The Cosmian team is thrilled to welcome David Pointcheval as our Chief Scientific Officer. A warm welcome to him!

A verifiable confidential virtual machine to guarantee your environment integrity – hardware & software.

Cosmian vm is the only plug-and-play virtual machine that guarantees the integrity and security of your environment, free from deployment complexity.

Unique cryptographic integrity check

Cosmian vm guarantees that your cloud provider maintains the integrity and security of your VM. Continuous monitoring and snapshot verification guarantee that no unauthorized changes have occurred.

Operate in a familiar environment

Cosmian vm is a hardened Linux distribution, so it integrates seamlessly with your existing tools and workflows, requiring no additional learning curve.

Streamline experience

Cosmian vm enables a consistent and streamlined deployment experience across all hardware and cloud providers, ensuring ease and efficiency for administrators.

Save time

Cosmian vm enables you to automate verification processes, saving you time and reducing manual intervention.

What’s in Cosmian vm?

Environment verifiability

Software installation and snapshot verification
Install any Linux software and verify smooth operation before snapshotting. The snapshot, generated by the onboard Service Agent, captures hardware, boot sequence, and installed software with unique signatures.

Secured deployment in the cloud
Once deployed in the cloud, your machine runs securely, enabling users to access and utilize software with confidence.

Continuous monitoring and verification
Administrators can check boot, running software integrity, and absence of unauthorized changes, maintaining machine state consistency.

What’s in Cosmian vm?

Leveraging Confidential Computing

Memory encryption
Operating within a Trusted Execution Environment (TEE) and employing encrypted memory, our hardened VM ensures confidentiality and adds an extra layer of protection, safeguarding sensitive data even if physical memory is compromised.

High performance
Get high performance with less than 5% overload for optimum confidential computing efficiency.

Advanced compatibility
Compatible with AMD SEV-SNP, Intel TDX, TPM, and vTPM, ensuring broad hardware compatibility. Supports all platforms and will soon include confidential GPUs.

Considering running your sensitive data and applications to a cloud provider but worried about security risks? Look no further than Cosmian vm.

How do you set up & run Cosmian vm?

Machine and application set up

Application running

Install
Cosmian vm

on-premise or in a Cosmian vm in the cloud.

Install application dependencies

standard software installation time

Snapshot
Cosmian vm

3 to 4 minutes to capture a 20MB snapshot

Perform integrity checks over time

to verify the running code and infrastructure

Top use cases using Cosmian vm

Third-party SaaS

Keep your data and applications secure when running in cloud environments. Cloud admins won’t learn anything from your data, nor how you use them.


Confidential AI

Deploy, query and fine-tune AI models in complete confidentiality, applying 100% encryption with no impact on performance.

Workplace applications

Secure your data when used with external, third-party business applications such as Google Workspace, and Microsoft Office.

— There are no limits

Find us on
the Marketplaces

Regain control now on your data and applications in the cloud, subscribe to our cloud marketplaces offering on AWS, Azure and Google Cloud.

Cosmian makes no tracking for advertising and does not collect any personal data. Cookies are used for statistical or operational purposes, as well as for analysis, allowing for continuous improvement of the website. Cosmian uses the Matomo Analytics tool, an audience measurement solution that uses cookies with a configuration that complies with the data protection legislation and the recommendations of the CNIL (Commission Nationale de l'Informatique et des Libertés). This configuration allows to anonymise visitor's data and to limit the storage period of this data to a maximum of 13 months. With this configuration, the prior consent to the deposit of Matomo Analytics cookies is not required. However, you can still choose not to allow these cookies by clicking below or at any time by consulting our Privacy Policy.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.