Caution is a verifiable compute platform that cryptographically links code running inside confidential enclaves back to the reviewed source code, build inputs, and configuration that produced it. Built on AWS Nitro Enclaves, it extends hardware-level isolation with full-source bootstrapping and reproducible builds, enabling teams to prove exactly what runs in production. The platform integrates with existing CI/CD and infrastructure-as-code tooling, allowing deployment in minutes.
- Artificial Intelligence
- Cybersecurity
- Developer Tools
- Regulatory & Compliance Technology
- Software Only
Funding
Funding not disclosed
Founders
Product
Problem
Confidential computing environments like AWS Nitro Enclaves provide hardware-level isolation but leave a critical gap: they cannot prove that the code running in production matches the source code that was reviewed and approved. This opacity makes it difficult for security-conscious teams to detect tampering, verify supply-chain integrity, or demonstrate compliance to auditors, especially when build toolchains and dependencies are themselves opaque and non-deterministic.
Solution
Caution provides a verifiable compute platform that cryptographically links the code running inside an enclave back to the reviewed source code, build inputs, and configuration that produced it. The platform verifies the entire stack down to the kernel, not just the application layer, using full-source bootstrapping and reproducible builds. It surfaces unauthorized changes before they reach production, alerting teams if a binary does not match the expected source. Caution integrates with existing CI/CD, infrastructure-as-code, and deployment tooling, so teams can deploy to AWS Nitro Enclaves in minutes without replacing their workflows. The platform is fully open source, allowing independent audit of the build process and verification system.
Target Audience
Primary customers are security-conscious engineering and DevOps teams at enterprises and startups that deploy sensitive workloads in confidential computing environments and need cryptographic proof of software integrity for compliance, audit, or supply-chain security purposes.
Features
- Cryptographic linking of enclave measurements to auditable source code, build inputs, and configuration
- Full-source bootstrapping using the StageX Linux distribution, ensuring the entire software stack is deterministic and auditable down to the kernel
- Reproducible builds that produce bit-for-bit identical outputs, enabling independent verification of deployed software
- Integration with existing CI/CD, infrastructure-as-code, and deployment tooling
- Support for AWS Nitro Enclaves with additional attestation backends in active development
- Open-source platform that can be self-hosted or deployed via bring-your-own-compute or fully managed options