ARCA Trusted OS
Remove data security barriers and innovate faster
Remove data security barriers and innovate faster
A trusted OS for secure container environments that solves the challenge of securing data-in use, with full-stack protection of your sensitive data.
Enterprises that need robust data security can move to the cloud and edge and innovate with confidence. ARCA is a hardware-based trusted execution environment that’s easy to deploy and use, and secures your sensitive data through its entire lifecycle. ARCA Trusted OS bridges the gap between confidential computing and scalable infrastructure.
ARCA Trusted OS protects the full stack – from hardware, to kernel, to application. It removes the pain from key management, while helping ensure your data maintains confidentiality and integrity, even when in use.
Full-disk encryption, read-only system images, and secure boot. Only trusted kernels and system images can boot on the ARCA Trusted OS.
Learn more >UEFI firmware used for secure boot and a TPM for decryption of system and data partitions.
Learn more >ARCA Trusted OS features minimal images, a hardened kernel, container sandboxing, and protection of the host OS kernel and OS files.
Learn more >Secure code execution through AMD Secure Encrypted Virtualization (SEV) enclave and ARM TrustZone enclave. Only authorized code can access your data – meaning it’s protected in use, at rest, in transit.
Learn more >An accessible certified cryptographic service, which enables clients to easily manage keys and comply with regulations. It is also crypto agile, designed to integrate with most cryptographic back-ends.
Learn more >Enterprises looking for the advantages of cloud services to reduce the cost of ownership and the management burden of their IT infrastructure, can access the CYSEC ARCA product through either a public or a private cloud architecture.
ARCA Trusted OS can be used to isolate and execute sensitive workloads with Google Cloud Platform (GCP) using confidential computing on demand.
CYSEC offers you a Swiss-based cloud hosting environment for Kubernetes containers and workloads, via Confidential Container-as-a-Service (CCaaS).
Deployment is rapid and options adaptable to the level of trust you require for your sensitive data.
Companies who want to have internal management of sensitive data for their infrastructure can access ARCA Trusted OS with a light-weight appliance, which is deployed on premise in an average of just three weeks.
ARCA is hosted on your private cloud via a lightweight appliance for data centers. The appliance is deployed on bare metal, and gives you direct access to the cryptographic backend as well as oversight of key lifecycle management.
ARCA appliance includes:
- TPM 2.0
- UEFI with secure boot
- Certified HSM (optional)
- ARCA Trusted OS
Deployment is rapid, on average, 6-8 months faster than the alternative providers. Easy to maintain with built-in tools. Full training is provided to ensure you have the capabilities and knowledge to manage ARCA effectively.
ARCA Trusted OS can be embedded into your on-board computers (OBC).
This custom distribution of the ARCA Trusted OS, designed to run applications on most embedded hardware platforms. Deployed in the backend, it provides the first comprehensive trusted execution environment (TEE) to secure edge-computing devices.
ARCA Trusted OS provides a secure environment for your container-based workloads, while also being straightforward to integrate, maintain, and secure.
ARCA Trusted OS was specifically engineered to combine the full-stack security performance of a trusted OS with the power, CPU, mass, and volume constraints of embedded systems.
“We've been partnering with the CYSEC ARCA Trusted OS for over two years. Our customers are among the largest and most sophisticated financial services companies in the world and we've been able to consistently and successfully service them with ARCA. We would recommend the product to others.”
“CYSEC doesn’t just identify the security vulnerabilities in a fintech environment, it provides prioritized remediation advice, and then validates implementation. I recommend CYSEC LAB to any fintech player needing pentesting services.”
“The economics of satellite IoT communications systems depend on efficient resource management. Processing, memory, and power dedicated to security must be minimal. Finding the perfect trade-off and approach is difficult and requires skillful experts at the forefront of cybersecurity technologies, both in hardware and software.”
“We are very happy with the service provided by CYSEC LAB. We are impressed with the rapid comprehension of our needs and preliminary architecture design, appreciated their clear advice and high availability.”
“CYSEC was extremely flexible throughout our engagement, which enabled us to meet complex business objectives. They worked to our multi-milestone schedule, and respected our priority order for feature deployments. Further, they showed an impressive ability to adapt to our changing timeframe and evolving demands during the deployment. They were professional, responsive, and rapid.”