Cosmian VM | Cosmian

A verifiable confidential virtual machine to guarantee your environment integrity – hardware & software.

Cosmian vm is the only plug-and-play virtual machine that guarantees the integrity and security of your environment, free from deployment complexity.

Download our product sheet

Learn More

Unique cryptographic integrity check

Cosmian vm guarantees that your cloud provider maintains the integrity and security of your VM. Continuous monitoring and snapshot verification guarantee that no unauthorized changes have occurred.

Operate in a familiar environment

Cosmian vm is a hardened Linux distribution, so it integrates seamlessly with your existing tools and workflows, requiring no additional learning curve.

Streamline experience

Cosmian vm enables a consistent and streamlined deployment experience across all hardware and cloud providers, ensuring ease and efficiency for administrators.

Save time

Cosmian vm enables you to automate verification processes, saving you time and reducing manual intervention.

What’s in Cosmian vm?

Environment verifiability

Software installation and snapshot verification
Install any Linux software and verify smooth operation before snapshotting. The snapshot, generated by the onboard Service Agent, captures hardware, boot sequence, and installed software with unique signatures.

Secured deployment in the cloud
Once deployed in the cloud, your machine runs securely, enabling users to access and utilize software with confidence.

Continuous monitoring and verification
Administrators can check boot, running software integrity, and absence of unauthorized changes, maintaining machine state consistency.

What’s in Cosmian vm?

Leveraging Confidential Computing

Memory encryption
Operating within a Trusted Execution Environment (TEE) and employing encrypted memory, our hardened VM ensures confidentiality and adds an extra layer of protection, safeguarding sensitive data even if physical memory is compromised.

High performance
Get high performance with less than 5% overload for optimum confidential computing efficiency.

Advanced compatibility
Compatible with AMD SEV-SNP, Intel TDX, TPM, and vTPM, ensuring broad hardware compatibility. Supports all platforms and will soon include confidential GPUs.