Tigress review
A highly configurable C obfuscator for advanced source transformation and software protection.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Tigress is a command-line, source-to-source obfuscator for C programs. It transforms C source into new C source through configurable sequences of virtualization, just-in-time compilation, control-flow, data, function, integrity, and anti-analysis transformations. The project is intended for academics, students, researchers, and practitioners studying or applying software protection. Its supported targets include C99 source across Linux, Darwin, Android, Windows, WebAssembly, Intel, and ARM environments, with GCC, Clang, Emscripten, and cl listed for build support.
The main strength is transformation depth. Tigress can virtualize code into specialized interpreters, generate code at runtime, modify code dynamically, flatten control flow, create opaque predicates, and encode string and integer literals. It also supports function splitting, merging, inlining, and argument randomization. Integrity checking and tamper-response plugins extend the focus beyond code concealment, while anti-alias, anti-taint, and anti-branch analysis transformations address additional analysis paths. This breadth makes Tigress suitable for projects that need configurable C transformations rather than a narrow string-protection utility.
Tigress is a self-hosted tool with a command-line build integration model, so adoption centers on source transformation and build-pipeline expertise rather than a graphical workflow. Research use is available without a license, while commercial deployment requires contacting the University of Arizona for licensing. It is a strong fit for advanced C protection work, academic research, and projects targeting native or WebAssembly environments. Teams seeking a managed service, public commercial pricing, or protection for languages other than C should consider a different category option.
Tigress pros and cons
- Where it wins
- Virtualization, runtime code generation, and dynamic code modification
- Control-flow, literal-encoding, function, and anti-analysis transformations
- Supports Linux, Darwin, Android, Windows, WebAssembly, Intel, and ARM
- Where it doesn't
- Commercial deployment requires contacting the University of Arizona
- Command-line, self-hosted workflow requires technical build integration
- Focused on C source rather than a broad set of programming languages
Tigress fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update