Roblox Luau protection

Your Luau,
sealed in limbo.

LimboAuth obfuscates your Roblox scripts, seals the result in a private vault, and tells you exactly who ran them. Executor, username, place id, and timestamp, every single time.

Encrypted at restEnvironment guardOne loader line
vault / entrysealed

aim_assist.luau

id 7kq2mz9x4t8rv3hnpw

Moonveil

local a,b,c=...;return(function(...)

local x=bit32.bxor(0x5f3a,0x11c7)

7a03c6f9b2e4d81a5f07c3e9d2b6a4f8

0192f4e8a7b2c9d1e5a3f07c6b8d2e41

end)(...)

Runs

1,284

Executors

37

Guard

On

Built for script authors

Everything a script needs to survive the wild

Protection, delivery, and telemetry in one place. No spreadsheets, no guessing, no mystery numbers.

Three engines, one flow

Send the same source through Moonveil, Goofyscator, or no obfuscator at all. Switch engines per script whenever you want.

Sealed at rest

Obfuscated output is sealed before it touches storage. Your raw source stays encrypted too, so you can edit and re-seal later.

Runtime verification

The loader checks that it is talking to a live Roblox client and a real executor before a single line of your script runs.

Honest analytics

Real execution counts pulled from your own logs. No inflated numbers, no vanity metrics, just what actually happened.

Audit trail

Every run records the executor, the Roblox username, the place id, and the script that was loaded.

Bring your own keys

Plug in your own Moonveil and Goofyscator keys in Settings. They are encrypted before they are stored.

Three steps

From raw source to a vault link

You stay in control of the engine and the source. LimboAuth handles the rest and keeps a record of what happened after.

loadstring(game:HttpGet(".../api/ns/v1/18-char-id.luau"))()
  1. 1

    Post your script

    Name it, choose an engine, paste your raw Luau. LimboAuth runs the obfuscation for you.

  2. 2

    We harden it

    The output is sealed and filed under an 18 character vault id. Your plaintext never leaves the vault.

  3. 3

    Share one line

    Your users run a single loader line. You get execution counts and a full audit trail in return.

18

character vault ids

3

obfuscation engines

20

Goofyscator runs per month

0

plaintext scripts served

Questions

Straight answers

Can I still edit a script after posting it?+

Yes. Open any entry in Nil Storage, change the name, switch the obfuscator, or rewrite the source. Saving re-obfuscates and re-seals it under the same vault id.

Do I need my own obfuscator keys?+

No. A platform key is used when one is configured. If you want your own quota and your own settings, add your keys in Settings.

Why does a vault link open an access denied page?+

Vault links are meant for the loader, not for browsers. Opening one directly is blocked on purpose, and the page you see is the expected result.

Is the execution data real?+

Every number on the dashboard is computed from your own audit logs. If nothing has run yet, the dashboard says so instead of showing a fake chart.

Put your scripts in limbo

Create an account, post your first script, and watch the audit trail fill up. It takes less than a minute.