From $2/vCPU
SaaS BYOC Enabler • 1-Click Zero-Trust Sovereign Software Delivery & TEE Runtime

Absolute Customer Data Sovereignty.
100% Vendor Intellectual Property Protection.

Distribute proprietary enterprise software, compiled binaries, core computational algorithms, database engines, and AI models directly into customer-owned cloud (BYOC) and affordable VPS environments with sovereign multi-tier license governance. Map commercial SKU tiers, atomic concurrency quotas (CAS), and modular features directly into silicon TEEs (AWS Nitro, AMD SEV-SNP, Intel TDX)—keeping vendor intellectual property 100% sealed from reverse engineering while enterprise customers retain absolute, uncompromising data sovereignty.

Explore Pricing & TCO Calculator Top 10 Competitor Matrix
Entry License: $2/vCPU/mo (Onidel TCO From ~$6.50/mo)
AMD SEV-SNP & Intel TDX Hardware Attestation
Multi-Tier SKU License Binding Engine
Atomic CAS Concurrency Quotas
Tri-Party Custody Consensus (HPKE RFC 9180)
PRIVATE DEPLOYMENT
Software vendor

Your code & license policy

Protected runtime

Hardware-isolated execution

Customer infrastructure

Private cloud · On-premise · VPS

Code stays protected. Data stays local.

Explore the runtime demo

ISOLATION: HARDWARE SILICON ENFORCED
root@customer-vps:~# gdb --pid $(pgrep vastarshield-node)
[SECURITY ERROR] PTRACE_ATTACH failed: Operation not permitted (Memory Enclave Locked)
root@customer-vps:~# cat /dev/shm/runtime_payload.bin | head -c 32
f8 4a 12 e9 88 21 01 cc ae 41 19 9a 00 88 12 ff 3a 99 44 bc 11 02 aa 39 ... [CIPHERTEXT CHUNK ONLY]
root@customer-vps:~# cat /proc/sys/kernel/random/entropy_avail
4096 (Hardware RNG Active)
STATUS OBSERVED: Local root host administrator cannot dump RAM or extract vendor proprietary binary!
[SECURITY-WATCHDOG] Listening on isolated VSOCK Channel cid=3, port=5007 ...
[ATTESTATION] Harvesting hardware report via /dev/sev-guest (1184-byte ECDSA P-384) ...
[VERIFIER OK] AMD KDS Root CA verified. Nonce freshness valid. PCR bindings intact.
[LEASE FENCING] Active lease token verified: epoch=1042 | TTL=60s (Next renewal at T-12s)
[WORKFLOW SLOT GUARD] Atomic CAS fetch_update slots=2/25 (Within licensed capacity)
[SUPERVISOR BOUNDARY] Watchdog acts with zero-knowledge. Application business logic is hermetically sealed.
[SILICON-ENCLAVE] Received Content Encryption Key (CEK) via 3-Owner HPKE Envelope (RFC 9180) ...
[DECRYPTOR] Reconstructing 4 MiB encrypted chunks directly in isolated RAM (memfd_create) ...
[IN-MEMORY EXECUTION] Zero plaintext bytes written to host disk storage. Zero leaks in swap.
[FEATURE GATING] RAM Active Flags: ["core_compute", "standard_api", "batch_pipeline", "vector_simd"]
[READY] Proprietary Application Serving High-Throughput Production Traffic at Local VPC Latency!
Market Comparative Analysis

Resolving the Enterprise Software Distribution Paradox

Traditional SaaS and conventional on-premise models force dangerous compromises between customer data privacy and vendor intellectual property protection.

Swipe horizontally to view comparison columns →
Operational Metric Pure Cloud SaaS Traditional On-Premises / VM VastarShield BYOC Confidential Computing
Customer Data Sovereignty Low

Private data is sent to vendor cloud over public internet.

 High

Data stays within customer facilities.

 Absolute (100% Local)

Data never leaves customer's private VPC/VPS memory.
Vendor IP Protection (Binaries & Algorithms) High

Code resides securely on vendor's internal cloud servers.

 Zero

Binaries handed over; root admin can reverse engineer, debug (gdb), or decompile code.

 Absolute (100% Sealed)

Binaries execute strictly in hardware-isolated TEE RAM (memfd_create).
License Enforcement & Concurrency Cap Software Only

Relies on external API rate-limiting.

 Weak

License dongles or files can be cracked or patched by root.

 Hardware-Enforced

Multi-tier SKU mapping with atomic CAS memory semaphores inside the enclave.
Infrastructure Cloud Burden Very High

Vendor incurs massive compute & GPU infrastructure costs.

 High

Customer purchases expensive dedicated hardware appliances.

 Optimal

Customer provides existing cloud/VPS quota; Zero server costs for Vendor.
Enterprise Sales Cycle

Sluggish (6–18 months) blocked by complex legal data privacy audits.

Fast for customer, but vendor refuses to sell proprietary algorithms.

Frictionless Enterprise Sales: Instant regulatory clearance (GDPR, HIPAA, PDP).
Armored Silicon Security Capabilities

Hardware TEE Protection & Cryptographic Memory Isolation

Total execution isolation of proprietary applications inside encrypted silicon enclave memory without data exposure to the host, vendor, or third parties.

Sovereign Isolation & In-Memory RAM Encryption

Hermetic execution boundary where compiled binaries, core algorithms, and proprietary applications run purely inside encrypted RAM (memfd_create). 4 MiB binary chunks decrypt directly within hardware silicon enclave memory (AMD SEV-SNP, Intel TDX, AWS Nitro) without writing 1 byte of plaintext to host storage.

* Customer host root administrators and external observers are completely blocked from application memory.

Hardware Integrity & Real-Time License Governance

Autonomous security monitoring inside the TEE enclave harvesting physical chip attestation evidence (/dev/sev-guest, /dev/nsm, /dev/tdx-guest), verifying measured boot integrity, and enforcing license leases (60-second TTL) with anti-rollback epoch fencing and atomic CAS vCPU slot limits.

* License governance operates zero-knowledge with zero access to proprietary binary code, business secrets, or operational application data.

Integrated Cryptographic Protection Lifecycle

Guarantees environment initialization and production execution remain sealed against unauthorized inspection:

Stage 1

Isolated In-Memory Initialization

Executes environment configuration, local database schema migrations, and dependency setup securely inside encrypted memory isolation.

Silicon Integrity Verification Automated Cryptographic Authority
Stage 2

Sovereign In-Memory Runtime

Content Encryption Keys (CEK) are released only after hardware integrity and silicon attestation are cryptographically verified. The application runs at full capacity serving production traffic with zero plaintext on disk.

Triple-Plane Sovereignty Architecture

Clean Decoupling: Public Marketplace, Vendor Sovereign Portal, & Private Delivery Core

VastarShield strictly decouples the public discovery interface, the sovereign vendor business console, and the private encrypted streaming engine. Public authentication only routes cryptographic authority (tokens & key release permits), while the chunk delivery daemon operates on isolated backend networks completely private from unauthorized access.

VastarShield ConsolePreview
Public Hub Marketplace Surface Open Public Discovery (Zero Login Required)
Public Catalog & 1-Click BYOC

The self-service discovery surface where enterprise customers, DevOps engineers, and buyers discover silicon-verified sovereign software before initiating deployment into their own cloud VPCs.

Surface 1

Silicon-Verified Software Catalog

Verified proprietary binary releases with reproducible build verification and TEE badges (AMD SEV-SNP, AWS Nitro, Intel TDX).

Surface 2

TEE Compatibility & Cloud Matrix

Automatic cloud instance detection: AWS c7g / c6g (Graviton), Azure DCasv5, GCP Confidential VM, and Onidel Sovereign VPS.

Surface 3

Transparent SKU & Pricing Curve Card

Structured curve cost display ($2 Entry, $5 Standard, $8 Performance, $10 Enterprise) with atomic hardware slot caps N=2 to N=32.

Surface 4

1-Click BYOC Deployment Flow

Self-service deployment intent checkout to customer's VPC, generating signed connection tokens without manual vendor bottleneck.

VastarShield · Public Hub
VastarShield ConsolePreview
Vendor Sovereign Portal Surface Strong Authentication (RFC 6238 TOTP + WebAuthn)
Business Control & IP Release

The sovereign console for Software Publishers / ISVs to ingest releases, slice encrypted 4 MiB AES-256-GCM chunks, set value-based pricing curves, and release cryptographic authority (Share 1).

Vendor Module 1

Zero-Knowledge Ingestion & Packager

Binaries never touch public servers; the local vastarshield packager CLI encrypts binaries and registers golden PCR0 / launch digests.

Vendor Module 2

Multi-Tier License & Concurrency Studio

Configure commercial SKUs (Trial, Standard, Enterprise) bound directly to enclave hardware via RuntimeLicenseBinding v1.

Vendor Module 3

Key Share 1 Custody Release Authority

Vendor holds exclusive sovereignty to release Share 1 (vendor key) when customer invoices or PO approvals are validated.

Vendor Module 4

Customer Enclave Node Telemetry

Monitor live execution health across customer deployments: lease epoch status, hardware attestation validity, and active slot usage.

VastarShield · Vendor Portal
VastarShield ConsolePreview
Private Execution & Attestation Core Fully Isolated in Private VPC (Zero UI / Machine-to-Machine)
Isolated Data Plane

High-performance backend delivery daemon completely segregated from web frontends. Handles silicon cryptographic attestation handshakes and encrypted chunk streaming directly to customer enclave RAM.

Core Engine 1

Strict Hardware Attestation Verification

Validates AMD KDS VCEK certificates or AWS Nitro COSE signatures directly on hardware. Enforces strict fail-closed rejection for Class H1.

Core Engine 2

In-Memory Chunk Streaming (Zero Host Disk)

4 MiB AES-256-GCM chunks stream over mutual TEE sessions straight to customer MicroVM RAM without ever touching hypervisor disks.

Core Engine 3

KMS Ephemeral In-Enclave Decryption

Content Encryption Keys (CEK) are reconstructed solely inside customer enclave RAM via RFC 9180 HPKE consensus. No operator can intercept.

Core Engine 4

Isolated Subdomain Edge Routing

Streaming traffic is routed via hardened edge subdomains (e.g. registry.vastar.id), while compute engines and DBs remain in private VPCs.

VastarShield · Private Execution
Independent Entitlement Engine

Effortless Multi-Tier License Management (SKU Mapping)

Software vendors with rich product catalogs, varied license editions (Starter, Professional, Enterprise), and modular add-ons have a crystal-clear path to bind SKU entitlements directly into hardware TEE silicon contracts—with zero payment processor lock-in.

1. Product Catalog & SKU Mapping

Map commercial product catalogs and SKUs (Starter, Pro, Enterprise, Add-on) into declarative RuntimeLicenseBinding v1 contracts. Each edition binds product_id, edition_id, and capability matrices without code changes.

2. Atomic CAS Concurrency Quotas

Enforce concurrent execution limits (e.g. Max N=2 slots for Starter vs N=50 for Enterprise) directly in enclave RAM using atomic fetch_update semaphores (WorkflowSlotGuard), completely immune to host race conditions.

3. Dynamic Feature-Flag Gating in RAM

Dynamic capability vectors (e.g. ["batch_processing", "vector_acceleration"]) are encrypted within the SignedLeaseToken v2. Features can be activated or revoked on the fly without re-releasing application binaries.

4. In-Place Hot Tier Transition

Tier upgrades from Standard to Enterprise are coordinated in-place via the TierTransitionCoordinator. Customers enjoy instant upgrades with zero downtime, zero VM reboots, and zero privilege escalation loopholes.

5. Anti-Rollback & Epoch Fencing

License leases are strictly bounded (TTL 60s) with monotonic fencing_epoch counters. Customers are blocked from freezing virtual machines, rolling back system clocks, or replaying stale snapshot sessions.

6. Zero-Payment Dependency

VastarShield never touches payments, cards, or billing. Commercial transactions remain 100% private in the Vendor's own portal (Stripe, B2B invoices). Vendors independently issue cryptographically signed Ed25519 grants.

License mapping examples
SKU Mapping Simulator

From Vendor Commercial Catalog to Enclave Silicon Contract

Click a commercial tier below to observe how vendor SKU definitions are mapped into cryptographic RuntimeLicenseBinding v1 parameters enforced inside TEE RAM:

Vendor Commercial Catalog (SKU: STARTER-V1)

Designed for department pilots or evaluation. Limits execution to basic computational capacity with core features enabled.

Product ID enterprise-core-engine
Edition / Tier ID edition_starter_standard
Concurrency Quota (CAS) N = 2 Concurrent Slots (fetch_update)
Feature Flags (RAM) ["core_compute", "standard_api"]
Fencing Epoch / TTL 60-Second Lease (Monotonic Counter)
In-Enclave Cryptographic Enforcement:

Binary executes inside TEE RAM (Onidel SEV-SNP or AWS Nitro). Out-of-package capabilities are disabled in memory. Attempting a 3rd concurrent process is immediately held by atomic WorkflowSlotGuard without requiring cloud roundtrips.

Hot-Upgrade Ready: Transitions to Professional instantly without instance reboots when renewal tokens are received.

Vendor Commercial Catalog (SKU: PRO-SCALE-V1)

Tailored for high-scale commercial production with compute acceleration and multi-slot parallel pipelines.

Product ID enterprise-core-engine
Edition / Tier ID edition_professional_scale
Concurrency Quota (CAS) N = 25 Concurrent Slots (Atomic Semaphore)
Feature Flags (RAM) ["core_compute", "standard_api", "batch_pipeline", "vector_simd"]
Fencing Epoch / TTL 60-Second Lease (Monotonic Counter)
In-Enclave Cryptographic Enforcement:

Acceleration flags vector_simd and batch_pipeline are unlocked directly in encrypted RAM. Quota of 25 slots is enforced hermetically; extra requests queue deterministically without crashes.

Zero-Payment Dependency: Vendor verifies payments in their own billing stack, signing grants via Ed25519 private keys.

Vendor Commercial Catalog (SKU: ENTERPRISE-SOVEREIGN)

Built for financial institutions, banking, and mission-critical workloads. Features cryptographic audit trails and multi-node mesh quotas.

Product ID enterprise-core-engine
Edition / Tier ID edition_enterprise_sovereign
Concurrency Quota (CAS) N = Unlimited / Scalable Multi-Node
Feature Flags (RAM) ["all_features", "realtime_audit", "hsm_custody", "multi_node_mesh"]
Hardware Policy Binding PCR0/PCR1/PCR2 Strict Attestation Digest
In-Enclave Cryptographic Enforcement:

Unlocks full enterprise suites, customer HSM custody integration, and immutable cryptographic audit logs. Licenses strictly bind to silicon firmware measurements to prevent unauthorized VM cloning.

Contract Sovereignty: Locked by Tri-Party Custody Consensus (Vendor, Customer, Vastar).
Agnostic Confidential Computing Infrastructure

Multi-Target Node Grid: From Hyperscalers to Affordable VPS

VastarShield provides absolute freedom of execution placement: run on massive hyperscaler infrastructures or drastically slash operational costs using affordable Confidential VPS providers powered by AMD SEV-SNP and Intel TDX.

OnidelOnidel

Onidel — Primary Affordable Confidential VPS

From ~$4.50/month

Onidel provides Premium VPS instances with AMD EPYC processors equipped with genuine AMD SEV-SNP at zero extra feature surcharge. Starting from a 1 vCPU option at ~$4.50/month to multi-core tiers, you can run vastarshield-node with full silicon protection for a total BYOC solution cost starting from just ~$6.50/month.

Save Up to 96%
Compared to Hyperscaler Compute Instances
Measured Direct Boot & UKI

Supports custom Unified Kernel Image (UKI) upload with measured OVMF firmware, ensuring guest OS integrity before keys are decrypted.

Genuine Silicon RAM Memory Encryption

RAM is hardware-encrypted by the AMD Secure Processor (ASP) with unique per-VM keys. Hypervisors or datacenter operators are blocked from viewing memory.

Cold Restore & Epoch Fencing

Integrated with non-live-migration restart architecture; every reboot is treated as a clean fresh session requiring physical re-attestation.

AWSAWS

Amazon Web Services (AWS)

Enterprise Tier

Full support: AWS Nitro Enclaves (x86_64 c5/c6i and Graviton aarch64 c7g/m7g), AMD SEV-SNP (c6a/m6a Dedicated & Shared), and NitroTPM.

  • CBOR COSE_Sign1 attestation via /dev/nsm
  • Automated 1-Click CloudFormation connection bootstrap
  • Physically verified on x86 & Graviton ARM64 in Jakarta
Google CloudGoogle CloudMicrosoft AzureMicrosoft Azure

Google Cloud & Microsoft Azure

Enterprise Tier

Supports GCP Confidential Space (N2D/C2D/C3) and Azure Confidential VMs (DCasv5/ECasv5 on AMD SEV-SNP and DCesv5 on Intel TDX).

  • Per-VM hardware-level RAM encryption on the fly
  • 1184-byte ECDSA P-384 attestation report verification
  • Direct AMD KDS VCEK & VLEK certificate chain validation
OVHcloudOVHcloud

Dedicated Bare-Metal (Scaleway & OVH Scale)

High Throughput

Dedicated physical servers with AMD EPYC (Milan/Genoa) or Intel Xeon Scalable at Scaleway Elastic Metal, OVHcloud Scale, phoenixNAP, Latitude.sh, and On-Premise.

  • Hypervisor passthrough directly to TEE modules
  • Maximum compute throughput without virtualization overhead
  • Monitored via local lightweight vastarshield-node daemon
Multi-Cloud Confidential Computing Catalog

Supported Cloud Targets & Silicon TEE Directory

VastarShield is deterministically engineered with zero single-hyperscaler lock-in. Below is the full availability matrix, memory encryption technology, hardware attestation channel, and readiness status across 20 supported confidential computing providers:

20 Verified TEE Targets
Cloud Provider / Target Delivery Model Silicon TEE Channel & Attestation vCPU Capacity Primary Regions Est. Infra / mo Readiness Status
Onidel Confidential VPS
onidel.com
 Native Confidential VPS AMD SEV-SNP /dev/sev-guest
1184-byte ECDSA P-384 / VCEK		 1 – 64 vCPU
2 – 256 GB RAM		 Singapore (Jurong DC)
Frankfurt, USA, Tokyo		 From ~$4.50 / mo
Total TCO: ~$6.50/mo		 Entry Priority
Servury Blackbox
servury.com
 Native AMD SNP CVM AMD SEV-SNP /dev/sev-guest
VCEK Chain & Measured Boot		 2 – 64 vCPU
4 – 256 GB RAM		 Montreal (Canada)
USA, Frankfurt		 ~$5.99 – $9.99 / mo
2 vCPU / 4 GB Base		 Production Ready
VPSBG Confidential Cloud
vpsbg.eu
 Native VPS / Dedicated VDS AMD SEV-SNP Hardware-signed SNP Report
API Provisioned / Custom ISO		 2 – 64 vCPU
8 – 256 GB RAM		 Sofia (Bulgaria / EU)
Frankfurt Gateway		 €9.38 / mo (~$10.20)
2 vCPU / 8 GB		 Production Ready
Akash Network
akash.network
 Distributed CVM Marketplace AMD SEV-SNP & Intel TDX Kata Confidential Attestation
Automated Platform Selection		 1 – 64 vCPU
2 – 128 GB RAM		 Asia-Pacific, Europe
North America		 ~$4.00 – $8.00 / mo
Marketplace Bid		 Verified Target
STACKIT Sovereign Cloud
stackit.de
 Sovereign Confidential Server AMD SEV-SNP & Intel TDX Hardware TEE Memory Enc
BSI C5 & GDPR Compliant		 2 – 64 vCPU
8 – 256 GB RAM		 Frankfurt & Berlin
Germany DC		 ~$32.00 / mo
Confidential Server		 Sovereign EU
Phala Cloud
phala.network
 Developer-First Native CVM Intel TDX /dev/tdx-guest Quote
Sealed Secrets & Proofs		 1 – 64 vCPU
2 – 128 GB RAM		 Global Anycast Mesh
European TDX Nodes		 ~$25.00 – $45.00 / mo
$0.12/vCPU/hour		 Verified Target
Verda AI Confidential Cloud
verda.ai
 AI & Compute CVM AMD SEV-SNP Cryptographic Guest Attestation
Direct VCEK Hardware Chain		 2 – 64 vCPU
8 – 256 GB RAM		 Stockholm (Sweden)
Frankfurt		 ~$30.00 / mo
2 vCPU / 8 GB		 Verified Target
Amazon Web Services (AWS)
aws.amazon.com
 Nitro Enclaves & EC2 SNP AWS Nitro & AMD SEV-SNP /dev/nsm (COSE_Sign1 ES384)
Nitro Root CA / AMD KDS		 1 – 128 vCPU
2 – 512 GB RAM		 Jakarta (ap-southeast-3)
Singapore, Global		 ~$12.00 – $62.00 / mo
t4g.small / c6i.large		 Verified Jakarta
Google Cloud (GCP)
cloud.google.com
 GCP Confidential VM (C3D) AMD SEV-SNP & Intel TDX vTPM Measured Direct Boot
Google Confidential Space		 2 – 128 vCPU
8 – 512 GB RAM		 Jakarta (asia-southeast2)
Singapore, Global		 ~$48.00 / mo
c3d-standard-2		 Production Ready
Microsoft Azure
azure.microsoft.com
 Azure Confidential VM (DCas) AMD SEV-SNP & Intel TDX Microsoft Azure Attestation
(MAA) & AMD VCEK Chain		 2 – 96 vCPU
8 – 384 GB RAM		 Singapore, Jakarta
Amsterdam, Virginia		 ~$52.00 / mo
DC2as_v5 (2c/8g)		 Production Ready
Oracle Cloud Infrastructure (OCI)
oracle.com/cloud
 OCI Confidential VM Flex AMD SEV-SNP Bring Your Own Attestation (BYAS)
Zero Surcharge for Security		 1 – 128 vCPU
8 – 1024 GB RAM		 Singapore (ap-singapore-1)
Tokyo, Frankfurt		 ~$18.00 / mo
E5.Flex (1c/8g)		 Production Ready
IBM Cloud
ibm.com/cloud
 Confidential Profile (bx3dc) Intel TDX Intel TDX Remote Quote
IBM Key Protect (KYOK)		 2 – 128 vCPU
8 – 512 GB RAM		 Frankfurt (eu-de-1)
Dallas, Washington DC		 ~$48.00 / mo
bx3dc-2x8		 Production Ready
Alibaba Cloud
alibabacloud.com
 Confidential ECS (ecs.c8i) Intel TDX Intel TDX Remote Quote
Verified Remote Attestation SDK		 2 – 128 vCPU
8 – 512 GB RAM		 Jakarta (ap-southeast-5)
Singapore, Hangzhou		 ~$38.00 / mo
ecs.c8i.large		 Production Ready
Baidu AI Cloud
cloud.baidu.com
 Confidential VM (Intel Xeon) Intel TDX Intel TDX Remote Attestation
Enterprise Verified Quote		 2 – 128 vCPU
8 – 512 GB RAM		 Hong Kong, Beijing
Shanghai, Guangzhou		 ~$40.00 / mo
TDX CVM (2c/8g)		 Verified Target
Scaleway Elastic Metal
scaleway.com
 Dedicated Bare-Metal Server AMD SEV-SNP AMD Security Stack Attestation
Direct Hypervisor Passthrough		 8C / 16T – 64C / 128T
64 – 512 GB RAM DDR5		 Paris (PAR1/PAR2)
Amsterdam, Warsaw		 €134.99 / mo (~$146)
EM-I120E (8C/16T)		 Bare-Metal Host
OVHcloud Scale Dedicated
ovhcloud.com
 Dedicated Server (AMD EPYC) AMD EPYC SEV AMD Infinity Guard Silicon Enc
European Sovereign HW		 16 – 128 vCPU
64 – 512 GB RAM DDR5		 Singapore (SGP1)
Frankfurt, Gravelines		 €145.00 / mo (~$158)
Scale-1 AMD EPYC		 Bare-Metal Host
phoenixNAP Bare Metal
phoenixnap.com
 Bare Metal Cloud (Xeon Gold) Intel TDX / SGX Intel TDX BMC Attestation
Hardware Root of Trust		 16 – 128 vCPU
128 – 1024 GB RAM		 Singapore BMC Node
Phoenix, Ashburn		 ~$240.00 / mo
$1.59/hour base		 Verified Target
Latitude.sh Bare Metal
latitude.sh
 Dedicated EPYC Server AMD SEV-SNP AMD SEV-SNP Attestation
Physical Hardware Root		 32 – 128 Cores
256 – 1024 GB RAM		 Tokyo (TYO1)
London, Chicago		 ~$320.00 / mo
rs4.metal EPYC 9554P		 Enterprise Host
OpenMetal On-Demand
openmetal.io
 OpenStack Private Cloud Pod Intel TDX Intel TDX Dedicated Host Pool
OpenStack Orchestration		 32 – 128 vCPU
256 – 1024 GB RAM		 Ashburn (US-East)
Los Angeles, Amsterdam		 ~$350.00 / mo
Dedicated 32c Pod		 Private Cloud
Bare-Metal On-Premise
Customer BYO
 Self-Hosted Physical / Rack AMD EPYC / Intel TDX TPM 2.0 + Direct TEE IOCTL
Air-Gapped Physical Custody		 1 – 128+ vCPU
4 GB – 1 TB+ RAM		 Customer Internal Datacenter
Tier 3/4 Colocation Jakarta		 $0.00 (Bring Your Own HW)
100% Physical Custody		 100% Sovereign
Cloud Provider / Target Delivery Model Silicon TEE Channel & Attestation vCPU Capacity Primary Regions Est. Infra / mo Readiness Status
Onidel Confidential VPS
onidel.com
 Native Confidential VPS AMD SEV-SNP /dev/sev-guest
1184-byte ECDSA P-384 / VCEK		 1 – 64 vCPU
2 – 256 GB RAM		 Singapore (Jurong DC)
Frankfurt, USA, Tokyo		 From ~$4.50 / mo
Total TCO: ~$6.50/mo		 Entry Priority
Servury Blackbox
servury.com
 Native AMD SNP CVM AMD SEV-SNP /dev/sev-guest
VCEK Chain & Measured Boot		 2 – 64 vCPU
4 – 256 GB RAM		 Montreal (Canada)
USA, Frankfurt		 ~$5.99 – $9.99 / mo
2 vCPU / 4 GB Base		 Production Ready
VPSBG Confidential Cloud
vpsbg.eu
 Native VPS / Dedicated VDS AMD SEV-SNP Hardware-signed SNP Report
API Provisioned / Custom ISO		 2 – 64 vCPU
8 – 256 GB RAM		 Sofia (Bulgaria / EU)
Frankfurt Gateway		 €9.38 / mo (~$10.20)
2 vCPU / 8 GB		 Production Ready
Akash Network
akash.network
 Distributed CVM Marketplace AMD SEV-SNP & Intel TDX Kata Confidential Attestation
Automated Platform Selection		 1 – 64 vCPU
2 – 128 GB RAM		 Asia-Pacific, Europe
North America		 ~$4.00 – $8.00 / mo
Marketplace Bid		 Verified Target
STACKIT Sovereign Cloud
stackit.de
 Sovereign Confidential Server AMD SEV-SNP & Intel TDX Hardware TEE Memory Enc
BSI C5 & GDPR Compliant		 2 – 64 vCPU
8 – 256 GB RAM		 Frankfurt & Berlin
Germany DC		 ~$32.00 / mo
Confidential Server		 Sovereign EU
Phala Cloud
phala.network
 Developer-First Native CVM Intel TDX /dev/tdx-guest Quote
Sealed Secrets & Proofs		 1 – 64 vCPU
2 – 128 GB RAM		 Global Anycast Mesh
European TDX Nodes		 ~$25.00 – $45.00 / mo
$0.12/vCPU/hour		 Verified Target
Verda AI Confidential Cloud
verda.ai
 AI & Compute CVM AMD SEV-SNP Cryptographic Guest Attestation
Direct VCEK Hardware Chain		 2 – 64 vCPU
8 – 256 GB RAM		 Stockholm (Sweden)
Frankfurt		 ~$30.00 / mo
2 vCPU / 8 GB		 Verified Target
Cloud Provider / Target Delivery Model Silicon TEE Channel & Attestation vCPU Capacity Primary Regions Est. Infra / mo Readiness Status
Amazon Web Services (AWS)
aws.amazon.com
 Nitro Enclaves & EC2 SNP AWS Nitro & AMD SEV-SNP /dev/nsm (COSE_Sign1 ES384)
Nitro Root CA / AMD KDS		 1 – 128 vCPU
2 – 512 GB RAM		 Jakarta (ap-southeast-3)
Singapore, Global		 ~$12.00 – $62.00 / mo
t4g.small / c6i.large		 Verified Jakarta
Google Cloud (GCP)
cloud.google.com
 GCP Confidential VM (C3D) AMD SEV-SNP & Intel TDX vTPM Measured Direct Boot
Google Confidential Space		 2 – 128 vCPU
8 – 512 GB RAM		 Jakarta (asia-southeast2)
Singapore, Global		 ~$48.00 / mo
c3d-standard-2		 Production Ready
Microsoft Azure
azure.microsoft.com
 Azure Confidential VM (DCas) AMD SEV-SNP & Intel TDX Microsoft Azure Attestation
(MAA) & AMD VCEK Chain		 2 – 96 vCPU
8 – 384 GB RAM		 Singapore, Jakarta
Amsterdam, Virginia		 ~$52.00 / mo
DC2as_v5 (2c/8g)		 Production Ready
Oracle Cloud Infrastructure (OCI)
oracle.com/cloud
 OCI Confidential VM Flex AMD SEV-SNP Bring Your Own Attestation (BYAS)
Zero Surcharge for Security		 1 – 128 vCPU
8 – 1024 GB RAM		 Singapore (ap-singapore-1)
Tokyo, Frankfurt		 ~$18.00 / mo
E5.Flex (1c/8g)		 Production Ready
IBM Cloud
ibm.com/cloud
 Confidential Profile (bx3dc) Intel TDX Intel TDX Remote Quote
IBM Key Protect (KYOK)		 2 – 128 vCPU
8 – 512 GB RAM		 Frankfurt (eu-de-1)
Dallas, Washington DC		 ~$48.00 / mo
bx3dc-2x8		 Production Ready
Alibaba Cloud
alibabacloud.com
 Confidential ECS (ecs.c8i) Intel TDX Intel TDX Remote Quote
Verified Remote Attestation SDK		 2 – 128 vCPU
8 – 512 GB RAM		 Jakarta (ap-southeast-5)
Singapore, Hangzhou		 ~$38.00 / mo
ecs.c8i.large		 Production Ready
Baidu AI Cloud
cloud.baidu.com
 Confidential VM (Intel Xeon) Intel TDX Intel TDX Remote Attestation
Enterprise Verified Quote		 2 – 128 vCPU
8 – 512 GB RAM		 Hong Kong, Beijing
Shanghai, Guangzhou		 ~$40.00 / mo
TDX CVM (2c/8g)		 Verified Target
Cloud Provider / Target Delivery Model Silicon TEE Channel & Attestation vCPU Capacity Primary Regions Est. Infra / mo Readiness Status
Scaleway Elastic Metal
scaleway.com
 Dedicated Bare-Metal Server AMD SEV-SNP AMD Security Stack Attestation
Direct Hypervisor Passthrough		 8C / 16T – 64C / 128T
64 – 512 GB RAM DDR5		 Paris (PAR1/PAR2)
Amsterdam, Warsaw		 €134.99 / mo (~$146)
EM-I120E (8C/16T)		 Bare-Metal Host
OVHcloud Scale Dedicated
ovhcloud.com
 Dedicated Server (AMD EPYC) AMD EPYC SEV AMD Infinity Guard Silicon Enc
European Sovereign HW		 16 – 128 vCPU
64 – 512 GB RAM DDR5		 Singapore (SGP1)
Frankfurt, Gravelines		 €145.00 / mo (~$158)
Scale-1 AMD EPYC		 Bare-Metal Host
phoenixNAP Bare Metal
phoenixnap.com
 Bare Metal Cloud (Xeon Gold) Intel TDX / SGX Intel TDX BMC Attestation
Hardware Root of Trust		 16 – 128 vCPU
128 – 1024 GB RAM		 Singapore BMC Node
Phoenix, Ashburn		 ~$240.00 / mo
$1.59/hour base		 Verified Target
Latitude.sh Bare Metal
latitude.sh
 Dedicated EPYC Server AMD SEV-SNP AMD SEV-SNP Attestation
Physical Hardware Root		 32 – 128 Cores
256 – 1024 GB RAM		 Tokyo (TYO1)
London, Chicago		 ~$320.00 / mo
rs4.metal EPYC 9554P		 Enterprise Host
OpenMetal On-Demand
openmetal.io
 OpenStack Private Cloud Pod Intel TDX Intel TDX Dedicated Host Pool
OpenStack Orchestration		 32 – 128 vCPU
256 – 1024 GB RAM		 Ashburn (US-East)
Los Angeles, Amsterdam		 ~$350.00 / mo
Dedicated 32c Pod		 Private Cloud
Bare-Metal On-Premise
Customer BYO
 Self-Hosted Physical / Rack AMD EPYC / Intel TDX TPM 2.0 + Direct TEE IOCTL
Air-Gapped Physical Custody		 1 – 128+ vCPU
4 GB – 1 TB+ RAM		 Customer Internal Datacenter
Tier 3/4 Colocation Jakarta		 $0.00 (Bring Your Own HW)
100% Physical Custody		 100% Sovereign
Hardware verification details

Silicon Chip Verification Inspector (Interactive TEE Inspector)

Click on a processor chip below to inspect attestation mechanisms and TCB registers enforced by the VastarShield verifier:

AMD SEV-SNP (Onidel, GCP, Azure, Bare-Metal)

Secures guest memory with AES 128/256-bit hardware encryption using unique per-VM keys managed by the AMD Secure Processor (ASP), preventing hypervisor or root host access.

IOCTL Channel /dev/sev-guest
Evidence Format 1184-Byte Attestation Report
Root of Trust AMD KDS (Key Distribution Server)
Featured Providers Onidel (Affordable Priority ~$4.50), Servury, VPSBG, Scaleway, Azure DCasv5
Key Varieties VCEK (Dedicated) & VLEK (Shared Cloud)
VastarShield Enforcement Status:

SEV-SNP attestation reports are verified hermetically. Strict anti-downgrade policies ensure VLEK documents are immediately rejected when submitted to Dedicated Host VCEK policies.

AWS Nitro Enclaves (x86_64 & Graviton ARM64)

Isolates CPU and enclave memory from the parent host kernel using dedicated PCIe Nitro Security Cards. Host only provides a VSOCK proxy and is blocked from enclave RAM.

IOCTL Channel /dev/nsm
Evidence Format CBOR COSE_Sign1 (ES384)
Root of Trust AWS Nitro Enclaves Root CA
PCR Measurements PCR0 (UKI), PCR1 (Kernel), PCR2 (App)
VastarShield Enforcement Status:

Canonical verifier libraries inspect AWS x509 cert chains, validate PCR digests against signed vendor manifests, and release CEK shares exclusively to ephemeral guest keys inside enclave RAM.

Intel TDX (Trust Domain Extensions)

Isolates Trust Domains (TD) from the Virtual Machine Manager (VMM) and hypervisor software via CPU TDX-SEAM modules.

Evidence Format TD Report & Quote ECDSA P-256/384
Root of Trust Intel SGX/TDX Provisioning (PCCS)
Isolation Boundary Hardware TME-MK Encrypted RAM
Wire Contract TEE_TARGET_INTEL_TDX = 2
VastarShield Enforcement Status:

Wire contract enum TEE_TARGET_INTEL_TDX = 2 is fully integrated and ready to bind with quoting enclaves in GCP C3 or Azure DCesv5.

AWS NitroTPM & Attestable AMI

Enforces Measured Booting with virtual TPM 2.0 cryptographic modules authenticated by the Nitro Security Chip.

Command TPM2_Quote via Cryptographic Coprocessor
PCR Measurements PCR4 (UKI), PCR12 (rootfs)
Posture Interactive SSH/TTY access fully disabled
Scope Hardened EC2 & Measured Boot
VastarShield Enforcement Status:

Applied for hardened EC2 host postures. NitroTPM attestation documents are rejected if submitted to pure enclave policies to prevent backend substitution.

Transparent, Frictionless Pricing

4-Tier Pricing Structure & TCO Calculator

We implement a progressive value-based pricing curve: extreme subsidized incentives at the low tier ($2/vCPU) for mass developer adoption, and guaranteed SLA and compliance audit packages at the enterprise tier for banking and mission-critical industries.

Affordable Priority

1. Entry Sovereign (Max 2 vCPUs)

For indie developers, startups, and research pilots on 1–2 vCPU nodes on Onidel, Servury, VPSBG, AWS, or your chosen cloud.

Capacity Limit: Max 2 vCPUs
$2.00
per vCPU / month
Total TCO: From ~$6.50 / mo
  • Hard Cap: Max 2 vCPUs (Lightweight nodes)
  • Free Cloud Choice: Onidel (1 vCPU SEV-SNP from ~$4.50), Servury, VPSBG, Akash, AWS, GCP, Azure
  • AMD SEV-SNP 1184-byte Attestation
  • N = 2 Concurrent CAS Slots
  • Epoch Fencing (TTL 60s)
  • Open Community & Docs Support
Start Tier 1 Entry

2. Standard & Growth Sovereign

For growing commercial software vendors requiring multi-user concurrency slot enforcement on 4–8 vCPU nodes.

Capacity Limit: Max 8 vCPUs
$5.00
per vCPU / month
Cloud Choice: Onidel, Servury, VPSBG, STACKIT, AWS, GCP
  • Hard Cap: Max 8 vCPUs (Scale-up VMs)
  • Free Cloud Choice: Onidel (4–8 cores), Servury, VPSBG, STACKIT, AWS, GCP, Azure
  • AMD SEV-SNP & Intel TDX Support
  • N = 10 – 25 Concurrent CAS Slots
  • In-Place Hot Tier Transition
  • Standard Email SLA Support
Choose Tier 2 Standard

3. High-Performance & Bare-Metal

For intensive parallel analytics pipelines and enterprise workloads with zero virtualization overhead on 16–32 vCPU nodes.

Capacity Limit: Max 32 vCPUs
$8.00
per vCPU / month
Cloud Choice: Bare-Metal, High-Core Onidel, AWS, GCP
  • Hard Cap: Max 32 vCPUs (High-Throughput)
  • Free Cloud Choice: Onidel High-Core, Scaleway Metal, OVH Scale, phoenixNAP, AWS, GCP
  • Maximum Silicon Throughput
  • N = 50 Concurrent CAS Slots
  • Ephemeral Secure Snapshotting
  • Priority Business Hours SLA
Choose Tier 3 Performance
Enterprise & Regulated

4. Enterprise Sovereign Fleet

For banks, fintechs, healthcare, and governments requiring strict regulatory audit packages and 99.99% SLA across multi-node fleets.

Capacity Scale: 32+ vCPUs to Unlimited Fleet
$450
per month (Includes 30 vCPUs)
+ $10 / additional vCPU
  • Fleet Scale: 32+ vCPUs to Unlimited Multi-Node Mesh
  • Free Cloud Choice: Onidel Enterprise Fleet, AWS Nitro, Azure DCas, GCP CVM, Bare-Metal On-Prem
  • N = Unlimited Multi-Node Mesh
  • 3-Party Custody + Cloud HSM Integration
  • GDPR / HIPAA / Banking Audit Pack
  • 99.99% SLA & Dedicated 24/7 TAM
Schedule Enterprise PoC

Interactive TCO Calculator: Calculate Real BYOC Savings

Drag the compute core slider and choose infrastructure types to see transparent monthly cost projections with enforced tier vCPU caps:

Select Cloud / Infrastructure Provider (Customer's Free Choice Across All Tiers):

1 vCPU
Tier 1: Developer & Entry Sovereign · 1 vCPU · $2.00 / vCPU · Onidel. Infrastructure choice is independent of tier.
Estimated Cloud / VPS Server Cost: $4.50 / mo
VastarShield Platform License: $2.00 / mo
Total BYOC Expenditure:
$6.50
per month
Save 99.6% vs conventional solutions
Conventional solution estimate: ~$2,085 / mo

Illustrative monthly estimate; actual provider charges may vary.

Global Competitive Landscape

Head-to-Head Comparison: VastarShield vs Top 10 Competitors

Most confidential computing solutions worldwide focus on internal cloud infrastructure hardening or closed data clean rooms. VastarShield is the only platform purpose-built for sovereign BYOC software distribution with multi-tier runtime license governance.

Swipe horizontally to compare all 10 global competitors →
Platform / Vendor Core Focus VastarShield BYOC Fortanix Anjuna Edgeless Systems SCONE Decentriq
Distribution Model Focus Proprietary software distribution into customer cloud (BYOC) Sovereign BYOC Internal Cloud HSM Lift & Shift Enclave K8s Cluster Node Container Tooling SaaS Clean Room
SKU License Mapping Engine Declaratively map SKU, quotas, & features into TEE registers Yes (RuntimeBinding v1) None None None None None
Atomic Concurrency Quotas (CAS) In-enclave RAM slot enforcement via atomic fetch_update Yes (WorkflowSlotGuard) None None None None None
Payment Neutrality Vendor bills 100% independently; Hub is zero-knowledge 100% Zero-Payment Fortanix Billing Marketplace / Direct SaaS Billing Custom Quote Decentriq SaaS
Affordable VPS Support (Onidel) Runs on AMD SEV-SNP VPS starting at ~$4.50/mo Yes (~$4.50/mo Onidel) No

(Hyperscalers)

 No

(Hyperscalers)

 Partial

(Large K8s)

 No

(Custom Setup)

 No

(Azure SaaS)
Key Custody Model Tri-Party Custody Consensus (Vendor, Customer, Vastar) 3-Party HPKE (RFC 9180) Centralized (DSM) 2-Party / Cloud KMS Cluster Manager Local CAS Decentriq Enclave
Hardware TEE Protected Execution Stage 1 Installer DB + Stage 2 Runtime Execution Hardware TEE Protected Single Boot Single Boot K8s Pod Boot Container Boot Query Sandbox
Minimum Financial Commitment Minimum annual contract commitment threshold Zero ($2/vCPU Pay-as-you-grow) $25k – $60k / yr $30k – $80k / yr Custom Enterprise $15k – $35k / yr $36k – $100k / yr
Tiered vCPU Capacity Caps Strict isolated quota segmentation per node class (prevents tier exploitation) Enforced: 2c / 8c / 32c / Unlimited All-in Enterprise (No option) All-in Enterprise (No option) Cluster Base (K8s) Custom Quote Only SaaS Hosted Only
Tenancy & Governance Contract

Tri-Party Zero-Trust Actor Model

Three independent entities operate across strict cryptographic boundaries without any single superuser party holding master access.

1. Vastar (Hub Operator)

Provider of the VastarShield Hub SaaS trust plane. Functions as a Zero-Knowledge Trust Broker, physical TEE verifier authority, managed node quota registry, and revocation ledger. Vastar never observes proprietary binaries or customer private data.

2. Vendor (ISV / IP Owner)

Creator of proprietary enterprise applications, compute algorithms, or databases. Uses vastarshield-publisher to seal binaries into encrypted OCI chunks, holds Ed25519 signing keys, and controls commercial license distribution.

3. Customer (Enterprise BYOC)

Provides compute infrastructure (AWS EC2, GCP, Azure, or Confidential VPS at Onidel/Servury/VPSBG). Holds active Customer Consent over when enclaves launch. Host hypervisors and root admins stay strictly outside the Trusted Computing Base (TCB).

Tri-Party Custody Invariant: Content Encryption Key (CEK) release requires the mathematical consensus of all three independent keyholders (Vendor, Customer, and Vastar Platform) via HPKE (RFC 9180). Zero tolerance for 2-of-3 shortcuts.
Zero-Friction User Experience

1-Click BYOC Onboarding Flow

Enterprise customers deploy vendor applications into their private cloud without sharing AWS Access Keys, Secret Keys, or root credentials.

1

Token Activation

Customer receives a unique activation link from the Vendor containing digitally signed placement authorization.

2

Quick-Create Role

Customer clicks "Create Stack" in AWS Console to grant scoped least-privilege delegation (namespace vastarshield-c*).

3

1-Click Deployment

Hub executes pinned change-sets and launches isolated TEE instances in Customer's VPC via outbound pull connections.

4

Attestation & Boot

Node proves silicon integrity (/dev/nsm, /dev/sev-guest), Hub releases 3-party custody keys, and the protected app runs locally in encrypted RAM.

Architectural & Legal Answers

Critical Questions from Enterprise CISOs & ISV Vendors

The top architectural and legal questions evaluated by bank, healthcare, and enterprise software security review boards before conducting PoCs:

No, absolutely not. Memory isolation is strictly hardware-enforced by CPU silicon (AMD SEV-SNP via the AMD Secure Processor, AWS Nitro via Nitro Security Cards, or Intel TDX). All memory buses are hardware-encrypted with unique keys generated inside the silicon die. Even hypervisors, physical datacenter operators, or root host admins trying to inspect memory (/dev/mem, /proc/kcore, gdb) receive undecryptable ciphertext.
There are zero security compromises. The silicon security module utilized on Onidel is genuine physical AMD SEV-SNP, identical to hyperscaler offerings. Tier 1 ($2/vCPU) is an Ecosystem Growth Initiative subsidized by Vastar for 1–2 vCPU entry workloads. Meanwhile, customers are completely free to choose Onidel for higher tiers (Standard 4–8 vCPU, Performance 16–32 vCPU, or Enterprise 64+ vCPU multi-node fleets) for optimal hardware cost efficiency. VastarShield tiering is strictly governed by vCPU capacity, not cloud provider locks.
VastarShield operates on a strict Zero-Payment Dependency model (PRP-BYOC-LIC-01 v4.0). VastarShield Hub has zero APIs, database fields, or webhooks connected to vendor payment systems (Stripe, bank transfers, B2B invoices). Vendors independently process payments and sign Ed25519 authorization grants. Hub merely verifies the mathematical signature without touching commercial transaction details.
The VastarShield security watchdog initiates renewal heartbeats at 80% of lease duration (second 48). If network drops, the system has a graceful 10-second drain buffer. If connectivity remains severed past tolerance boundaries, applications gracefully drain in-flight jobs and halt new requests to prevent unlicensed execution.
Zero code rewrites are required (*Zero Code Change*). Unlike WebAssembly (WASM) approaches requiring recompilation, VastarShield executes native standard Linux x86_64 or aarch64 binaries (C++, Rust, Go, Python, Java, Node.js, AI model runtimes) directly in enclave RAM via standard memfd_create syscalls and dynamic loaders.
2-of-3 schemes create dangerous collusion risks: if Vastar colludes with Customer, they could extract Vendor IP; if Vastar colludes with Vendor, they could execute unapproved instances in Customer cloud. VastarShield's Tri-Party Custody Invariant (Vendor + Customer + Vastar) via HPKE RFC 9180 guarantees that no single party or pair can unlock secrets without active consensus from all three.
Industry Compliance & Assurance

Instant Regulatory Compliance & Silicon Guarantees

VastarShield eliminates months of enterprise privacy compliance audits through hardware-level cryptographic isolation.

GDPR & HIPAA COMPLIANT

100% Local Data Sovereignty

Customer data, patient health records, and banking transactions process strictly within customer's private cloud. Vendors cannot access customer data, and data never leaves to public clouds.

ZERO-TRUST ARCHITECTURE

Audited Cryptographic Handshakes

Content Encryption Key (CEK) release requires Tri-Party Custody consensus (Vendor, Customer, Vastar Platform) via HPKE RFC 9180. Zero architectural backdoors.

HARDWARE-ROOTED

Fail-Closed Physical Attestation

Verifiers strictly reject debug simulators or fake quotes lacking genuine processor root certs (AMD KDS, AWS Nitro Root CA, Intel PCCS). Plaintext exists solely in isolated RAM.

Ready to Deploy in Sovereign Confidential Enclaves?

Start distributing enterprise software, computational algorithms, database engines, and proprietary applications across AWS, GCP, Azure, and affordable Confidential VPS (Onidel, Servury, VPSBG) with total TCO starting from just ~$6.50/month.

Get Started at $2/vCPU View Competitor Analysis