team and your roles

Admins, members and viewers. Showing a key again needs your password.

Use cases

Built for software that leaves your building.

How it is different

Why not hide the code or lean on a contract?

Hiding the code makes it harder to read. A contract is a promise. NakodaX gives you a switch, and your customers still run it on their own servers.

Obfuscation
Contract and NDA
NakodaX
Customers run it on their own servers
Yes
Yes
Yes
A copied repository stops working
No
No
Yes
End one customer without touching the rest
No
Partly
Yes
See where it is running
No
No
Yes
Keep the logic that makes you valuable
Partly
No
Yes
Agencies build without holding the secrets
No
No
Yes

Integrations

Works with the repositories you already use.

  • GitHub
  • GitLab
  • Bitbucket

Security

Security you can explain.

  • Locked before it reaches them

    The protected parts are encrypted with AES-256.

  • Its own key for every repository

    Each repository opens with its own key, so your codebase stays closed.

  • Opens in memory only

    Nothing readable is left on their disk.

  • A record you can check

    Every key request and licence change is logged.

Read about security

Security documentation is available on request. NakodaX holds the keys and the licences. Your repository stays with you.

AI Protection

AI can rewrite readable code. Locked files cannot be pasted in.

Your selected components stay out of the readable release, so there is nothing to paste.

See what AI Protection covers

Languages

Works with the languages you ship.

Python, JavaScript, TypeScript and SQL today. Tell us what you build with, and it shapes what we add next.

Python
Available
From memory at start
Today
JavaScript
Available
From memory at start
Today
TypeScript
Available
From memory at start
Today
SQL
Available
Opens before your build
Today
Java
Planned
Set at launch
Date to be announced
Go
Planned
Set at launch
Date to be announced
C#
Planned
Set at launch
Date to be announced
PHPincluding Laravel
Planned
Set at launch
Date to be announced
Ruby
Planned
Set at launch
Date to be announced
Rust
Planned
Set at launch
Date to be announced

Not on the list?

Tell us what you build with. It decides what we add next.

Tell us your stack

Developer tools

Fits your pipeline.

nkx is a small command line tool. It drops into your build and into the way your developers already work.

In your build

Unlock, build, lock again.

  1. Beforenkx materialize
  2. Your stepyour own build
  3. Afternkx rehook

Two commands around the build step you already run. What you ship is locked again.

In your team

Approved changes, then locked again.

  1. Startnkx unlock
  2. Your workedit and test as normal
  3. Finishnkx reseal

A developer opens the protected code inside an approved change session, then seals it when done.

Signed release
Check what you download.
One binary
Nothing else to install.
Homebrew or curl
Fits a build image or a laptop.
Install nkx and verify the release

Answers

Source Protection questions

5 topics, 22 answers. Open a topic to see its questions.

Basics

5 questions

What is Source Protection?

It lets you ship software to customers, vendors and developers without handing over the code that makes it valuable. You lock the parts that matter, they run the software as normal, and you keep the off switch.

Is this software IP protection?

Yes. NakodaX protects the source code and proprietary logic that make up your software IP, whether it runs on a vendor's machine, a developer's laptop or a customer's own infrastructure.

Does it protect the whole codebase?

It focuses on the small part that holds your valuable product logic. We rank your files and suggest what to lock, and you decide.

Does NakodaX store our code?

We keep the keys and the licences. Your repository stays with you, and the protected copy goes where you choose to publish it.

What does it cost?

It depends on what you protect and where it runs. Contact us and we will talk you through it.

Control after you ship

4 questions

Can I stop one customer without affecting the others?

Yes. Every customer has their own key. Pause one, end one or swap one, and everyone else carries on.

What happens when a contract ends?

The protected parts stop running at that customer, the next time the software starts or checks in. Nothing needs to be collected or deleted.

Can a pilot expire on its own?

Yes. Give the customer's key an end date and the pilot ends when you said it would.

Can I see who is running my software?

Yes. You see each customer's deployments and when they last checked in, and every key and licence change is on record.

Developers and vendors

3 questions

Can an agency build without reading the secret?

Yes. Developers, agencies and contractors work against stand ins that behave like the real thing. They build and test, and the real code stays locked.

How do our own engineers change the protected code?

They ask for a change session. A second admin approves it, it has an end time, and the code locks again when the work is done.

What changes for our developers?

They keep working in your repository as before. Protection is applied when a release is prepared for a customer or vendor.

Languages and setup

8 questions

Which languages does it support?

Python, JavaScript, TypeScript and SQL today. Java, Go, C#, PHP, Ruby and Rust are planned. Tell us what you build with and it shapes what we add next.

Does it support PHP, Laravel, Java, Go, C#, Ruby or Rust?

Not yet. Java, Go, C#, PHP (including Laravel), Ruby and Rust are planned. We add a date to the Languages table on this page once it is confirmed, so check back or tell us what you build with and it shapes the order.

How does it work with SQL and bundled apps?

The locked parts open just before your build and lock again before anything ships. Python, JavaScript and TypeScript apps that load code as they start open the locked parts from memory instead.

Can we add it to our CI/CD pipeline?

Yes. The nkx command line tool goes around the build step you already run: nkx materialize before it, and nkx rehook after it, so what you ship is locked again. It is a signed single binary you can install with Homebrew or curl.

How does it fit our developers' process?

Developers work against encrypted stand ins day to day. When someone has to change the protected code, they request a change session, a second person approves it, and they unlock, edit, test and reseal it with nkx.

What does a customer install?

A small runtime package, then they start the app as before. You hand them one page with the steps and the key. Developer tools and signature checks are on the developers page.

Does it work with GitHub, GitLab and Bitbucket?

Yes. Pick the repository and the branches to publish. Your repository is left as it is.

Can customers run it offline?

The software checks in with NakodaX when it starts and at regular intervals, so it suits customers who are connected.

Security and AI

2 questions

Where do the keys live?

Every repository has its own key, held by NakodaX and released only to a customer you have approved. Each repository opens with its own key, so the rest of your codebase stays closed.

Can an AI tool read the locked files?

Not without permission. Selected components are not delivered as readable source that a vendor, developer or customer can paste into an AI tool.

Ship the software. Keep the secret.

Try Source Protection free, or tell us what you deploy and where it needs to run and we will show you how it would work.