eCora provides a Foundational Security Platform that embeds hardware-bound security and assurance controls directly into the operating system for application execution. This platform allows businesses to deploy applications with integrated security without requiring application code rework. The service focuses on protecting valuable assets like AI models and securing applications beyond their end-of-life cycle.
Funding
$264.6K raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Organizations face challenges in protecting AI models and sensitive data when deploying them on untrusted devices or in environments where unauthorized access and data leaks are a concern. Existing security measures often fail to prevent theft or leakage of AI intellectual property and private data during model execution. This limits the adoption of AI solutions, especially in regulated industries and edge computing scenarios.
Solution
eCora provides a Secure Application Stack that utilizes encrypted virtual machines to protect AI models and sensitive data during execution, ensuring confidentiality even on untrusted devices. The solution employs confidential computing technology to keep applications encrypted while executing, preventing access by unauthorized parties, including users, cloud providers, and even eCora itself. Data sent to and received from the container remains encrypted, ensuring that only the intended user can view it. The stack allows users to define policies and rules that are checked before and after every execution request to control access rights, limits, quotas, and billing.
Target Audience
The primary target audience includes AI developers/vendors concerned about protecting their model IP and AI users/customers in regulated industries who need to deploy AI models securely within their IT environments.
Features
- Encrypted containers for existing applications or native WebAssembly (Wasm) modules
- Confidential computing technology to ensure applications remain encrypted during execution
- Policy and rule definitions to control access rights, limits, and quotas
- Easy deployment using existing tools to encrypt applications into containers
- Support for decentralized edge architecture that works offline
- Data-centric security implementing fine-grained Zero Trust at the individual data record level
- Hardware-backed security using encrypted enclave technology with keys generated and retained in secure elements (TPMs)
- Secure By Default stack that puts security at the base of the stack, automatically enforcing security and assurance controls