Zero-Trust Licensing Infrastructure

Secure your software with hardware-locked cryptography.

Stop software piracy, credential leaks, and VM tampering. Shax cryptographically binds licenses to verified machine hardware with sub-15ms global edge validation.

< 14ms
Global Edge Latency
99.99%
Guaranteed SLA Uptime
Argon2id
Zero Plaintext Hash
100%
HWID Lockout Accuracy
Live Engine Sandbox

Test Cryptographic Validation Live

Experience the sub-15ms hardware verification lifecycle directly in your browser. Switch scenarios below to simulate edge checks, machine lockouts, and instant revocations.

shax-crypto-engine :: live sandbox
11ms
HTTP 200 OK
Simulate:
Request SpecPOST /api/v1/licenses/verify

Device hardware matches cryptographic fingerprint in the license enclave.

// Outgoing client payload
{
  "licenseKey": "SHX-PRO-9842-7719-ABCD",
  "hwid": "sha256:d8a2...3f91 (MacBook Pro M3 Max)",
  "appName": "HyperRender Studio v2.4"
}
Algorithm: Argon2id + AES-256Edge PoP: Global Mesh
Verified Payload Response
{
  "valid": true,
  "license": {
    "key": "SHX-PRO-****-****-ABCD",
    "tier": "STUDIO_ENTERPRISE",
    "expiresAt": "2027-01-01T00:00:00Z",
    "devicesBound": 1,
    "maxDevices": 3
  },
  "device": {
    "id": "dev_84f9a0c",
    "name": "MacBook Pro M3 Max",
    "verifiedAt": "2026-11-11T04:39:43.460Z"
  },
  "token": "eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.e30.9f..."
}
Response verified in 11ms with zero plaintext storage.
Zero-Trust Architecture

Machined For High-Stakes Software Security

Engineered for developer tools, desktop executables, AI models, plugins, and game client protections.

Cryptographic HWID

Zero-Trust Hardware Binding

Generate an irreversible cryptographic hash from motherboard UUID, CPU serials, and NIC MAC addresses. Licenses cannot be leaked, cloned, or shared across unauthorized machines.

LICENSE SLOT ALLOCATION (2 MAX)ENFORCING
Workstation-M3Max.local
hwid: 8fa0...c901 • Bound 4d ago
Active
Dev-ThinkPad-Linux
hwid: 31bf...aa40 • Bound 1d ago
Active
Unauthorized VM / Cloud Host
hwid: ff71...2240 • Exceeded Slot Limit
Blocked
Anti-VM Spoofing Filter100% Deterministic
Sub-15ms Revoke

Instant Global Kill-Switch

Revoke any compromised key, chargeback, or leak in real time. The instant a key is flagged, edge nodes lock out all bound devices globally within milliseconds.

SIMULATE REMOTE LOCK:
STATUS: NORMAL. All authorized client licenses active.
Edge Propagation< 15 milliseconds
Argon2id + AES-256

Zero Plaintext Secrets

API keys and secret tokens are cryptographically salted and hashed using Argon2id memory-hard algorithms. Even in the event of a full database leak, your keys remain impossible to reverse.

Hash Algorithm:Argon2id v19
Memory Cost:64 MB RAM-hard
Symmetric Encryption:AES-256-GCM authenticated
Database IntegrityZero Plaintext At Rest
Global Edge PoPs

Sub-15ms Validation at the Edge

Your software boots instantaneously. Validation requests hit our globally distributed edge mesh with sub-millisecond local in-memory lookups, ensuring zero boot lag for your users.

< 14ms
Average Latency
99.99%
System Uptime SLA
0ms
Offline Cache Delay
Distributed ArchitectureAnycast Network Mesh
Native Client SDKs

Integrate with 3 Lines of Code

Drop-in lightweight SDKs for TypeScript, Python, C++, and C# (.NET/Unity). Zero bloated dependencies, built-in offline caching, and automatic hardware fingerprinting.

// npm install shax-license
import { ShaxClient } from 'shax-license';

const client = new ShaxClient({
  applicationId: process.env.SHAX_APP_ID!,
  apiKey: process.env.SHAX_API_KEY!,
  baseUrl: 'https://license.webda.in', // Official default endpoint
});

// 1. Activate on first launch (starts 7-day or 30-day countdown)
const activation = await client.activate(userLicenseKey);
console.log('Bound to hardware!', activation.license.status);

// 2. Validate silently on subsequent requests (fast in-memory cache)
const validation = await client.validate(userLicenseKey);
if (!validation.valid) {
  throw new Error(`Access Denied: License is ${validation.status}`);
}
Zero external heavy dependenciesOffline cached fallback supported
How It Works

From License Minting to Edge Lock

A streamlined end-to-end cryptographic lifecycle designed to protect software without adding friction for paying customers.

01
Step 1: Generation

Mint & Webhook Automation

Issue cryptographic keys via Dashboard, REST API, or automated Stripe/LemonSqueezy webhooks.

Enclave SpecFormat: SHX-TIER-XXXX-XXXX
02
Step 2: Hardware Fingerprint

Cryptographic HWID Binding

On first launch, the native SDK queries motherboard & hardware UUIDs, hashes them locally, and locks the key.

Enclave SpecArgon2id + SHA-256 Hash
03
Step 3: Verification

Sub-15ms Edge Validation

Every launch queries our globally distributed edge mesh. Cryptographic verification completes in under 15ms.

Enclave SpecSigned Ephemeral Token
Production Ready • Instant Setup

Ready to secure your software distribution?

Join hundreds of software authors locking down their executables with military-grade hardware binding and zero-plaintext licensing.