Caution is a secure hosting platform built on verifiable compute. You deploy applications through a familiar developer workflow, while Caution handles infrastructure setup, enclave builds, and deployment.

It protects data in use by isolating workloads from the surrounding host. Anyone with access to the source code and build inputs can also independently verify what is running in production.

If an attacker modifies your software during building or deployment, you can detect the change and block the modified software from receiving protected data or secrets.

The platform is fully open source.

Explore how Caution works.

Caution is suited to software that handles sensitive data or critical business logic, where a compromise would have serious consequences. Examples include:

• AI agents with access to sensitive data or production credentials
• Private AI inference
• Transaction construction and signing
• MPC cosigning
• Payment processing
• Policy and fraud engines
• Secrets management
• Applications handling protected health information

Verifiable compute is a way to run software with cryptographic evidence that it matches reviewed source code, build inputs, and configuration.

It builds on confidential computing, where workloads run in isolated environments called secure enclaves or trusted execution environments (TEEs) that protect data while it is being processed. But isolation alone does not tell you whether the application inside is the one you intended to run.

Verifiable compute lets you verify this cryptographically by combining reproducible builds with hardware attestation. Anyone with access to the source and build inputs can rebuild the software and compare its measurements with signed evidence from the running enclave. This gives you cryptographic evidence that the deployed software matches the code you reviewed, helping you detect changes an attacker may have introduced during building or deployment.

Learn how verifiability and reproducible builds connect source code to a running deployment.

No. You can deploy an existing containerized application without rewriting it for Caution. Some changes may be needed to its build, deployment configuration, or how clients connect.

Independent verification requires a reproducible build. Your chosen encryption setup determines whether client integration is needed.

Our AI coding agent skills can help prepare your application, configure deployments, and troubleshoot issues.

Caution offers bring your own compute (BYOC) and fully managed hosting. Because Caution is open source, teams can also self-host it to operate deployments independently.

Compare the options in the deployment models docs.

Book 20 minutes with one of our engineers. We’ll discuss your goals, answer technical questions, and help you get ready to deploy with Caution.