Privasys Wallet Across Your Phones: Adding, Moving and Recovering
B Foing·
Phones get upgraded, replaced, broken and lost. The Privasys Wallet keeps your identity on your phon…
Read more →Blog
Insights and updates from the Privasys team.
Privasys Wallet: Sign-In, Consent and Who Knows What
B Foing·
Signing in to an online service asks you to trust two things you cannot see: the server you are abou…
Read more →Confidential AI on Bare Metal: TDX, an H100 and QEMU, and the Three Problems on the Way
B Foing·
Until this week every Confidential AI enclave we ran lived on a cloud virtual machine: Intel TDX for…
Read more →Around the Clock, on Your Terms: Agents, Connectors and the Data You Keep
B Foing·
Much of what an AI agent is useful for happens while you are doing something else: triaging the mail…
Read more →An Agent Is a Folder of Text: Agent as a Config in Privasys Harness
B Foing·
In most products an agent is either an object inside someone else's service, defined in a vendor's i…
Read more →Trusted Time for Enclaves: Checking the Host's Clock with a Monitor and NTS
B Foing·
A confidential computing enclave keeps its memory away from the machine it runs on. It still asks th…
Read more →One Slow Server Should Not Stop an Enclave: Non-Blocking Egress for WASM Apps
B Foing·
A confidential application rarely lives alone. It calls a payment API, fetches a public key set, che…
Read more →Replay the Turn: Reproducible Agents, Tool Calls Included
B Foing·
In June we wrote about reproducible inference: the same prompt, the same attested stack, the same by…
Read more →The Disk of a Confidential App: Consent from the Wallet, a Filesystem for Agents
B Foing·
On the Privasys platform, each stateful confidential app keeps its state on an encrypted volume of i…
Read more →Which Machine Signed This? Platform Pinning in RA-TLS
B Foing·
A quote that verifies proves that a genuine TEE, running the measured code, signed it. It does not s…
Read more →One Slot, One Meaning: The Privasys Certificate Extensions
B Foing·
Last week's post on RA-TLS v2 said that the certificate an enclave presents is an identity document …
Read more →Evidence After the Handshake: RA-TLS v2 Is Live
B Foing·
Two days ago we published a proof that our attested TLS reached Level 3 of the binding hierarchy the…
Read more →Level 3, Proven: Attested TLS Inside the Handshake Binds the Whole Connection
B Foing·
In July we shipped a fix for the relay weakness in intra-handshake attested TLS (CVE-2026-33697): a …
Read more →An Agent You Can Verify: Introducing Privasys Harness
B Foing·
Confidential inference is necessary for a private AI agent, and it is nowhere near sufficient. An ag…
Read more →A Two-Way Sealed Channel: WebSockets over the Session Relay
B Foing·
Session relay gave a browser a confidential channel into an attested enclave. The user's wallet veri…
Read more →Attested SQL, Auditable History: Introducing immutable-ledger
B Foing·
Our last two posts covered tamper-evident state for SGX enclaves: the Merkle store that condenses an…
Read more →One Logical Enclave: Introducing Enclave Cluster
B Foing·
Confidential computing gives a business a strong answer on privacy and a new problem on availability…
Read more →Tamper-Evident State for Confidential Computing: the Enclave OS Merkle Store
B Foing·
Companies move workloads into confidential computing to answer one question: who can see my data? In…
Read more →A Brain You Own: Privasys Drive as Self-Sovereign Memory for Agents
B Foing·
Assistants are growing memory. The useful ones no longer treat each conversation as a blank slate; t…
Read more →A Drive Only You Can Open: Encryption, Attestation, and Sovereign Mode
B Foing·
Most cloud storage is encrypted "at rest", and the phrase does less work than it sounds. Encryption …
Read more →Charging by the Call on Privasys: Attested Pricing in Two Runtimes
B Foing·
Last week we argued that per-call pricing for AI tools belongs inside the application's measurement,…
Read more →AI Tools That Charge by the Call: Attested Pricing for MCP Servers
B Foing·
Most AI SaaS is converging on the same shape. The product is a set of tools: look up a company, veri…
Read more →Confidential Computing Is Not Broken: A Calm Look at the RA-TLS Attestation Flaw
B Foing·
In January, security researchers presented a formal-methods result to the IETF SEAT working group. A…
Read more →Enclave Vaults Speaks PKCS#11 and KMIP
B Foing·
Two earlier posts set out where Enclave Vaults had reached. In the v0.19 redesign the vault became a…
Read more →Prove It Without Giving It Away: Introducing Privasys ID
B Foing·
For as long as the internet has asked us to prove things about ourselves, it has asked us to do it t…
Read more →Rotating Encryption Keys on a Confidential VM
B Foing·
Key rotation is one of those security expectations everyone agrees on and few enjoy implementing. Au…
Read more →Same Prompt, Same Answer: Reproducible Inference and the Accountability Gap
B Foing·
A loan application is declined. A payment is flagged and frozen. A patient record is summarised, and…
Read more →Deploy Agents People Can Verify: Introducing the Privasys CLI
B Foing·
Agents are being built at an extraordinary pace. Frontier models have made it cheap to assemble serv…
Read more →Know Your RTMRs Before You Boot: Predicted Measurements for Every CVM Image Release
B Foing·
When we wrote about our CVM base images in April, the punchline was that a hardened, immutable image…
Read more →Upgrading an Enclave Without Handing It Your Data
B Foing·
A confidential application is never finished. It needs the same things every other piece of software…
Read more →Choosing a Model for Confidential Inference: Qwen 3.6, a 256k Context, and One Very Busy H100
B Foing·
We have written before about the plumbing of confidential AI: the GPU ceremony that brings an H100 i…
Read more →Enclave Vaults v0.19: Typed Keys and Policy-Driven Operations
B Foing·
A few weeks ago we wrote about rethinking secrets management for the age of confidential computing. …
Read more →Bringing Attestation to the Browser: The Session-Relay Pattern
B Foing·
Confidential computing makes a strong promise. The hardware can prove, cryptographically, what code …
Read more →Confidential AI on H100: The CPU/GPU Ceremony and the Driver Patches Behind It
B Foing·
The previous post in this series described the base images we build for confidential VMs: minimal Ub…
Read more →CVM Base Images: What We Build, and Why We Don't Use the Cloud Provider's
B Foing·
Every confidential workload we run starts from the same boring artefact: a few hundred megabytes of …
Read more →Per-Function Auth for WASM Enclaves: From WIT Annotations to Hardware-Enforced Access Control
B Foing·
In our last post we introduced Privasys Wallet, a mobile authenticator that verifies enclave attesta…
Read more →FIDO2 for Attested Enclaves: Two-Way Trust Between Your Phone and the Cloud
Privasys Engineering Team·
Authentication has always been a one-way street. You prove who you are to the server. The server tel…
Read more →From WIT to MCP: How WASM Enclaves Become Attested Tool Servers
B Foing·
One of the things we love about WebAssembly is that it finally gives us a proper type system at the …
Read more →Enclave Vaults: Rethinking Secrets Management for the Age of Confidential Computing
B Foing·
Every secrets management system, from a €100,000 HSM appliance to a HashiCorp Vault cluster, faces t…
Read more →Hardened Guest Images for Confidential VMs: Closing the Gap Between Memory Encryption and Verifiability
B Foing·
Intel TDX and AMD SEV-SNP encrypt a virtual machine's memory so that even the hypervisor and cloud p…
Read more →Beyond Code Identity: Why Attestation Must Cover Configuration
B Foing·
Remote attestation is the mechanism that makes Confidential Computing trustworthy. Without it, a TEE…
Read more →WebAssembly Inside Enclaves: A New Model for Confidential Applications
Privasys Engineering Team·
For the past decade, Confidential Computing has focused on one core promise: protect data while it i…
Read more →A Practical Guide for an Attested Web
Privasys Engineering Team·
The Trust Problem in Confidential Computing Confidential Computing promises that data stays encrypte…
Read more →Confidential AI: From Isolated Enclaves to a Unified Fabric
B Foing·
It has been ten years since the introduction of Confidential Computing with Intel SGX. As someone wh…
Read more →Why Confidential Computing Matters for AI
Privasys Team·
Artificial intelligence is transforming every industry, but it comes with a critical challenge: how …
Read more →