Legal & disclaimer

Intended use

xollvm is intended for legitimate software-protection use cases — IP protection, anti-tamper research, academic evaluation, and CTFs with permission.

Do not misuse

Do not use xollvm for malware, unauthorized access, or to violate laws or terms of service. You are responsible for compliance with all applicable laws. Obfuscating code does not make its use lawful.

Obfuscation is not a security boundary

Treat obfuscation as one layer in a broader defensive strategy — alongside hardening, anti-tamper, secure update, and key management. It raises the cost and effort of reverse engineering; it does not make code unbreakable, and it does not protect secrets that must ultimately run on hardware the attacker controls.

The resistance figures in this documentation (e.g. VM devirtualization resistance, the resilience bench) are directional results against specific automated attacks. They indicate which configurations hold up better, not that any configuration is unbreakable.

Trademark

xollvm is an independent project. It is not affiliated with, sponsored by, or endorsed by the LLVM Foundation or the LLVM project. LLVM is a trademark of the LLVM Foundation; it is used here only to describe the compiler infrastructure xollvm builds upon, in accordance with the LLVM Foundation trademark policy.

License

xollvm is licensed under Apache-2.0 WITH LLVM-exception — the same license as LLVM itself. See the LICENSE file in the repository.