Capabilities
What Phantom does, not how it does it.
A complete list of what runs on every build. Implementation details stay in the engine so they can't be reverse-engineered from documentation.
Bytecode & naming
- Adversarial identifier renaming with configurable legibility
- Homoglyph substitution across symbol names
- Debug metadata and line-number stripping
- Constant and literal masking
Control flow protection
- Cross-method control-flow grafting
- Junk instruction and dead-code injection
- Comparison operator substitution
- Stack frame scrambling
- Decompiler-targeted bytecode deformation
String & data protection
- String constant encryption
- Concat expression expansion
- Late-stage literal scrubbing
- Semantic noise injection
Call & reference indirection
- Method and field call indirection
- External API call relaying
- Reflective dispatch rewriting
- InvokeDynamic-based private call sites
- MethodHandle laundering
Structural obfuscation
- Generic type erasure
- Cross-class logic fragmentation
- API boundary thinning
- Sensitive pipeline splitting
- Adversarial comment injection
Native & runtime protection
- Selective native virtualization bridge
- Runtime integrity verification and tamper response
- Consent-gated anti-debug and anti-analysis signals
- Fail-closed enforcement on compromised environments
Licensing & identity
- Discord-linked entitlements
- HWID-bound activation
- Remote license and auth verification
- Key rotation and recovery
Delivery & operations
- Automated Gumroad fulfillment
- Build reports and mapping exports
- Stack trace deobfuscation for customer support
- Release packaging and shrinking
Team & account controls
- Multi-seat team access
- Role-based operator permissions
- Activation and audit history
- Sales and usage analytics