Astral Cloud

Licensing & protection for your client

Hardware-locked license keys, Discord automation, live status, and a team you can grow — for your Windows client. One SDK, one dashboard, zero kernel drivers.

HWID + IP locking ChaCha20 vault C# & C++ SDKs
astral.keys — issue
$astral keys new --plan pro --hwid-lock
→ generating key…
ASTRAL-8F2K-QW3R-7T9Z
✓ bound to device fingerprint
✓ sealed in ChaCha20 vault
Protected & licensed1 key · HWID locked · vault sealed
HWID LockChaCha20 VaultC# SDKC++ SDKDiscord BotREST API
Protection suite

Everything your client needs, in one place

License keys, hardware locking, Discord automation, live status, and a team — coordinated from a single dashboard.

License key management

Generate, extend, expire, and ban keys in bulk. Set durations from days to lifetime, and track every activation in real time.

HWID & IP locking

Bind each key to one device fingerprint (CPU, GPU, motherboard). Optional IP lock, minor-hardware-change tolerance, and cooldown-gated resets.

Discord automation

Issue keys, check a user's status, and ban devices straight from your server. The bot mirrors the panel, so moderation happens where your community is.

Team & projects

Your project is yours alone — until you invite someone. Add people with roles, and everyone works from the same keys, users, and status.

Live status & uptime

A public status page with uptime bars and incident notices, so your users always know whether auth is healthy before they blame their key.

In-app chat & notices

Push announcements and messages to everyone running your client. Ship a hotfix note or a maintenance heads-up without touching the binary.

How it works

Four steps from build to protected

Wire the SDK once. Everything after that is a dashboard.

01

Create your project

Sign up and name your project. You get an isolated workspace only you can see.

02

Add your keys

Generate license keys and set the duration plus HWID / IP lock. Bulk-create hundreds at once.

03

Ship your client

Drop in the SDK and call Auth.Login(). Key validation and hardware binding happen at launch.

04

Manage from the cloud

Keys, bans, team, chat, and uptime — all live in one panel and the Discord bot.

Architecture

The pieces that keep it honest

A hardened auth API, thin SDKs, a Discord bot, and the cloud panel — working together.

1

Auth API

Validates keys, binds HWID fingerprints, issues sessions, and logs every event. Rate-limited and audit-backed.

2

SDK (C# / C++)

Login, register, and key-redeem in a few lines. Sessions and HWID checks run before your client's main loop.

3

Discord bot

Key issuance, status lookups, and device bans from your server — same permissions model as the panel.

4

Cloud panel

Keys, users, team members, chat, and the public status page. Real-time, and shared with anyone you invite.

Security

Built to resist tampering and abuse

No system is unbreakable — anyone who tells you otherwise is selling something. What we can promise is that every layer below is real, running right now, and gets tightened continuously. We tell you what we use — the how stays under the hood.

ChaCha20-Poly1305 vault

License keys sit in an authenticated, encrypted vault.

Hardware-locked licensing

Every key is bound to one device fingerprint (HWID).

bcrypt-hashed credentials

Passwords are salted and hashed — never stored in the clear.

Signed JWT sessions

Short-lived, signed tokens gate every request.

Two-factor (TOTP)

Optional authenticator-based 2FA on accounts.

Rate limiting & brute-force guards

Abusive traffic is throttled and locked out automatically.

Full audit logging

Every sensitive action is recorded and attributable.

TLS 1.3 & HSTS

Encrypted in transit, everywhere, always.

Per-project isolation

Every project's keys and users are siloed — nothing leaks across accounts.

Self-serve HWID resets

Revoke a device binding instantly, on any plan, no ticket required.

Validated migrations

Importing keys from another system rejects duplicates and malformed entries.

Throttled public endpoints

The API your license clients talk to is separately rate-limited against brute-force attempts.

Owner & customer separation

Platform administration and customer accounts run on fully separate systems.

Short-lived session tokens

Sessions expire in minutes, not days — a stolen token has a short shelf life.

Continuous session validation

Active sessions are silently re-checked in the background the whole time your app runs.

Replay-attack resistant

Every request carries a one-time marker — captured traffic can't simply be re-sent.

Hashed device fingerprints

Device identifiers are never stored in a reversible form.

Bounded reset limits

Device resets are capped per key, tuned per plan, so resets can't be farmed.

// we name what protects you — we don't publish how it's wired

Pricing

Simple plans that scale with you

Every plan includes license keys, HWID locking, and the Discord bot. Pay yearly and get two months free.

Monthly Yearly 2 months free

Seller

For solo developers shipping a few clients.

$50 /yr
Includes
  • Up to 6 projects
  • License keys & app users
  • HWID resets, any time
  • Import keys from another key system
  • Generate up to 50 keys per batch
Get started
MOST POPULAR

Pro

For studios that need the full platform.

$100 /yr
Everything in Seller, plus
  • Up to 20 projects
  • Custom license key prefix
  • Generate up to 200 keys per batch
  • Faster support response
Get started

Pro Plus

For teams running many clients at scale.

$200 /yr
Everything in Pro, plus
  • Unlimited projects
  • Generate up to 500 keys per batch
  • Priority support
Get started

Enterprise

Custom volume, custom terms.

Custom
Everything in Pro Plus, plus
  • Custom project & key volume
  • Dedicated support & SLA
  • Custom contract terms
Contact sales

All paid plans available monthly or yearly. Prices in USD.

FAQ

Questions, answered

Is my project private?

Yes. Every account gets an isolated project only you can see. Nobody has access until you invite them — and you decide their role.

How do I add people to my project?

From your dashboard, use “Add user” to invite someone by email and pick a role. They join your project instantly and share your keys, users, and status.

Do you need a kernel driver?

No. Protection runs in user space with hardware-locked licensing and a ChaCha20 key vault — no drivers to sign or ship.

Which languages does the SDK support?

C# and C++ today, plus a REST API you can call from anything. Login, register, and key redemption are a few lines.

Can I change plans later?

Any time. Upgrade, downgrade, or switch between monthly and yearly from your dashboard — your keys and users stay put.