Encrypt data in use
Protect sensitive data during computation inside trusted execution environments (TEEs).
Secure hosting
Take entire classes of attacks off the table. Deploy sensitive software in minutes with a familiar Git workflow, on your infrastructureinfra or ours.Take entire classes of attacks off the table. Deploy in minutes with a familiar Git workflow, on your infra or ours.
Trusted by
From engineers trusted by industry leaders
Protect workloads. Verify what runs.
Detect deployment tampering
Verify production matches reviewed source and build inputs through reproducible builds.
Deploy in minutes
Deploy to confidential computing in minutes with Git, without building your own platform.
How it works
Deploy in minutes
From source to a verifiable enclave in minutes. Watch this video for a full platform walkthrough.
1
Initialize
Run caution init to create a Procfile and other data required for the application.
$
caution init
Initializing the app...
2
Deploy
Push with git push caution main. Caution builds a reproducible
enclave image and provisions the TEE.
$
git push caution main
Building enclave image...
Deployed to enclave
3
Verify
Run caution verify to rebuild the image, compare hashes,
and confirm exactly what the enclave is running.
$
caution verify
Collecting source code...
Rebuilding image...
Comparing hashes...
Attestation verification PASSED
Verify the layers confidential compute leaves opaque
Regular cloud
Trust the operator. Production stays a black box.
Confidential compute
Trust the hardware. The software stack still stays opaque.
- Application
- Runtime
- OS / Kernel
- Hardware / TEE
- Compiler / Toolchain
Verifiable compute
Don't trust. Verify every layer yourself, down to the compiler.
- Application
- Runtime
- OS / Kernel
- Compiler / Toolchain
From engineers trusted by industry leaders
Use cases
How teams use Caution
For sensitive workloads where integrity failures would be costly—from custody and signing to confidential AI.
Verifiable custody & signing operations
FintechShow regulators and customers that key management and transaction signing happen only in attested, source-verified environments.
Verifiable LLM inference over sensitive data
AIServe LLMs and other models in verifiable environments so users can confirm the exact models and runtime that handled their prompts and data.
Verifiable staking infrastructure
BlockchainGive delegators and protocols independent proof that staking infrastructure is not forked, modified, or tampered with.
Verifiable oracles & data feeds
FintechRun oracle and pricing services in verifiable enclaves to demonstrate the integrity of each price feed, signal, and the code that produces it.
Verifiable nodes
BlockchainExpose cryptographic proof that your full node binary matches the reviewed source and configuration.
Verifiable model training pipelines
AIEnsure training runs execute approved code on approved data, with attestation evidence for audit and compliance.
Verifiable confidential AI for PHI
HealthcareProve that patient data never leaves a verified enclave, meeting HIPAA requirements with cryptographic evidence.
One workflow for secure enclaves
Caution runs across AWS Nitro today, with Intel TDX, AMD SEV-SNP, and TPM 2.0 attestations coming in 2026.
FAQs
Frequently asked questions
Caution is a verifiable compute platform that adds an extra layer of integrity guarantees on top of confidential compute. It cryptographically links the code running inside an enclave back to the reviewed source code, build inputs, and configuration that produced the enclave image, so anyone can verify what is running in production.
Caution currently supports deployments on AWS Nitro Enclaves, with additional attestation backends in active development.
No. Caution builds on top of AWS Nitro Enclaves, not instead of them. Nitro provides hardware-level isolation and attestation. Caution extends those guarantees by linking enclave measurements back to auditable source code and reproducible builds.
Book 20 minutes with one of our engineers. We’ll discuss your goals, answer technical questions, and help you get ready to deploy with Caution.
Caution offers bring-your-own-compute and fully managed deployment options. Because Caution is open source, teams can also self-host it if they want to operate deployments independently.
Compare the options in the deployment models reference.
Get started
Deploy confidential compute in minutes. Prove exactly what is running in production, from source code to live enclave.