v1.0 · Live

Lua, shipped
without the leak.

An opinionated delivery layer for Lua creators — bytecode VM, per-user keys, hardware binding, and a Discord console. You upload the script, we hand out one URL.

Trusted runtime
Cloudflare edge·Signed handshake·HWID bound
loader · lua
// one project, one endpoint
$ luapot deploy \
   --project "aurora" \
   --source ./main.lua

✓ compiled → vm bytecode
✓ issued  → project endpoint

// share one URL with buyers
Handshake
287ms
Ticket TTL
60s
HWID lock
sticky
§ join the build
Drop into the Luapot Discord
Get help, ship feedback, see deploys live. Free to join.
Join now →
vm bytecode/per-user keys/discord bot/edge tls/hwid binding/session revoke/2fa admin/audit log/
vm bytecode/per-user keys/discord bot/edge tls/hwid binding/session revoke/2fa admin/audit log/
01
VM-locked
Deployed scripts
02
≈ 290ms
Median handshake
03
Cloudflare
Edge provider
04
Sticky
Session binding
§ 02 — Capabilities

Built for creators who ship, not babysit.

Every primitive you'd otherwise build in a weekend, bolted in and versioned. No glue code. No cron jobs.

  • 01
    Bytecode obfuscation

    Sources compiled to a VM — strings encrypted, control flow flattened, varargs preserved across wrapping.

  • 02
    Per-Discord-user keys

    One key per user per project. Issued on command, idempotent, revocable in a single click.

  • 03
    Hardware binding

    Keys bind to the executor HWID on first exec. Owner-configurable reset budget with server-enforced cap.

  • 04
    Signed loadstring

    A single URL, signed handshake, short-lived session tickets, rotating per-execution payload.

  • 05
    Discord control panel

    Slash commands, embedded buttons, autocomplete, strict per-guild isolation. Buyers self-serve.

  • 06
    Live telemetry

    Real-time executions, denial reasons, active sessions. Revoke any live session from the console.

§ 03 — Workflow

From paste to production in 3 moves.

Begin →
  1. 01AUTH
    Sign in with Discord

    Your workspace boots the instant OAuth resolves. Nothing to verify, nothing to confirm.

  2. 02UPLOAD
    Drop your script

    Paste Lua, press build. Obfuscator returns bytecode, we return a loader URL.

  3. 03SHIP
    Share the one-liner

    Drop it in your server. Buyers redeem a key through the bot, HWID locks, they're running.

§ 04 — Begin

One sign-in. One URL.
Zero leaked source.