Confidential VM
Deploy arbitrary containerized app to TEE in minutes. No steep learning curve. No hardware maintenance costs. Just focus on delivery.
Features
Everything you need to deploy secure, confidential applications
Instant Launch
Deploy TEE apps in minutes, not weeks. Phala eliminates complex setup by supporting arbitrary Docker containers, saving you time, money, and engineering effort. You can focus on building, not infrastructure.
Full Chain of Trust
From TEE attestation, key management infra, all the way to your source code, your TEE runs with security best practices enforced by default and backed by cryptographic proof.
Open Source Infra
Built on dstack, the industry's most open TEE framework. Transparent, extensible, and self-hostable. No vendor lock-in, no hidden code. You have complete control over everything.
Frequently Asked Questions
Everything you need to know about Confidential VMs
What is a TEE or Confidential VM?
A Trusted Execution Environment (TEE) or Confidential VM (CVM) is a secure environment that isolates code and data from the host system using hardware-level protection. Even the vendor or the operating system cannot access the app data or interfere with code execution. It enables verifiable and encrypted computation.
How is Phala different from AWS Nitro and Azure CVM?
Phala saves you money. You can deploy any containerized app without changing your code. You need to spend weeks porting your code to AWS Nitro or Azure CVM. Phala is secure. It enforces the security best practices by default. Achieving the same level of security on AWS Nitro or Azure CVM takes weeks of manual work. Phala is open. The infrastructure [dstack] is fully open source. AWS Nitro and Azure CVM have proprietary components and APIs creating vendor lock-in.
How fast can I launch a CVM with Phala?
You can launch a CVM on Phala in minutes, not weeks. Our lift-and-shift experience reduces setup time from weeks to just 1 day, saving you time and operational costs.
How does Phala ensure end-to-end security and verifiable compute?
Phala implements a full chain of trust from hardware, key management, network to code. Every component is cryptographically attested, enabling verifiable compute and enforcing a zero-trust architecture by default.
Is Phala's Confidential VM platform open source?
Yes. Phala is built on [dstack], a fully open-source TEE framework. You can inspect, modify, and self-host the entire stack. No hidden code, no restrictions.
What hardware does Phala use for TEE Confidential VMs?
Phala runs on TEE-enabled hardware such as Intel Xeon CPU (for Intel TDX) and NVIDIA H100/H200 (NVIDIA Confidential Computing).
How much does it cost to use Phala CVMs?
You can start exploring TEE development with a CVM for free! Take advantage of $20 in CVM credits before you scale. Phala offers transparent pricing with significant savings in delivery time and engineering resources. Learn more on our [pricing page].
