Distribute proprietary enterprise software, compiled binaries, core computational algorithms, database engines, and AI models directly into customer-owned cloud (BYOC) and affordable VPS environments with sovereign multi-tier license governance. Map commercial SKU tiers, atomic concurrency quotas (CAS), and modular features directly into silicon TEEs (AWS Nitro, AMD SEV-SNP, Intel TDX)—keeping vendor intellectual property 100% sealed from reverse engineering while enterprise customers retain absolute, uncompromising data sovereignty.
Traditional SaaS and conventional on-premise models force dangerous compromises between customer data privacy and vendor intellectual property protection.
| Operational Metric | Pure Cloud SaaS | Traditional On-Premises / VM | VastarFort BYOC Confidential Computing |
|---|---|---|---|
| Customer Data Sovereignty | Low Private data is sent to vendor cloud over public internet. | High Data stays within customer facilities. | Absolute (100% Local) Data never leaves customer's private VPC/VPS memory. |
| Vendor IP Protection (Binaries & Algorithms) | High Code resides securely on vendor's internal cloud servers. | Zero Binaries handed over; root admin can reverse engineer, debug (gdb), or decompile code. | Absolute (100% Sealed) Binaries execute strictly in hardware-isolated TEE RAM (memfd_create). |
| License Enforcement & Concurrency Cap | Software Only Relies on external API rate-limiting. | Weak License dongles or files can be cracked or patched by root. | Hardware-Enforced Multi-tier SKU mapping with atomic CAS memory semaphores inside the enclave. |
| Infrastructure Cloud Burden | Very High Vendor incurs massive compute & GPU infrastructure costs. | High Customer purchases expensive dedicated hardware appliances. | Optimal Customer provides existing cloud/VPS quota; Zero server costs for Vendor. |
| Enterprise Sales Cycle | Sluggish (6–18 months) blocked by complex legal data privacy audits. | Fast for customer, but vendor refuses to sell proprietary algorithms. | Frictionless Enterprise Sales: Instant regulatory clearance (GDPR, HIPAA, PDP). |
VastarFort strictly decouples the public discovery interface, the sovereign vendor business console, and the private encrypted streaming engine. Public authentication only routes cryptographic authority (tokens & key release permits), while the chunk delivery daemon operates on isolated backend networks completely private from unauthorized access.
The self-service discovery surface where enterprise customers, DevOps engineers, and buyers discover silicon-verified sovereign software before initiating deployment into their own cloud VPCs.
Verified proprietary binary releases with reproducible build verification and TEE badges (AMD SEV-SNP, AWS Nitro, Intel TDX).
Automatic cloud instance detection: AWS c7g / c6g (Graviton), Azure DCasv5, GCP Confidential VM, and Onidel Sovereign VPS.
Structured curve cost display ($2 Onidel entry, $5 Cloud, $8 Bare-Metal, $10 Enterprise) with atomic hardware slot caps N=2 to N=32.
Self-service deployment intent checkout to customer's VPC, generating signed connection tokens without manual vendor bottleneck.
The sovereign console for Software Publishers / ISVs to ingest releases, slice encrypted 4 MiB AES-256-GCM chunks, set value-based pricing curves, and release cryptographic authority (Share 1).
Binaries never touch public servers; the local vastarfort packager CLI encrypts binaries and registers golden PCR0 / launch digests.
Configure commercial SKUs (Trial, Standard, Enterprise) bound directly to enclave hardware via RuntimeLicenseBinding v1.
Vendor holds exclusive sovereignty to release Share 1 (vendor key) when customer invoices or PO approvals are validated.
Monitor live execution health across customer deployments: lease epoch status, hardware attestation validity, and active slot usage.
High-performance backend delivery daemon completely segregated from web frontends. Handles silicon cryptographic attestation handshakes and encrypted chunk streaming directly to customer enclave RAM.
Validates AMD KDS VCEK certificates or AWS Nitro COSE signatures directly on hardware. Enforces strict fail-closed rejection for Class H1.
4 MiB AES-256-GCM chunks stream over mutual TEE sessions straight to customer MicroVM RAM without ever touching hypervisor disks.
Content Encryption Keys (CEK) are reconstructed solely inside customer enclave RAM via RFC 9180 HPKE consensus. No operator can intercept.
Streaming traffic is routed via hardened edge subdomains (e.g. registry.vastar.id), while compute engines and DBs remain in private VPCs.
Most confidential computing solutions worldwide focus on internal cloud infrastructure hardening or closed data clean rooms. VastarFort is the only platform purpose-built for sovereign BYOC software distribution with multi-tier runtime license governance.
| Platform / Vendor | Core Focus | VastarFort BYOC | Fortanix | Anjuna | Edgeless Systems | SCONE | Decentriq |
|---|---|---|---|---|---|---|---|
| Distribution Model Focus | Proprietary software distribution into customer cloud (BYOC) | Sovereign BYOC | Internal Cloud HSM | Lift & Shift Enclave | K8s Cluster Node | Container Tooling | SaaS Clean Room |
| SKU License Mapping Engine | Declaratively map SKU, quotas, & features into TEE registers | Yes (RuntimeBinding v1) | None | None | None | None | None |
| Atomic Concurrency Quotas (CAS) | In-enclave RAM slot enforcement via atomic fetch_update | Yes (WorkflowSlotGuard) | None | None | None | None | None |
| Payment Neutrality | Vendor bills 100% independently; Hub is zero-knowledge | 100% Zero-Payment | Fortanix Billing | Marketplace / Direct | SaaS Billing | Custom Quote | Decentriq SaaS |
| Affordable VPS Support (Onidel) | Runs on AMD SEV-SNP VPS starting at ~$4.50/mo | Yes (~$4.50/mo Onidel) | No (Hyperscalers) | No (Hyperscalers) | Partial (Large K8s) | No (Custom Setup) | No (Azure SaaS) |
| Key Custody Model | Tri-Party Custody Consensus (Vendor, Customer, Vastar) | 3-Party HPKE (RFC 9180) | Centralized (DSM) | 2-Party / Cloud KMS | Cluster Manager | Local CAS | Decentriq Enclave |
| Two-Stage Protected Execution | Stage 1 Installer DB + Stage 2 Runtime Execution | Two-Stage Protected | Single Boot | Single Boot | K8s Pod Boot | Container Boot | Query Sandbox |
| Minimum Financial Commitment | Minimum annual contract commitment threshold | Zero ($2/vCPU Pay-as-you-grow) | $25k – $60k / yr | $30k – $80k / yr | Custom Enterprise | $15k – $35k / yr | $36k – $100k / yr |
| Tiered vCPU Capacity Caps | Strict isolated quota segmentation per node class (prevents tier exploitation) | Enforced: 2c / 8c / 32c / Unlimited | All-in Enterprise (No option) | All-in Enterprise (No option) | Cluster Base (K8s) | Custom Quote Only | SaaS Hosted Only |
We implement a progressive value-based pricing curve: extreme subsidized incentives at the low tier ($2/vCPU) for mass developer adoption, and guaranteed SLA and compliance audit packages at the enterprise tier for banking and mission-critical industries.
For indie developers, startups, and research pilots requiring instant AMD SEV-SNP silicon protection.
For growing commercial software vendors requiring multi-user concurrency slot enforcement.
For intensive parallel analytics pipelines and enterprise workloads with zero virtualization overhead.
For banks, fintechs, healthcare, and governments requiring strict regulatory audit packages and 99.99% SLA.
Drag the compute core slider and choose infrastructure types to see transparent monthly cost projections with enforced tier vCPU caps:
VastarFort provides absolute freedom of execution placement: run on massive hyperscaler infrastructures or drastically slash operational costs using affordable Confidential VPS providers powered by AMD SEV-SNP and Intel TDX.
Onidel provides Premium VPS instances with AMD EPYC processors equipped with genuine AMD SEV-SNP at zero extra feature surcharge. Starting from a 1 vCPU option at ~$4.50/month to multi-core tiers, you can run vastarfort-node with full silicon protection for a total BYOC solution cost starting from just ~$6.50/month.
Supports custom Unified Kernel Image (UKI) upload with measured OVMF firmware, ensuring guest OS integrity before keys are decrypted.
RAM is hardware-encrypted by the AMD Secure Processor (ASP) with unique per-VM keys. Hypervisors or datacenter operators are blocked from viewing memory.
Integrated with non-live-migration restart architecture; every reboot is treated as a clean fresh session requiring physical re-attestation.
Full support: AWS Nitro Enclaves (x86_64 c5/c6i and Graviton aarch64 c7g/m7g), AMD SEV-SNP (c6a/m6a Dedicated & Shared), and NitroTPM.
/dev/nsmSupports GCP Confidential Space (N2D/C2D/C3) and Azure Confidential VMs (DCasv5/ECasv5 on AMD SEV-SNP and DCesv5 on Intel TDX).
Dedicated physical servers with AMD EPYC (Milan/Genoa) or Intel Xeon Scalable at Hetzner, OVHcloud, and Equinix Metal.
vastarfort-node daemonClick on a processor chip below to inspect attestation mechanisms and TCB registers enforced by the VastarFort verifier:
Secures guest memory with AES 128/256-bit hardware encryption using unique per-VM keys managed by the AMD Secure Processor (ASP), preventing hypervisor or root host access.
SEV-SNP attestation reports are verified hermetically. Strict anti-downgrade policies ensure VLEK documents are immediately rejected when submitted to Dedicated Host VCEK policies.
Isolates CPU and enclave memory from the parent host kernel using dedicated PCIe Nitro Security Cards. Host only provides a VSOCK proxy and is blocked from enclave RAM.
Canonical verifier libraries inspect AWS x509 cert chains, validate PCR digests against signed vendor manifests, and release CEK shares exclusively to ephemeral guest keys inside enclave RAM.
Isolates Trust Domains (TD) from the Virtual Machine Manager (VMM) and hypervisor software via CPU TDX-SEAM modules.
Wire contract enum TEE_TARGET_INTEL_TDX = 2 is fully integrated and ready to bind with quoting enclaves in GCP C3 or Azure DCesv5.
Enforces Measured Booting with virtual TPM 2.0 cryptographic modules authenticated by the Nitro Security Chip.
Applied for hardened EC2 host postures. NitroTPM attestation documents are rejected if submitted to pure enclave policies to prevent backend substitution.
Software vendors with rich product catalogs, varied license editions (Starter, Professional, Enterprise), and modular add-ons have a crystal-clear path to bind SKU entitlements directly into hardware TEE silicon contracts—with zero payment processor lock-in.
Map commercial product catalogs and SKUs (Starter, Pro, Enterprise, Add-on) into declarative RuntimeLicenseBinding v1 contracts. Each edition binds product_id, edition_id, and capability matrices without code changes.
Enforce concurrent execution limits (e.g. Max N=2 slots for Starter vs N=50 for Enterprise) directly in enclave RAM using atomic fetch_update semaphores (WorkflowSlotGuard), completely immune to host race conditions.
Dynamic capability vectors (e.g. ["batch_processing", "vector_acceleration"]) are encrypted within the SignedLeaseToken v2. Features can be activated or revoked on the fly without re-releasing application binaries.
Tier upgrades from Standard to Enterprise are coordinated in-place via the TierTransitionCoordinator. Customers enjoy instant upgrades with zero downtime, zero VM reboots, and zero privilege escalation loopholes.
License leases are strictly bounded (TTL 60s) with monotonic fencing_epoch counters. Customers are blocked from freezing virtual machines, rolling back system clocks, or replaying stale snapshot sessions.
VastarFort never touches payments, cards, or billing. Commercial transactions remain 100% private in the Vendor's own portal (Stripe, B2B invoices). Vendors independently issue cryptographically signed Ed25519 grants.
Click a commercial tier below to observe how vendor SKU definitions are mapped into cryptographic RuntimeLicenseBinding v1 parameters enforced inside TEE RAM:
Designed for department pilots or evaluation. Limits execution to basic computational capacity with core features enabled.
Binary executes inside TEE RAM (Onidel SEV-SNP or AWS Nitro). Out-of-package capabilities are disabled in memory. Attempting a 3rd concurrent process is immediately held by atomic WorkflowSlotGuard without requiring cloud roundtrips.
Tailored for high-scale commercial production with compute acceleration and multi-slot parallel pipelines.
Acceleration flags vector_simd and batch_pipeline are unlocked in RAM by EAR supervisor. Quota of 25 slots is enforced hermetically; extra requests queue deterministically without crashes.
Built for financial institutions, banking, and mission-critical workloads. Features cryptographic audit trails and multi-node mesh quotas.
Unlocks full enterprise suites, customer HSM custody integration, and immutable cryptographic audit logs. Licenses strictly bind to silicon firmware measurements to prevent unauthorized VM cloning.
Complete structural isolation between administrative governance oversight and proprietary application execution inside encrypted enclave RAM.
Lightweight independent supervisor (~2 MB RAM footprint) inside the TEE enclave. Manages outbound VSOCK communications (Port 5007), harvests hardware quotes, and enforces license leases (TTL 60s) with epoch fencing.
Hermetically sealed container where vendor proprietary compiled binaries, core algorithms, and business engines execute in-memory (memfd_create). 4 MiB chunks decrypt directly in RAM with zero disk footprints.
Prevents early binary leakage during local environment preparation or database migrations. Runtime execution keys are never released until the installer stage is verified:
Prepares local environment dependencies, executes database schema setup, and verifies runtime integrity inside memory isolation.
Hub releases Content Encryption Keys (CEK) exclusively after Stage 1 verification succeeds. Vendor PAR serves production traffic.
Three independent entities operate across strict cryptographic boundaries without any single superuser party holding master access.
Provider of the VastarFort Hub SaaS trust plane. Functions as a Zero-Knowledge Trust Broker, physical TEE verifier authority, managed node quota registry, and revocation ledger. Vastar never observes proprietary binaries or customer private data.
Creator of proprietary enterprise applications, compute algorithms, or databases. Uses vastarfort-publisher to seal binaries into encrypted OCI chunks, holds Ed25519 signing keys, and controls commercial license distribution.
Provides compute infrastructure (AWS EC2, GCP, Azure, or private VPS at Onidel/Hetzner). Holds active Customer Consent over when enclaves launch. Host hypervisors and root admins stay strictly outside the Trusted Computing Base (TCB).
Enterprise customers deploy vendor applications into their private cloud without sharing AWS Access Keys, Secret Keys, or root credentials.
Customer receives a unique activation link from the Vendor containing digitally signed placement authorization.
Customer clicks "Create Stack" in AWS Console to grant scoped least-privilege delegation (namespace vastarfort-c*).
Hub executes pinned change-sets and launches isolated TEE instances in Customer's VPC via outbound pull connections.
Node proves silicon integrity (/dev/nsm, /dev/sev-guest), Hub releases 3-party custody keys, and PAR runs locally in RAM.
The top architectural and legal questions evaluated by bank, healthcare, and enterprise software security review boards before conducting PoCs:
memfd_create syscalls and dynamic loaders.
VastarFort eliminates months of enterprise privacy compliance audits through hardware-level cryptographic isolation.
Customer data, patient health records, and banking transactions process strictly within customer's private cloud. Vendors cannot access customer data, and data never leaves to public clouds.
Content Encryption Key (CEK) release requires Tri-Party Custody consensus (Vendor, Customer, Vastar Platform) via HPKE RFC 9180. Zero architectural backdoors.
Verifiers strictly reject debug simulators or fake quotes lacking genuine processor root certs (AMD KDS, AWS Nitro Root CA, Intel PCCS). Plaintext exists solely in isolated RAM.