VM Debug Protection

Section

Pro

The vmDebugProtection option adds anti-debugging measures to the VM runtime, making it significantly harder to reverse-engineer your protected code.

With browserEnvironment.hosting set to 'remote' (v7.14.0+), Debug Protection also binds the build to being served from a remote host: a copy lifted and run in a local setup is treated as a runtime-environment mismatch, and the automation defenses react.

CSP considerations: For best results, allow unsafe-eval in your Content Security Policy. Without it, a less effective fallback is used automatically. The browser-no-eval target uses the fallback by default.

Browser extensions: If your code runs in a browser extension with a restrictive CSP, use the browser-no-eval target for best compatibility.

VM Self Defending

VM Domain Lock